Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FA8E3E41A8FE475AE0CCDDDAA80FD2FC7D8387AE.cer
File:                     FA8E3E41A8FE475AE0CCDDDAA80FD2FC7D8387AE.cer (raw, json)
Hash identifier:          jP6tsumoMrTXbOR0awtVxl9DIbSexeqN73M4bT9YWto=
Subject key identifier:   FA:8E:3E:41:A8:FE:47:5A:E0:CC:DD:DA:A8:0F:D2:FC:7D:83:87:AE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       250916126A0836AA08C0BB2BF4545BEB14C467E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/0/FA8E3E41A8FE475AE0CCDDDAA80FD2FC7D8387AE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Oct 2023 20:35:16 +0000
Certificate not after:    Tue 08 Oct 2024 20:40:16 +0000
Subordinate resources:    AS: 270820
                          IP: 186.194.168.0/22
                          IP: 2804:71ec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:09:16:12:6a:08:36:aa:08:c0:bb:2b:f4:54:5b:eb:14:c4:67:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 10 20:35:16 2023 GMT
            Not After : Oct  8 20:40:16 2024 GMT
        Subject: CN=FA8E3E41A8FE475AE0CCDDDAA80FD2FC7D8387AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7f:3a:6b:a5:a2:07:f4:ea:a7:4d:c9:97:a1:
                    57:ac:f1:5f:36:2e:69:9c:77:c9:3d:e4:c6:ed:11:
                    d0:0e:a1:e9:c9:99:a0:fe:7a:01:8e:0b:54:a1:18:
                    79:de:e0:e2:3e:8c:9e:1f:32:30:50:8a:60:24:60:
                    81:49:ea:ef:4e:82:08:34:e8:b1:bd:aa:2b:ba:73:
                    88:30:b2:b1:2b:5b:01:55:ed:ca:50:a5:b7:1a:44:
                    9c:dd:1b:6a:10:1c:13:b5:bb:53:8e:59:f9:0c:1b:
                    4a:1d:62:4e:e3:41:f1:e3:8d:2d:57:c4:07:f4:ad:
                    a0:a5:3a:c0:31:d3:d2:d5:59:f4:b4:76:7f:53:6d:
                    0c:68:1c:ed:de:2b:87:20:7c:64:ff:e6:87:88:b7:
                    f6:34:7b:b9:88:c6:f0:ec:02:1e:c3:8c:55:27:06:
                    6c:a2:9c:fb:4b:df:82:87:c3:d2:66:78:b1:0d:37:
                    b6:27:75:77:57:16:bc:e8:9e:44:40:ed:c7:8f:ed:
                    5a:33:15:2a:51:e6:a7:aa:72:cc:bb:87:fb:de:3a:
                    83:f4:ce:db:62:df:04:82:10:85:46:7d:bb:55:bf:
                    d7:f5:eb:6c:9d:d5:05:ab:94:68:25:08:4c:d1:61:
                    9c:1c:98:ac:41:1c:1a:50:19:6e:03:bc:4e:2e:53:
                    5b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:8E:3E:41:A8:FE:47:5A:E0:CC:DD:DA:A8:0F:D2:FC:7D:83:87:AE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/0/FA8E3E41A8FE475AE0CCDDDAA80FD2FC7D8387AE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.168.0/22
                IPv6:
                  2804:71ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270820

    Signature Algorithm: sha256WithRSAEncryption
         42:74:d1:8f:c9:f4:4a:02:3c:bb:75:01:93:12:b6:58:c6:4c:
         f2:89:1b:51:ed:cb:b7:d7:9b:04:6d:d5:ee:f4:cf:d4:4e:e3:
         05:b4:ce:13:d6:71:ec:ce:b4:1f:e5:10:c6:17:23:b9:26:43:
         fb:dd:df:3b:62:19:f9:55:41:eb:2c:29:58:51:fd:c4:dd:28:
         04:66:9d:94:0d:51:99:21:96:51:7e:ee:ac:c0:b2:b7:63:fe:
         21:99:4e:5d:fd:69:cf:d8:5a:d0:3f:32:af:8b:19:fd:a5:12:
         e0:33:ca:23:e6:eb:8b:80:33:cc:9b:97:50:d9:49:bb:ea:03:
         55:e4:4a:62:9d:cc:d0:13:05:f7:26:e4:1c:74:f9:4b:7d:f0:
         88:8b:f9:a2:43:1c:94:3b:c1:77:9a:4d:11:6c:eb:74:29:d2:
         01:4f:9b:c6:74:88:28:eb:26:c9:86:30:3a:a6:51:d5:b5:a0:
         2c:df:ab:ef:f2:55:55:c9:ab:e3:9a:70:ad:7b:22:0b:bb:1e:
         61:89:ba:46:97:d0:63:c2:81:af:68:47:b9:a5:42:5f:53:9c:
         52:f0:90:8d:da:f0:d3:d9:89:9d:a9:8a:c7:58:4f:2c:4d:53:
         f5:c2:39:9e:29:97:1d:12:28:1f:0a:7e:14:57:36:b4:1e:40:
         3c:81:02:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----