Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8890A0FB92202F4913D5A8A72AFD9370D7C0FF9D.cer
File:                     8890A0FB92202F4913D5A8A72AFD9370D7C0FF9D.cer (raw, json)
Hash identifier:          F8bd4Sg5lbqUuMfrOL5+/A5aMIXtkPXIQUiEB/9AnXE=
Subject key identifier:   88:90:A0:FB:92:20:2F:49:13:D5:A8:A7:2A:FD:93:70:D7:C0:FF:9D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6A6F72C841E7FDFB61F734148B3B199E2810003F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/0/8890A0FB92202F4913D5A8A72AFD9370D7C0FF9D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Nov 2023 13:43:05 +0000
Certificate not after:    Wed 20 Nov 2024 13:48:05 +0000
Subordinate resources:    AS: 266204
                          IP: 190.123.196.0/22
                          IP: 2804:3c54::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6f:72:c8:41:e7:fd:fb:61:f7:34:14:8b:3b:19:9e:28:10:00:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 22 13:43:05 2023 GMT
            Not After : Nov 20 13:48:05 2024 GMT
        Subject: CN=8890A0FB92202F4913D5A8A72AFD9370D7C0FF9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1f:b1:ca:4c:6c:e6:57:f7:6b:a3:30:4d:0c:
                    fd:a3:e1:2e:3b:0f:9a:38:2f:ad:d5:d9:04:fd:15:
                    1f:8a:72:d6:3e:ec:d6:e6:97:4d:b9:ea:67:4f:32:
                    48:f0:8b:5a:63:c8:ac:e3:55:11:76:6a:86:a4:fe:
                    3e:55:44:c9:5f:4a:3f:73:ed:af:74:89:c1:b9:d7:
                    a1:0e:16:d8:d7:d2:c9:b9:13:0d:7f:c6:2b:35:c9:
                    86:26:ee:cc:d0:76:cb:89:70:e0:7f:95:67:8c:c8:
                    4d:df:e0:bf:07:0a:67:e1:cf:8f:4f:ba:db:06:e4:
                    97:a4:83:c4:41:fb:b7:b4:b0:94:38:0b:73:a8:79:
                    e3:ec:b8:97:8b:ab:40:27:36:51:85:0a:69:18:4c:
                    63:4f:a5:fd:e7:b7:16:ec:05:cf:df:a0:af:75:76:
                    12:2b:ab:3b:9f:7e:53:14:56:8c:68:8c:92:fb:fd:
                    e0:5e:a0:a7:e5:d8:f2:87:0d:86:f2:b8:b6:50:fd:
                    61:f2:98:44:32:43:91:00:1e:86:9d:80:e7:21:01:
                    aa:15:e4:f8:23:53:2d:ae:09:96:32:6f:e3:db:ff:
                    33:e0:ec:7f:df:ec:09:df:30:f2:3f:2b:8e:fe:86:
                    bd:63:33:4a:45:b3:d3:8e:f2:f0:57:64:d6:7e:26:
                    67:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                88:90:A0:FB:92:20:2F:49:13:D5:A8:A7:2A:FD:93:70:D7:C0:FF:9D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/0/8890A0FB92202F4913D5A8A72AFD9370D7C0FF9D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.196.0/22
                IPv6:
                  2804:3c54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266204

    Signature Algorithm: sha256WithRSAEncryption
         76:9b:cd:b4:35:42:e5:4e:29:88:fe:7b:70:13:f3:b8:60:f8:
         70:3a:11:90:8a:9e:f7:97:88:ed:50:68:54:5c:b5:4f:58:7e:
         0d:10:f1:11:e9:9f:27:4b:2a:2a:da:65:8f:56:31:57:79:b0:
         65:a3:70:51:20:5a:8d:8d:fe:dc:2d:b0:d7:62:10:e7:37:2c:
         cd:41:06:fc:30:56:a9:b3:98:3a:6d:00:a8:ee:b2:af:e3:fa:
         d1:97:c5:00:c9:0a:9d:9f:ea:b2:d8:72:ba:4c:f3:de:c8:06:
         11:38:1c:45:2e:58:a5:9d:8b:41:ee:60:81:d5:91:cb:85:ed:
         e5:35:ee:b6:c2:2c:3c:2c:0b:8c:94:ae:03:86:7f:5f:68:14:
         b9:da:fa:66:05:bb:c0:44:ba:1a:79:14:26:27:ab:8e:3b:b3:
         40:8b:f0:43:dd:61:1d:94:53:d3:92:a1:1a:28:b4:a5:68:8c:
         1a:e0:8b:f2:19:bc:18:98:71:31:72:9c:c5:e4:f7:27:81:17:
         b6:32:d6:d5:2d:67:48:1d:44:5d:8b:83:c9:fe:07:bf:24:7f:
         e0:34:0b:4e:6d:b5:a0:9e:28:d1:ce:57:ef:13:b2:33:54:d3:
         3b:20:36:cc:bc:78:0b:92:fd:09:b0:24:d6:6e:55:15:72:98:
         7d:2a:ab:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----