Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE.cer
File:                     1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE.cer (raw, json)
Hash identifier:          j/zfEYTWNHO7KjT27467m4PJqU+oCbje+kfqrJCTTxQ=
Subject key identifier:   1B:92:E5:F5:32:F4:DB:8B:C3:B6:31:9A:F0:D8:C1:D0:0A:98:6A:AE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1B9B5FCEA5BF950FA5E0EBDA1C1B5F7EA1D5538D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/1/1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 21 Apr 2024 02:58:37 +0000
Certificate not after:    Sun 20 Apr 2025 03:03:37 +0000
Subordinate resources:    AS: 271454
                          IP: 181.233.4.0/22
                          IP: 2804:7bc8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:9b:5f:ce:a5:bf:95:0f:a5:e0:eb:da:1c:1b:5f:7e:a1:d5:53:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 21 02:58:37 2024 GMT
            Not After : Apr 20 03:03:37 2025 GMT
        Subject: CN=1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d1:50:89:46:1c:32:37:eb:da:31:b1:93:22:
                    c2:e9:6a:dd:5f:3f:e8:7a:27:66:ba:99:db:cb:60:
                    0d:7f:3d:39:6a:9c:76:96:fb:27:66:ac:af:43:75:
                    0b:fa:b7:ec:d2:2f:36:18:f5:a1:d4:89:0d:9b:7c:
                    8e:b9:6f:95:c7:9b:33:b9:68:87:c1:1d:03:5b:c1:
                    88:8c:8e:3f:b4:21:e9:cd:d7:b6:52:6a:8d:eb:03:
                    a3:5a:b7:56:47:d8:a5:73:fc:f4:9f:d9:d8:22:cc:
                    cc:d7:d7:87:7b:0b:c5:5d:13:97:49:0b:75:b8:40:
                    6d:a7:f8:0a:73:73:e7:0b:90:ec:68:30:77:96:54:
                    97:49:06:60:6f:5f:2a:af:ab:fd:54:6d:07:55:9c:
                    b4:ad:77:6c:db:ac:bd:21:8e:a9:93:92:48:32:07:
                    77:67:bb:09:95:75:07:75:53:b0:64:5c:cd:55:63:
                    8d:1d:01:57:27:1b:e5:18:33:ae:0b:4a:2d:dd:aa:
                    49:65:ba:3c:57:27:fd:fe:91:af:5e:e5:8d:8f:ca:
                    84:26:28:5d:2d:92:ac:6a:34:4a:39:18:71:50:16:
                    1b:db:e7:de:c7:40:70:ae:d5:5c:16:6f:93:c7:a3:
                    d5:50:17:4c:b0:84:5b:3a:41:ed:af:79:9d:bf:47:
                    8d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:92:E5:F5:32:F4:DB:8B:C3:B6:31:9A:F0:D8:C1:D0:0A:98:6A:AE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/1/1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.4.0/22
                IPv6:
                  2804:7bc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271454

    Signature Algorithm: sha256WithRSAEncryption
         10:e1:19:48:39:a0:90:25:ab:50:74:a8:11:c6:b8:21:e2:7b:
         57:69:0f:fc:d5:ad:bb:2a:2f:b0:65:3d:bc:27:57:0e:ef:20:
         d3:bc:dd:8b:07:33:12:12:e7:5d:98:35:b0:92:20:5f:33:7a:
         31:0f:38:25:8b:d7:9b:2a:39:98:05:74:a5:c4:8d:dc:d3:82:
         34:e6:c5:23:5c:90:29:ea:1c:f2:2f:03:36:9b:4e:a1:08:f3:
         52:c5:9b:a6:5f:08:6a:cb:97:b4:89:5b:22:fc:e1:55:f9:12:
         dd:a5:6b:55:53:a7:e0:d8:56:60:6c:a3:75:bf:db:4f:8f:de:
         5f:64:a1:db:79:56:d0:44:10:b3:7c:00:3b:55:f2:64:de:0b:
         3c:5a:5b:c4:03:b5:94:4c:cc:91:52:b2:b3:e2:46:7b:0a:d2:
         35:a7:c4:c5:75:80:fd:5f:bd:90:30:c1:00:a6:5b:cd:5d:68:
         84:31:58:ce:4a:9d:af:74:29:e0:ce:08:2a:38:fb:23:6b:1f:
         4c:b9:51:ce:bd:0d:01:ce:08:4c:9d:d6:ee:04:93:e1:79:ad:
         bb:eb:34:0e:74:36:2f:4b:8a:0e:22:1e:28:de:c6:33:45:f9:
         fc:53:6d:9a:f6:84:81:80:b7:9b:9c:70:e2:e9:b7:27:49:4d:
         88:48:24:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----