Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer
File:                     1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer (raw, json)
Hash identifier:          b+j9USgpCUrZTlz4BRtAoJ/PmWvrbvRcgHdKnbWzs8o=
Subject key identifier:   1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       58D6E6E7335B834F06F9F45177C91FB2AA51F4E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Apr 2024 12:29:02 +0000
Certificate not after:    Thu 17 Apr 2025 12:34:02 +0000
Subordinate resources:    AS: 264971
                          IP: 200.219.149.0/24
                          IP: 2801:80:1920::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d6:e6:e7:33:5b:83:4f:06:f9:f4:51:77:c9:1f:b2:aa:51:f4:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 18 12:29:02 2024 GMT
            Not After : Apr 17 12:34:02 2025 GMT
        Subject: CN=1FD53BEC9766C0B4F811551E7385CE2E4D40FE92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ab:c7:48:11:8f:cf:fd:06:32:c5:8f:eb:7b:
                    10:11:7b:00:ee:43:6a:fc:7b:b5:dc:f2:a5:4a:88:
                    dc:64:18:67:11:c6:4f:31:d3:76:0c:93:7c:3c:6a:
                    ed:1e:0e:7d:7f:7f:7a:50:a8:02:28:79:cc:12:d6:
                    93:d4:30:e0:7b:aa:55:a5:e9:f9:f3:47:7c:f0:e9:
                    3e:7b:d2:fb:91:02:a6:c3:ac:7c:e8:af:60:fc:d3:
                    54:78:09:65:f5:63:8d:65:0b:ce:bc:da:65:8f:78:
                    02:0c:f0:46:b5:da:cf:c6:cd:1d:b7:7a:78:30:1b:
                    b1:c4:27:d7:2b:3f:c0:f6:17:65:8d:f1:f4:8f:35:
                    07:c8:b4:f6:df:82:67:2e:10:49:2f:16:e1:2e:16:
                    7c:ce:7d:ac:c8:9e:44:d1:f2:77:82:c6:e4:d5:70:
                    98:d0:23:71:84:2b:09:6e:6c:fd:a5:54:ec:5d:e0:
                    51:28:1b:34:58:8a:8b:cb:0e:89:19:69:a3:f7:5d:
                    e7:f5:16:27:c8:e5:e3:82:d3:53:11:5a:5a:5a:46:
                    6d:16:b2:a7:a9:05:2c:67:a8:78:f4:5a:1c:0b:dc:
                    82:8f:6c:4c:7e:b0:c8:98:39:51:35:18:96:02:32:
                    63:4e:10:8d:af:64:88:55:bd:84:4b:f5:cf:4f:e4:
                    b0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.149.0/24
                IPv6:
                  2801:80:1920::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264971

    Signature Algorithm: sha256WithRSAEncryption
         29:cd:bf:73:d8:a3:e6:7b:f7:99:7e:99:53:6d:cb:98:f2:5f:
         f7:d4:f3:8f:15:a3:fe:b9:45:46:3c:2b:d0:9b:36:35:f7:fb:
         ad:d2:94:2b:e8:30:07:77:c9:7b:9a:00:08:45:e0:c7:e5:19:
         9f:9c:47:80:2e:af:c1:43:3f:53:19:d1:c4:7d:c4:33:7d:c2:
         b1:4e:a6:4b:50:e5:13:33:c3:c0:8e:d0:bc:1c:56:99:1c:d8:
         fc:c0:f1:8d:88:cd:e5:30:85:26:c3:91:b8:82:99:9f:67:39:
         df:7c:9b:e5:3d:5f:aa:c7:b2:c3:97:52:9b:ab:79:20:fc:69:
         8a:26:bf:bf:21:ea:d8:bc:53:44:64:c6:38:6f:f7:af:cd:6b:
         fe:f8:ed:0c:b6:a8:42:d1:04:9d:4e:f2:d2:37:b1:9b:f3:1c:
         70:d1:ec:8b:96:1c:73:dd:7f:44:76:3a:1b:e5:bd:11:e0:7b:
         35:df:70:74:8a:68:8d:1d:60:00:3c:7b:96:77:ad:c8:72:c8:
         76:ae:a5:25:ab:3a:97:8f:cf:ac:91:9f:ab:6d:68:86:8c:c5:
         26:2f:c2:46:11:db:58:24:44:a9:9a:04:22:65:b9:b9:8d:89:
         b8:fd:21:00:85:2d:64:bf:7e:82:fb:33:5a:ce:6b:6e:1c:fd:
         ff:51:ca:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----