Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C950BF5AF312EFEE284696D7B1D97BD3C1AA1944.cer
File:                     C950BF5AF312EFEE284696D7B1D97BD3C1AA1944.cer (raw, json)
Hash identifier:          OHfVfGz3ft64hubYcwfJrO7koqPLUwaSAxOb5PnB+Nc=
Subject key identifier:   C9:50:BF:5A:F3:12:EF:EE:28:46:96:D7:B1:D9:7B:D3:C1:AA:19:44
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       09479DE39D2ACB1C8DE9A5B378336C21B7AE8CF6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7EJRtnbDzWaMALwXxZwZVz4X1MCBDCyr69XTqSFNgFBW/0/C950BF5AF312EFEE284696D7B1D97BD3C1AA1944.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7EJRtnbDzWaMALwXxZwZVz4X1MCBDCyr69XTqSFNgFBW/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 13 Jan 2023 13:16:51 +0000
Certificate not after:    Fri 12 Jan 2024 13:21:51 +0000
Subordinate resources:    AS: 273665
                          IP: 2804:8a60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:47:9d:e3:9d:2a:cb:1c:8d:e9:a5:b3:78:33:6c:21:b7:ae:8c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 13 13:16:51 2023 GMT
            Not After : Jan 12 13:21:51 2024 GMT
        Subject: CN=C950BF5AF312EFEE284696D7B1D97BD3C1AA1944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1a:98:dd:62:6a:e5:73:91:18:ff:73:ab:0d:
                    79:7a:b4:3a:4e:9c:99:52:99:a1:f1:95:29:90:bc:
                    0a:24:ba:1d:13:80:f2:7d:4e:b0:ed:bc:78:24:c3:
                    5f:ad:f4:77:97:9c:64:82:7e:95:cd:8f:4a:f8:7b:
                    54:de:df:a5:d0:b2:81:42:5e:60:fa:fc:87:e9:91:
                    2a:07:e3:aa:12:b9:e9:3e:04:09:99:1f:d3:8f:b2:
                    69:65:61:dc:88:d6:16:8c:e4:fd:a0:bf:a9:09:42:
                    34:bb:ae:0a:97:e0:67:e0:c4:06:03:e0:ca:35:5b:
                    d3:3d:0f:65:5b:d0:65:f4:7c:f9:fb:ef:5a:13:c7:
                    d0:94:3a:97:ba:31:4c:4d:81:6c:c8:d9:19:da:b3:
                    58:38:0e:a4:a5:8a:22:d7:19:b9:3d:aa:31:42:f1:
                    fd:1f:a6:1a:69:43:0b:c4:81:d3:d3:80:2e:48:5d:
                    a1:20:b2:d2:87:46:71:96:bb:2f:05:a6:3a:a5:d7:
                    32:f7:a6:58:db:69:64:9e:e8:2b:8d:db:23:59:99:
                    f8:82:00:2a:22:3b:0c:b8:f5:85:48:ad:6e:4f:65:
                    09:e8:97:71:22:63:da:04:ad:00:7d:70:3b:4e:a7:
                    4a:04:f0:25:ab:bc:2b:14:6e:c3:69:57:f4:2f:0c:
                    07:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:50:BF:5A:F3:12:EF:EE:28:46:96:D7:B1:D9:7B:D3:C1:AA:19:44
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7EJRtnbDzWaMALwXxZwZVz4X1MCBDCyr69XTqSFNgFBW/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7EJRtnbDzWaMALwXxZwZVz4X1MCBDCyr69XTqSFNgFBW/0/C950BF5AF312EFEE284696D7B1D97BD3C1AA1944.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273665

    Signature Algorithm: sha256WithRSAEncryption
         7b:23:76:f5:a3:4b:2c:a8:2c:f9:8b:d6:2a:4d:b1:fc:95:0e:
         48:6a:cf:2e:b2:93:52:91:c5:6a:56:2e:30:a3:a1:6f:7a:45:
         db:e4:38:af:59:a9:0f:43:9a:50:fa:3f:9d:af:31:a8:ef:b6:
         02:15:1b:c5:83:04:a3:dc:f3:17:cf:af:10:49:0d:6f:56:ae:
         17:c4:76:2d:2d:a8:57:21:df:15:2a:23:f9:34:73:46:b7:f9:
         4a:28:92:4e:0d:a6:de:f6:6a:97:33:9d:02:d3:f7:35:bd:f0:
         f7:d5:7e:a5:14:5b:29:dc:aa:d8:7b:82:9d:71:7f:0a:b4:e4:
         b8:92:56:78:cd:5c:17:30:c0:be:99:12:84:64:63:5e:3a:02:
         b5:6b:40:8b:87:ba:59:1b:54:31:77:73:b8:24:01:5e:5a:22:
         ca:6c:d5:96:55:0f:86:96:3b:6d:8f:e5:d0:cc:a6:63:63:bd:
         4e:01:47:cf:ba:0b:fd:82:ea:80:42:35:02:9b:be:6b:6e:ab:
         65:f4:62:5e:3b:ea:88:35:af:e5:60:85:db:53:90:fa:a0:e3:
         a1:b5:f6:e9:99:61:51:2f:9e:17:d9:3d:c1:fb:6a:26:09:1f:
         57:d3:00:5b:ea:9f:d5:32:6f:53:39:77:7a:64:bc:e4:b8:1c:
         3d:26:64:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----