Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.cer
File:                     24C90100868CC7E5E4ADB4222503286F7BF449AA.cer (raw, json)
Hash identifier:          YhUXCFAsg6ZGLWp5aSDziTpDWjjmujOi4ruU6Qy+rCk=
Subject key identifier:   24:C9:01:00:86:8C:C7:E5:E4:AD:B4:22:25:03:28:6F:7B:F4:49:AA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       70C35E4787060832ABB891D2285EF6980ABE3159
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Apr 2024 12:49:12 +0000
Certificate not after:    Mon 14 Apr 2025 12:54:12 +0000
Subordinate resources:    AS: 267282
                          IP: 45.232.180.0/22
                          IP: 2804:4b14::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c3:5e:47:87:06:08:32:ab:b8:91:d2:28:5e:f6:98:0a:be:31:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 15 12:49:12 2024 GMT
            Not After : Apr 14 12:54:12 2025 GMT
        Subject: CN=24C90100868CC7E5E4ADB4222503286F7BF449AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:80:5f:8b:ef:43:70:7c:f2:1f:98:03:7e:e0:
                    d5:a0:fc:41:b5:a6:60:58:c5:4e:c0:85:6d:84:14:
                    b3:a4:2c:02:e0:b9:c5:eb:ea:e5:a0:59:21:38:84:
                    36:71:e7:9b:83:9b:d5:aa:dd:25:07:a3:37:21:b2:
                    c2:08:63:21:03:6e:ae:8e:e7:35:3a:b7:68:97:ef:
                    2d:27:bd:1c:73:be:a5:ba:fe:94:b8:58:b0:07:94:
                    3f:98:2d:cd:91:fa:f0:a7:72:9e:25:ae:b7:27:8a:
                    d3:f1:2a:d5:e5:ac:88:25:68:19:fe:40:9b:bd:ca:
                    0d:98:75:32:33:3e:4d:06:5c:f6:9c:62:fd:72:05:
                    07:63:e5:e2:40:07:15:c9:e4:9b:c3:68:c4:c7:87:
                    c3:a6:d9:0c:27:b8:43:fd:ca:cf:7c:7c:7b:96:30:
                    10:9f:8a:b4:4a:67:ae:f2:08:9f:ba:8e:91:55:70:
                    a4:6d:e2:4c:f9:1d:e5:d7:fd:5b:b3:ec:b7:d6:a3:
                    65:7b:52:b7:d5:95:96:a3:d4:5a:c1:29:ee:4a:87:
                    d5:1c:28:bf:6d:dd:76:a2:13:25:11:46:e2:cd:ee:
                    7f:03:88:5c:4c:ca:15:24:fb:6b:ae:09:2f:ac:b0:
                    03:ef:3f:ce:3d:95:09:62:05:44:56:41:d4:1c:61:
                    e0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                24:C9:01:00:86:8C:C7:E5:E4:AD:B4:22:25:03:28:6F:7B:F4:49:AA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.180.0/22
                IPv6:
                  2804:4b14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267282

    Signature Algorithm: sha256WithRSAEncryption
         34:16:db:a1:22:43:67:98:8d:88:4b:c7:b2:ee:a0:92:d2:7c:
         da:d4:67:47:3d:80:df:c1:13:18:89:e1:e3:e1:a8:6f:3b:e1:
         59:68:37:7a:87:b7:58:06:63:c4:51:5b:0c:36:51:a0:07:8e:
         92:2d:42:a2:47:8f:21:96:0e:bc:c1:cc:17:fb:58:e5:37:6d:
         19:fc:9e:99:54:a4:00:bb:24:b3:1d:40:38:1e:78:eb:21:93:
         42:fc:8c:7e:6c:55:25:bf:8e:2f:e1:76:87:7a:2f:50:b7:84:
         87:c3:95:9f:ca:51:2f:54:be:35:cf:0d:56:03:78:72:7d:f2:
         a9:1a:a6:21:be:84:97:08:ff:cc:86:4b:b1:ba:1b:b5:e6:47:
         f6:5b:d0:bb:18:75:67:2a:1c:96:d9:cd:5c:ac:7a:66:db:16:
         06:eb:26:9c:d6:46:b4:a7:77:0d:4b:f2:e2:2a:3f:d6:5e:6f:
         26:40:50:90:71:6f:9d:58:54:10:a4:fc:ae:5e:44:5c:f6:b6:
         77:a5:96:6e:85:04:ba:ad:e1:27:b4:1e:39:8c:06:9f:a7:57:
         1f:2c:61:e3:5c:33:43:ea:c2:da:71:a8:56:19:5a:a4:aa:61:
         2c:85:31:62:92:cb:42:28:5f:bd:14:66:d6:16:67:5f:a0:26:
         a8:13:60:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----