Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/489A4EF4D133DC9A829FC327FFED5038FD2206A5.cer
File:                     489A4EF4D133DC9A829FC327FFED5038FD2206A5.cer (raw, json)
Hash identifier:          BNcQ8i1X7vERV1IbzA/9zY7decmkg+NBjrPsDmcLKJE=
Subject key identifier:   48:9A:4E:F4:D1:33:DC:9A:82:9F:C3:27:FF:ED:50:38:FD:22:06:A5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5B925E3B46F0DBDB78EE97D72123948030D92289
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/0/489A4EF4D133DC9A829FC327FFED5038FD2206A5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Sep 2023 12:43:12 +0000
Certificate not after:    Mon 09 Sep 2024 12:48:12 +0000
Subordinate resources:    AS: 273654
                          IP: 2804:8a34::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:92:5e:3b:46:f0:db:db:78:ee:97:d7:21:23:94:80:30:d9:22:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 11 12:43:12 2023 GMT
            Not After : Sep  9 12:48:12 2024 GMT
        Subject: CN=489A4EF4D133DC9A829FC327FFED5038FD2206A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fe:f9:3c:e8:88:5d:61:5c:98:09:26:75:5e:
                    0b:d6:27:91:f3:a2:c6:69:42:af:21:2c:43:b4:12:
                    a9:c8:68:a1:44:29:0f:0a:46:aa:6d:1e:c2:f1:38:
                    d8:1e:95:21:d2:6a:94:be:91:12:91:75:7b:60:f5:
                    a3:b8:aa:81:ad:9f:d8:14:01:c4:df:4c:f1:25:d3:
                    0e:b0:69:22:c3:90:eb:cd:c6:e4:21:62:a8:82:43:
                    bf:df:70:84:2d:e9:e6:26:3d:90:a8:4f:38:9b:41:
                    38:4f:38:82:2f:60:00:4c:11:c2:80:27:46:33:40:
                    db:20:ee:55:e8:d2:8a:7b:5d:9e:2c:f3:b2:39:8d:
                    25:5c:68:cd:a4:7d:cd:41:c3:be:ce:1e:ed:00:e1:
                    6f:84:32:58:40:a8:54:d7:9e:a4:b7:12:c8:77:21:
                    3b:01:d8:83:c2:18:66:ba:ae:00:d9:7a:c3:f0:93:
                    68:17:78:07:89:73:c5:cc:2d:2d:a5:f8:5c:48:74:
                    3c:14:ba:06:7b:fa:54:a4:06:28:e4:f5:8a:5e:02:
                    18:ed:26:67:7e:c9:96:02:5b:0e:31:59:27:1e:bb:
                    fb:a7:72:09:f1:b3:b5:9f:5b:ce:67:13:4b:8e:75:
                    56:ef:b6:7f:45:70:d7:31:e9:da:3d:32:11:bf:c5:
                    a9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:9A:4E:F4:D1:33:DC:9A:82:9F:C3:27:FF:ED:50:38:FD:22:06:A5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/0/489A4EF4D133DC9A829FC327FFED5038FD2206A5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273654

    Signature Algorithm: sha256WithRSAEncryption
         8e:d4:09:ed:06:6a:bb:2b:b3:e6:c6:32:2b:f9:aa:44:4e:6b:
         3f:fb:f1:62:29:9d:6f:4c:56:a7:0f:e0:ad:a0:f7:d0:fb:78:
         9f:d9:fe:a1:ea:56:dc:30:68:71:0a:82:9b:d9:78:82:b7:d2:
         28:0b:fb:13:62:94:32:f8:77:71:a6:db:00:0c:c3:31:21:fe:
         32:69:45:e9:a0:9d:72:2b:a5:0f:aa:46:5a:bd:23:31:20:e0:
         97:48:de:82:d0:f4:13:fe:56:27:8e:c4:5e:30:4b:c1:f6:ec:
         6b:c7:7d:88:8f:72:99:59:74:fd:ff:4d:aa:06:1d:f4:a4:85:
         68:7c:4d:66:d8:91:6f:50:e6:1c:43:c2:d0:b7:4a:28:43:93:
         30:ea:10:8e:7c:2c:2e:b4:47:30:3b:1a:af:1e:c3:6b:77:b0:
         88:25:c7:ca:77:c5:b9:a8:9e:6d:2f:44:aa:1b:33:88:a2:99:
         99:98:1a:2e:be:6d:6c:a8:7c:34:b6:fe:eb:04:c3:b2:74:63:
         91:7a:04:de:42:4b:f2:31:73:c5:19:58:8c:b5:69:1a:cc:8d:
         0a:39:67:84:df:4d:3a:71:32:27:9e:82:92:25:d3:62:a6:ff:
         39:54:15:6f:2b:2a:88:ae:bf:e8:9b:a9:b4:55:f1:14:2b:d8:
         12:0c:74:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----