Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/49F994834C75CE03A545CED4889AD66B26C112CB.cer
File:                     49F994834C75CE03A545CED4889AD66B26C112CB.cer (raw, json)
Hash identifier:          /Xq2CmKNW6K5glDO7c0s4apZn2mun5xctdDDvd34X3M=
Subject key identifier:   49:F9:94:83:4C:75:CE:03:A5:45:CE:D4:88:9A:D6:6B:26:C1:12:CB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       504FBB4D1651AE45A30285DB2AD133FA9C273E7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/0/49F994834C75CE03A545CED4889AD66B26C112CB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Oct 2023 02:35:07 +0000
Certificate not after:    Wed 02 Oct 2024 02:40:07 +0000
Subordinate resources:    AS: 269034
                          IP: 45.178.108.0/22
                          IP: 2804:5e74::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:4f:bb:4d:16:51:ae:45:a3:02:85:db:2a:d1:33:fa:9c:27:3e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  4 02:35:07 2023 GMT
            Not After : Oct  2 02:40:07 2024 GMT
        Subject: CN=49F994834C75CE03A545CED4889AD66B26C112CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b1:08:f0:9a:bd:3e:7a:80:53:1d:30:0a:22:
                    0d:51:c3:38:dc:c9:14:d8:82:90:6e:40:90:8d:35:
                    0a:78:b8:d0:88:a1:fb:c7:4c:63:20:62:6e:b5:ad:
                    a7:da:ab:3b:fe:60:c3:52:a1:87:11:af:33:a7:de:
                    96:27:e7:d2:12:60:72:d7:5f:fa:26:2b:0c:bb:92:
                    86:45:83:8b:c3:54:7e:4b:a4:85:f7:2c:38:e5:fc:
                    8f:6f:a5:3d:ce:1e:d9:e0:4f:dd:55:ae:91:1e:cc:
                    9d:15:42:8c:2b:95:e7:f6:5b:be:35:57:fc:3d:04:
                    fd:0d:bd:d9:50:88:43:5b:ee:ed:e9:19:d5:17:4c:
                    af:19:77:31:93:dc:01:c4:d7:64:16:c9:19:37:85:
                    0e:f6:99:8a:1e:eb:df:ee:d5:ee:4b:06:a5:55:d6:
                    c3:1a:f7:30:3c:e2:9f:09:d7:76:d0:7f:0d:75:06:
                    44:12:ec:ef:64:10:56:4f:a7:b9:1c:34:e4:b0:e5:
                    60:90:ad:99:dd:81:e4:9a:6b:6f:74:8c:98:75:99:
                    d7:67:86:11:f9:6a:0c:6c:f7:14:56:14:d9:f4:10:
                    76:48:3b:ba:69:0f:f3:9a:a2:1b:d9:d0:7f:06:40:
                    42:3a:74:d8:1b:d0:65:db:6b:e6:ab:ea:24:5c:0f:
                    b2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:F9:94:83:4C:75:CE:03:A5:45:CE:D4:88:9A:D6:6B:26:C1:12:CB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/0/49F994834C75CE03A545CED4889AD66B26C112CB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.108.0/22
                IPv6:
                  2804:5e74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269034

    Signature Algorithm: sha256WithRSAEncryption
         82:c9:34:9d:d0:c9:07:eb:24:5a:d0:8d:22:0e:1e:fc:ec:88:
         8f:f7:67:ee:e4:39:e0:a8:de:60:ef:8e:40:05:f0:e3:a9:d6:
         93:07:af:be:4a:ea:4b:18:c3:ce:78:e7:a8:54:a3:46:b0:93:
         49:e5:b0:47:e9:22:62:46:9e:d0:df:fe:c5:fa:21:fd:e5:12:
         e0:91:14:62:ee:8d:f8:54:97:34:9d:5b:aa:76:9e:b0:c9:bb:
         36:8e:e5:1f:df:02:8a:ab:4d:1c:45:39:0f:f2:98:27:7c:19:
         69:87:50:d1:d5:70:f9:b0:2b:11:bd:75:95:60:58:5c:cf:72:
         f5:62:57:55:76:e1:5d:d0:67:fa:c1:d3:73:14:95:ae:a7:76:
         27:48:0e:7f:cf:cf:da:98:c9:e3:05:3c:da:2d:63:e0:67:b3:
         88:f9:4f:43:99:a6:30:83:11:ff:1f:67:36:30:ad:10:8c:68:
         c6:b4:2d:62:54:97:47:28:09:3f:1b:b0:4e:08:cc:2e:2d:f8:
         08:56:00:80:51:56:58:e2:2c:42:9b:3d:c0:ce:39:b0:28:cf:
         ac:a9:f5:70:e1:be:04:35:e1:20:e5:4e:0d:64:5e:0a:89:0b:
         0a:5f:e6:66:ec:2d:55:ef:cb:13:e7:04:74:f9:2a:09:41:8f:
         6e:61:cc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----