Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FA6AA47AC450A75C30FBC2791F8614A8A805F29C.cer
File:                     FA6AA47AC450A75C30FBC2791F8614A8A805F29C.cer (raw, json)
Hash identifier:          6x0M3UTOUQO54u526+Bz5hAB8qwHI8Tk7PfBIE99/0c=
Subject key identifier:   FA:6A:A4:7A:C4:50:A7:5C:30:FB:C2:79:1F:86:14:A8:A8:05:F2:9C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       77CF3E58394B462BC44D94438F4B9FFEEAD7AAF1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/FA6AA47AC450A75C30FBC2791F8614A8A805F29C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Jul 2023 16:55:59 +0000
Certificate not after:    Mon 22 Jul 2024 17:00:59 +0000
Subordinate resources:    AS: 269572
                          IP: 45.189.68.0/22
                          IP: 2804:66a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:cf:3e:58:39:4b:46:2b:c4:4d:94:43:8f:4b:9f:fe:ea:d7:aa:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 24 16:55:59 2023 GMT
            Not After : Jul 22 17:00:59 2024 GMT
        Subject: CN=FA6AA47AC450A75C30FBC2791F8614A8A805F29C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b5:f5:98:e8:7e:b8:43:c1:0f:28:f6:6a:19:
                    ae:ea:51:6c:3d:5e:36:0b:94:42:b4:ec:0a:4b:72:
                    d6:78:15:e0:79:7d:e5:09:10:de:2d:df:ca:f0:08:
                    5c:9f:4c:cc:e4:9b:3c:c5:4b:57:e2:45:9e:07:78:
                    6f:15:f0:49:0c:04:41:77:ad:0b:a1:1a:5b:dc:06:
                    ba:e7:f0:12:dc:5a:24:12:64:cd:64:28:59:cf:af:
                    bb:15:b4:c4:83:a7:6e:b1:18:7c:94:bc:47:4c:5e:
                    66:aa:d0:3c:0e:49:8f:be:3c:62:05:88:95:eb:cc:
                    a0:55:f7:99:26:91:13:ac:e8:44:9f:13:31:0d:0d:
                    73:a9:1e:13:fd:ab:fb:50:75:d2:2e:fb:a5:88:e2:
                    35:7c:ba:f8:98:49:9b:68:9a:5f:3c:a2:d6:56:a4:
                    02:f1:9f:51:38:1a:ba:07:30:b3:98:c5:4c:32:aa:
                    e9:24:c8:6e:b4:63:3e:3c:47:79:35:1f:1a:ae:59:
                    86:25:c4:6b:10:b8:a7:5a:40:c5:99:73:8c:a1:1b:
                    8e:06:2d:10:89:7f:45:49:16:80:3f:a5:fd:36:6d:
                    eb:1d:69:89:91:d1:21:05:a2:58:8a:79:5e:47:a0:
                    c5:bb:31:d5:e9:35:47:10:92:fd:62:00:ff:ff:b1:
                    4f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:6A:A4:7A:C4:50:A7:5C:30:FB:C2:79:1F:86:14:A8:A8:05:F2:9C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/FA6AA47AC450A75C30FBC2791F8614A8A805F29C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.68.0/22
                IPv6:
                  2804:66a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269572

    Signature Algorithm: sha256WithRSAEncryption
         3a:e0:d1:10:f8:07:6b:05:a5:96:1c:56:32:a9:ea:10:34:10:
         3e:f0:6f:7e:b5:c4:4e:cd:b3:70:17:c7:2e:ad:91:67:d1:8b:
         f9:91:04:87:09:19:bf:e2:e6:53:72:01:a0:4c:ec:fd:75:40:
         74:2c:32:91:e9:9a:1c:9e:e7:6a:56:9b:45:83:f4:72:eb:6d:
         76:aa:f4:6b:b2:61:46:42:7e:c3:65:14:b9:4e:e5:10:8d:15:
         9f:60:0a:80:22:87:fb:57:66:62:26:f9:5a:5f:28:d5:a3:22:
         16:16:ea:cb:87:23:08:dd:79:16:48:35:f3:52:35:a3:e7:a2:
         b5:99:54:a4:78:7f:75:64:df:46:cc:08:43:28:59:8e:d3:cb:
         62:3d:24:0e:c7:c9:85:7a:f4:04:4d:db:4b:30:9a:67:34:aa:
         d1:64:c8:12:91:46:74:3b:63:da:56:3a:53:a2:0c:ab:97:28:
         db:8d:c8:a6:49:ce:1a:0c:5b:54:51:d9:d8:51:a3:f9:e1:49:
         75:4f:29:b1:4c:54:f8:7c:5c:d2:7b:76:ca:bc:4c:19:02:9e:
         3b:cf:bd:6b:9b:82:a6:a1:29:56:fc:7a:81:92:45:45:e7:ba:
         e3:d4:24:66:18:8c:33:c7:b6:e2:29:c5:aa:55:c5:23:40:5f:
         d9:18:49:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----