Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/49A97989CA8D515964945CB3607F0D2D29603AA1.cer
File:                     49A97989CA8D515964945CB3607F0D2D29603AA1.cer (raw, json)
Hash identifier:          GjzN1m3TR/jWwWOJtZ8hbIjimVljGS1heK3Q8bAyOoc=
Subject key identifier:   49:A9:79:89:CA:8D:51:59:64:94:5C:B3:60:7F:0D:2D:29:60:3A:A1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       17ADA4658BDDC59447A68FC7179129C38FA75610
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/0/49A97989CA8D515964945CB3607F0D2D29603AA1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Oct 2023 16:25:30 +0000
Certificate not after:    Thu 17 Oct 2024 16:30:30 +0000
Subordinate resources:    AS: 262378
                          IP: 170.79.192.0/22
                          IP: 177.131.16.0/20
                          IP: 2804:2d80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ad:a4:65:8b:dd:c5:94:47:a6:8f:c7:17:91:29:c3:8f:a7:56:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 19 16:25:30 2023 GMT
            Not After : Oct 17 16:30:30 2024 GMT
        Subject: CN=49A97989CA8D515964945CB3607F0D2D29603AA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:20:32:11:02:51:d4:66:35:c7:39:79:d6:33:
                    fc:f1:16:35:41:d0:56:ac:96:69:bc:a7:a2:85:b8:
                    11:23:77:96:8b:b1:d7:85:e9:e6:12:3a:59:2a:26:
                    9a:e1:5a:87:b8:55:ef:86:e0:46:95:3c:f4:27:76:
                    bd:fe:61:f2:95:4f:c6:00:a0:17:e5:d1:e9:b0:f9:
                    5e:2d:d6:32:91:62:21:c4:73:1c:03:96:57:66:ba:
                    d1:30:23:6e:04:7b:06:49:f0:96:1d:62:ca:2a:1a:
                    fb:d2:b2:fa:56:36:5c:42:fa:07:de:d4:fe:f4:76:
                    92:eb:01:aa:34:c9:7d:de:91:5a:60:89:df:6e:42:
                    41:8d:1b:d8:61:72:35:c9:5e:bf:61:a0:ae:36:b2:
                    41:43:bf:40:7e:c4:e3:e9:4b:a8:2d:29:cf:2b:db:
                    e4:bf:c6:7b:27:38:f6:ed:65:66:36:d8:d1:51:4f:
                    7c:49:cc:4f:1c:ca:1a:33:fc:5b:07:8d:df:0f:06:
                    2d:9c:2f:d9:c0:2e:e6:2e:ab:60:8e:cb:2f:b3:a5:
                    12:6c:29:7f:9c:63:8a:61:55:4a:96:06:69:f0:20:
                    de:92:9e:4c:26:55:b2:52:4f:8f:bb:6f:23:e4:7f:
                    69:c5:a7:e5:47:eb:f3:99:1c:51:a8:b7:0b:ac:d3:
                    df:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:A9:79:89:CA:8D:51:59:64:94:5C:B3:60:7F:0D:2D:29:60:3A:A1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/0/49A97989CA8D515964945CB3607F0D2D29603AA1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.192.0/22
                  177.131.16.0/20
                IPv6:
                  2804:2d80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262378

    Signature Algorithm: sha256WithRSAEncryption
         93:f6:95:33:12:c1:dd:29:e1:97:b7:6c:cb:77:54:fa:b2:f7:
         31:d4:a5:73:db:a5:70:0b:73:d5:6f:4f:0a:33:09:a8:34:38:
         a9:35:70:df:b5:aa:ce:f6:b3:da:ad:1a:32:8b:3f:ce:df:b2:
         ba:99:c1:73:b2:2f:e7:a9:3c:61:e6:1a:06:ff:b5:10:46:62:
         c9:9a:26:7c:08:d0:0d:df:f2:88:10:67:a1:76:7b:5d:cb:27:
         ff:b8:9f:db:89:26:e9:01:54:c9:06:73:73:81:af:ff:25:07:
         4c:a6:3a:5b:90:c9:6f:ab:a2:e0:6d:21:f8:08:da:aa:d5:bf:
         a1:e7:68:a0:1a:6c:c9:c2:56:ff:7f:91:73:b3:90:9f:87:78:
         94:7a:e5:3b:11:f6:06:5e:17:67:0f:fd:73:aa:a5:77:42:1b:
         96:19:72:a4:a8:29:12:f0:30:49:6b:81:a2:db:94:fb:80:0b:
         75:46:03:d3:f1:44:cc:57:d8:83:a8:d4:63:4b:f3:fd:04:3f:
         d9:e1:7e:4f:a6:3a:8e:84:66:d9:b9:42:17:86:f2:6c:fe:29:
         8c:92:2e:65:7f:af:aa:c1:48:bd:c4:05:fd:49:e1:93:50:46:
         d4:57:c6:92:c3:20:af:2e:bb:72:db:a7:50:a9:42:a8:1f:da:
         95:00:21:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----