Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/490DE9D487209F7FB1D8289E1D5AE81A1F208955.cer
File:                     490DE9D487209F7FB1D8289E1D5AE81A1F208955.cer (raw, json)
Hash identifier:          e4QoHiuWcpwVNZkBwf7wfwJuU8vxE63XlPmq58oSKSM=
Subject key identifier:   49:0D:E9:D4:87:20:9F:7F:B1:D8:28:9E:1D:5A:E8:1A:1F:20:89:55
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       124E736A9F8CF695FA748322072419C8B116B448
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/0/490DE9D487209F7FB1D8289E1D5AE81A1F208955.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 01 Nov 2023 02:56:12 +0000
Certificate not after:    Wed 30 Oct 2024 03:01:12 +0000
Subordinate resources:    AS: 61659
                          IP: 131.108.28.0/22
                          IP: 2804:1c84::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:4e:73:6a:9f:8c:f6:95:fa:74:83:22:07:24:19:c8:b1:16:b4:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  1 02:56:12 2023 GMT
            Not After : Oct 30 03:01:12 2024 GMT
        Subject: CN=490DE9D487209F7FB1D8289E1D5AE81A1F208955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:7e:71:a4:3f:70:86:65:6b:ba:48:56:cd:d7:
                    1e:a0:26:74:fb:7c:24:07:eb:39:19:f5:bb:8b:bb:
                    ad:c8:ee:e0:f0:d9:09:e7:e5:d6:21:90:26:65:11:
                    a6:ef:e9:2a:c8:82:e7:33:d5:95:9f:2e:91:99:51:
                    d1:00:78:e7:5a:22:60:61:fa:85:02:b6:c6:15:13:
                    b3:36:18:d5:c8:a5:29:df:b5:c0:f4:67:da:ee:5c:
                    3f:e1:4d:a3:55:bc:60:da:9e:68:2c:1f:fb:fa:17:
                    c7:87:2d:2e:d0:0d:1f:77:75:72:87:a8:f6:17:f2:
                    71:fa:64:0a:6b:f6:e3:32:0a:4b:a8:bc:dc:e2:bd:
                    0b:28:70:b7:0d:ed:ad:39:81:a2:74:27:4b:92:54:
                    dd:d9:53:2b:ba:24:f2:46:7c:95:0e:f5:e3:b3:13:
                    cd:35:a9:10:23:a5:55:f2:43:98:f7:c2:d3:17:4c:
                    f0:f3:fd:fa:f4:2f:41:b2:7a:8f:6e:f8:df:37:08:
                    b2:a4:39:81:24:6d:c6:bc:ed:d2:6b:c7:6c:ac:ae:
                    c0:ca:80:7e:56:8a:dc:33:8d:90:32:c9:80:28:33:
                    8f:df:4d:cb:07:b9:f3:a5:62:39:b3:b4:88:81:e0:
                    34:cc:c3:6e:9f:00:4d:77:a5:0a:a6:e3:a0:77:1f:
                    7d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:0D:E9:D4:87:20:9F:7F:B1:D8:28:9E:1D:5A:E8:1A:1F:20:89:55
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/0/490DE9D487209F7FB1D8289E1D5AE81A1F208955.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.28.0/22
                IPv6:
                  2804:1c84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61659

    Signature Algorithm: sha256WithRSAEncryption
         a3:f4:9c:aa:91:84:5e:e4:22:1b:af:db:15:ae:1e:fc:39:52:
         ab:24:55:bf:18:dd:6e:59:23:4b:a9:a8:42:99:cc:70:86:df:
         f3:4f:73:b6:1f:54:98:d2:8d:09:e8:ee:98:ee:98:08:2e:ff:
         a2:ed:90:ae:e3:3e:b1:6a:ab:d4:02:0d:b7:a2:80:5b:9d:09:
         0f:ad:74:7e:85:75:22:8d:e3:98:41:d1:fa:b3:66:70:f9:b2:
         1b:a2:1c:ed:ae:00:7a:c0:20:a3:d9:9b:48:d1:c3:c5:41:30:
         79:77:f9:e5:c1:29:ad:49:ff:df:a3:ef:2d:16:b6:b5:6a:2a:
         c3:b3:f7:61:56:b5:0c:05:14:18:3c:8f:b0:fb:fb:a8:5f:b3:
         2c:1d:d7:9e:f7:62:eb:c3:06:14:0c:b1:3b:48:e9:fb:bc:9e:
         dd:45:1b:a9:57:1a:f5:d5:04:2b:6f:35:ac:47:af:cc:43:94:
         28:70:46:60:dd:be:83:e7:57:c8:bd:7c:84:e8:6b:5d:7b:85:
         9c:ea:d4:27:83:af:d1:6a:55:c9:df:ec:94:73:a2:38:61:1d:
         aa:2b:7e:53:a9:e6:88:9d:b4:86:06:35:ca:85:a7:de:96:da:
         e2:99:c6:ec:ae:63:a3:42:4f:81:af:46:b0:27:6b:67:0b:1b:
         71:e0:18:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----