Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B5C41D258314BEAD112B53343A51D3ED73995B11.cer
File:                     B5C41D258314BEAD112B53343A51D3ED73995B11.cer (raw, json)
Hash identifier:          6SiU3aXzBEFbcyXSHfzMPJx0zhZWURQWU9x3oX9XIxc=
Subject key identifier:   B5:C4:1D:25:83:14:BE:AD:11:2B:53:34:3A:51:D3:ED:73:99:5B:11
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1C305665A3C59AD3323737E7F7911E1290FE023F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/B5C41D258314BEAD112B53343A51D3ED73995B11.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 30 Jun 2023 04:20:11 +0000
Certificate not after:    Fri 28 Jun 2024 04:25:11 +0000
Subordinate resources:    AS: 61774
                          IP: 200.225.136.0/22
                          IP: 2804:1924::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:30:56:65:a3:c5:9a:d3:32:37:37:e7:f7:91:1e:12:90:fe:02:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 30 04:20:11 2023 GMT
            Not After : Jun 28 04:25:11 2024 GMT
        Subject: CN=B5C41D258314BEAD112B53343A51D3ED73995B11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cc:1c:27:ce:13:14:54:92:95:b0:41:25:81:
                    ab:54:ce:56:7d:35:ba:94:9c:bb:bc:31:74:9e:ce:
                    70:24:04:7d:cd:78:cf:30:09:da:00:94:26:72:49:
                    2b:d6:a6:7a:be:83:4c:f1:11:5d:f3:05:5b:36:7b:
                    31:8e:16:e8:6f:c4:f6:fa:32:05:22:5c:74:e8:f1:
                    94:b6:35:9c:3d:f7:9a:fd:97:38:56:66:86:12:04:
                    bc:87:33:0b:df:7f:85:08:58:5e:fe:6b:c1:ca:e1:
                    2a:83:b6:3e:c1:e0:46:a6:64:e3:12:79:10:6d:ab:
                    87:c8:77:66:b3:45:47:4e:05:62:6b:c5:9d:96:5f:
                    53:cd:66:b2:b5:90:f4:07:59:8b:be:b5:f5:a7:13:
                    08:a9:c7:98:9f:56:43:02:fc:4e:e3:3a:37:fe:5e:
                    13:b0:96:74:3f:48:fa:68:88:4e:22:9a:17:a1:9d:
                    b1:96:1e:00:18:53:80:29:a1:9e:17:c2:d1:e8:46:
                    75:71:ee:0b:e3:b9:14:cb:8c:2d:66:6b:2d:23:0c:
                    a8:bd:9f:84:2e:a6:3e:21:42:40:17:6c:df:62:93:
                    ff:25:4b:6f:c5:2d:11:0c:31:77:71:c0:f1:1f:eb:
                    00:af:df:80:69:8f:ca:3e:48:ef:a6:66:0d:2d:aa:
                    ee:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B5:C4:1D:25:83:14:BE:AD:11:2B:53:34:3A:51:D3:ED:73:99:5B:11
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/B5C41D258314BEAD112B53343A51D3ED73995B11.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.136.0/22
                IPv6:
                  2804:1924::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61774

    Signature Algorithm: sha256WithRSAEncryption
         4c:70:9f:c0:82:ea:f7:57:7c:b2:0d:34:5b:73:bb:e9:4c:42:
         91:5b:65:b1:60:ba:84:f6:99:f6:20:c8:30:cd:83:78:47:b5:
         4c:96:e7:f8:41:38:41:b6:88:f3:60:52:18:2f:c9:5a:1b:aa:
         7a:4e:17:0e:3c:23:9f:47:38:39:65:e5:a9:a1:50:f6:ae:d8:
         cf:23:6e:e3:58:50:2f:e9:3a:11:e9:29:3c:48:ad:34:3a:5a:
         ef:bc:64:07:16:d8:e4:de:be:6e:f2:b4:1b:e3:6a:ef:c1:b4:
         1c:7c:87:bc:77:ac:75:6f:9a:3d:e6:d3:d0:0f:f8:3c:4d:b5:
         a2:63:56:08:7c:98:44:4a:ce:38:80:db:00:ef:25:22:0a:07:
         c8:e1:49:80:58:b6:be:f8:b0:f8:c1:b3:84:a0:4c:18:71:ca:
         46:44:c5:e3:a6:f9:6a:3c:17:c5:60:38:d8:44:18:8f:15:4b:
         ec:20:02:58:30:c7:9e:3e:70:4e:c5:aa:cf:d9:e2:65:44:50:
         fa:7e:bf:d5:1b:6d:88:a8:c8:1d:69:13:2a:df:c0:fd:49:6c:
         8d:ab:36:e2:22:6b:b5:b1:a9:d8:60:4b:b8:e5:f3:28:38:70:
         eb:4d:b9:06:e6:a0:92:91:b3:7c:29:b1:f3:d4:34:26:e2:5d:
         96:19:c6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----