Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.cer
File:                     9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.cer (raw, json)
Hash identifier:          jYOdT68QtUCxpRU73PAJztRQ+lx6BJASY+fNB3sswsI=
Subject key identifier:   9F:A0:01:FF:2F:FE:B4:FA:4F:82:5B:BF:86:B2:D2:25:65:85:C3:BC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0FEBB906BF01B35CEF689D429FE1A2D805F434B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Sep 2023 19:56:22 +0000
Certificate not after:    Tue 24 Sep 2024 20:01:22 +0000
Subordinate resources:    AS: 264954
                          IP: 168.232.200.0/22
                          IP: 2804:307c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:eb:b9:06:bf:01:b3:5c:ef:68:9d:42:9f:e1:a2:d8:05:f4:34:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 26 19:56:22 2023 GMT
            Not After : Sep 24 20:01:22 2024 GMT
        Subject: CN=9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:74:ac:0c:d7:06:ef:eb:4c:46:a5:c8:2c:82:
                    75:db:2c:e1:ab:bc:ac:26:26:ec:69:9a:d2:d8:94:
                    cb:15:85:d2:a5:39:6c:97:59:d2:bf:d4:31:60:68:
                    22:4c:e4:a4:d9:fc:4c:d0:59:19:cb:4f:eb:ec:6d:
                    9c:ee:1f:f4:16:18:2d:1f:f5:f7:9b:e7:64:6f:9f:
                    83:d5:75:45:3a:ba:07:f0:33:47:68:a4:1c:0f:85:
                    18:bd:61:69:9d:e3:d1:06:41:72:e4:be:52:bf:b7:
                    fd:e6:31:73:5c:97:f3:76:66:a1:41:62:a8:b9:06:
                    d6:4a:3e:03:4c:4e:9d:c6:ce:13:9e:a0:66:d9:4f:
                    fa:ae:d8:15:12:e6:84:ac:52:99:db:f3:50:f1:d6:
                    64:de:44:20:83:68:15:2b:f5:dd:49:ac:4f:b5:85:
                    1b:0e:b4:44:e4:67:c7:bb:a3:79:ec:56:0e:94:15:
                    1d:cd:a7:71:3c:d4:86:ff:ff:c5:7d:c0:49:aa:17:
                    1c:3b:a9:5f:ea:06:87:97:ca:da:4b:28:4a:62:0a:
                    35:51:b6:1c:34:0a:9e:93:10:d1:cd:fd:0c:c0:f3:
                    d2:d3:39:7a:9b:81:39:a8:d2:4d:b8:bf:1b:8f:16:
                    71:74:26:1d:0c:24:b3:23:d6:1b:55:48:ac:8a:0e:
                    f9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:A0:01:FF:2F:FE:B4:FA:4F:82:5B:BF:86:B2:D2:25:65:85:C3:BC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.200.0/22
                IPv6:
                  2804:307c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264954

    Signature Algorithm: sha256WithRSAEncryption
         0c:d1:d6:26:01:31:cf:90:54:5f:6b:34:48:98:13:60:1e:58:
         c9:0d:76:77:52:4f:a9:08:fe:5f:18:cf:6d:56:68:b1:58:5e:
         27:fe:50:bf:26:e3:dc:fb:fe:d8:68:3c:b1:b7:65:58:07:37:
         96:88:a2:5e:c5:77:f8:48:f7:04:c5:9f:e3:45:1c:ba:f5:05:
         36:98:f6:5b:8f:ea:03:25:f0:ea:cf:39:11:b5:6c:5d:d5:4f:
         16:8f:e1:7e:00:76:ce:b7:f3:29:13:fc:7d:ca:38:03:1a:e1:
         2a:2b:94:d7:de:17:91:84:47:e7:46:41:e2:8a:dd:7b:df:96:
         af:9b:67:19:21:ce:d8:1d:62:d2:5a:ea:bf:48:ce:30:72:7e:
         b4:bb:e8:99:a4:39:73:13:da:d3:86:87:e3:9e:29:28:6c:e2:
         6b:a8:fb:91:88:d8:bf:34:23:4b:be:1f:2f:8d:09:92:c4:08:
         d0:35:b4:00:ad:fc:7b:81:f7:18:1e:fd:b9:cb:ff:27:73:50:
         68:25:b0:3e:9d:08:8f:43:61:5a:5d:4a:75:4c:77:eb:f7:87:
         bf:2e:7b:7d:f1:19:2f:48:e5:dd:fc:7a:11:4c:0b:d3:97:e6:
         8a:f0:0f:90:c6:7a:76:25:71:b3:c7:c7:b3:03:00:e8:e5:fd:
         4b:2a:cb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----