Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A54C5623938E2D203BB659007A6EB9AD482A4AE0.cer
File:                     A54C5623938E2D203BB659007A6EB9AD482A4AE0.cer (raw, json)
Hash identifier:          Akrv7Q207z7946B8O2TTLJzPKzKijZ7PAgDQ0SnFjaQ=
Subject key identifier:   A5:4C:56:23:93:8E:2D:20:3B:B6:59:00:7A:6E:B9:AD:48:2A:4A:E0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       16529E7B2342B536C0AB6C2302E09F2CB19BC6C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/0/A54C5623938E2D203BB659007A6EB9AD482A4AE0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 12 Aug 2023 02:54:06 +0000
Certificate not after:    Sat 10 Aug 2024 02:59:06 +0000
Subordinate resources:    AS: 270239
                          IP: 201.46.80.0/22
                          IP: 2804:68f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:52:9e:7b:23:42:b5:36:c0:ab:6c:23:02:e0:9f:2c:b1:9b:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 12 02:54:06 2023 GMT
            Not After : Aug 10 02:59:06 2024 GMT
        Subject: CN=A54C5623938E2D203BB659007A6EB9AD482A4AE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:49:9d:0b:e0:52:09:67:b0:4f:92:a7:54:5e:
                    2b:b6:2f:65:0a:d3:43:55:af:86:1e:9c:d1:a8:a3:
                    5c:fb:d7:7c:9c:90:23:4a:0c:04:e8:38:a6:26:0b:
                    97:d2:06:21:09:07:5e:36:11:37:24:d4:fe:ce:fc:
                    89:39:e8:a7:71:ed:38:ae:f1:e8:4a:77:52:b7:55:
                    35:33:2f:0f:0f:d4:e8:4e:70:fa:f6:b6:d6:b3:bf:
                    3a:c9:e9:bd:8f:08:f7:7a:67:16:5f:48:c0:6f:56:
                    dc:28:06:f0:39:a3:4b:e7:0c:1f:37:6a:01:d0:bf:
                    4c:d2:ff:4d:23:30:4c:68:48:fc:75:49:6c:7f:33:
                    4d:ae:bd:2a:f5:51:bf:06:2a:27:8b:b8:47:98:2c:
                    6f:3d:87:d6:fd:b7:e1:a8:50:4f:69:42:48:7a:1c:
                    c8:e7:75:95:8a:da:95:0d:ff:cd:b5:f8:7c:8e:b5:
                    e0:ac:fa:ac:c6:9a:d2:d6:a3:4f:b0:b0:99:2f:ec:
                    35:36:05:77:ee:d5:ad:66:29:22:ce:c2:5f:9f:d3:
                    2e:27:a0:f0:91:67:ae:24:0e:4d:f5:26:62:6e:28:
                    45:67:a3:e6:dd:4f:06:51:93:8c:6f:2f:48:3e:c3:
                    76:4a:a9:39:9e:9f:79:81:f2:01:f2:16:aa:81:32:
                    c6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:4C:56:23:93:8E:2D:20:3B:B6:59:00:7A:6E:B9:AD:48:2A:4A:E0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BUbAVMC7eQyELqTSpvc9BQYShXywVQyEuVFFdB5AwYwb/0/A54C5623938E2D203BB659007A6EB9AD482A4AE0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.80.0/22
                IPv6:
                  2804:68f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270239

    Signature Algorithm: sha256WithRSAEncryption
         b4:8a:7e:78:2f:a4:53:86:b0:93:f7:d0:23:41:cc:11:6a:83:
         10:ee:85:3f:b2:94:e7:c3:2a:5a:c4:80:0e:b6:e0:5b:f9:16:
         3b:ff:5f:89:70:97:1d:ea:c8:cc:13:d1:69:d9:54:6e:ac:49:
         aa:4f:95:8e:8e:8d:76:41:1e:5d:4e:72:4d:04:0b:5c:46:05:
         90:06:f3:fc:95:e1:f1:ac:e8:0d:49:81:fd:af:60:2f:67:8f:
         0e:3b:8a:35:87:0a:72:64:56:5d:c2:20:72:55:f0:13:d5:50:
         0f:95:5e:53:58:e4:bf:76:90:35:0b:b7:6a:99:01:07:a1:db:
         a8:a9:aa:1d:72:3f:66:56:ce:6d:31:ea:8c:78:e0:c5:52:3e:
         86:a0:95:07:a3:4e:44:56:71:5b:27:2e:6b:73:ff:9c:9c:57:
         8b:60:2e:4c:00:4b:9d:42:e8:c2:4e:cf:b1:31:82:8b:17:18:
         20:09:d1:af:14:f6:dd:7f:83:e4:03:72:03:b1:e5:cb:f9:a4:
         a4:04:48:7a:fb:a7:41:8b:e2:51:74:da:fc:04:e7:76:14:b9:
         d4:b7:2c:0a:ba:34:4a:52:c5:f0:57:20:08:cd:76:0e:4f:a5:
         68:28:fc:8e:63:c6:65:57:c6:6f:4f:6c:c1:ae:43:b5:b6:ff:
         e6:9d:15:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----