Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FD8D30E86F5BB3423468769CA0DCA6BE69FCB1E0.cer
File:                     FD8D30E86F5BB3423468769CA0DCA6BE69FCB1E0.cer (raw, json)
Hash identifier:          wbvrivDZuMRD+jebUJgbN4NzyavpBOym9Ec+Ew5hS+Y=
Subject key identifier:   FD:8D:30:E8:6F:5B:B3:42:34:68:76:9C:A0:DC:A6:BE:69:FC:B1:E0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       768983E56CEC5F1C5C6F5052F43FE0D97E4FAE7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/0/FD8D30E86F5BB3423468769CA0DCA6BE69FCB1E0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Jan 2025 12:52:19 +0000
Certificate not after:    Thu 22 Jan 2026 12:57:19 +0000
Subordinate resources:    AS: 267323
                          IP: 45.233.120.0/22
                          IP: 2804:4bac::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:89:83:e5:6c:ec:5f:1c:5c:6f:50:52:f4:3f:e0:d9:7e:4f:ae:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 23 12:52:19 2025 GMT
            Not After : Jan 22 12:57:19 2026 GMT
        Subject: CN=FD8D30E86F5BB3423468769CA0DCA6BE69FCB1E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3e:7c:74:49:63:14:f5:88:b3:f9:dd:37:e4:
                    50:ff:2d:8c:61:e0:46:75:56:18:9a:98:e5:15:92:
                    62:69:50:ce:d4:48:15:83:dc:87:5c:6d:d2:e9:3c:
                    49:af:0a:85:94:10:13:a5:85:71:e9:fc:79:18:d1:
                    f0:70:c9:41:8f:92:e8:29:39:46:f6:c2:28:2d:f9:
                    f5:4a:3a:50:39:86:e8:4b:f7:97:8d:1d:b8:6e:66:
                    41:59:3d:d4:57:8a:58:84:91:08:07:21:cf:69:1d:
                    4e:3b:a2:aa:4a:98:39:79:07:dd:f4:de:db:f0:47:
                    6d:0a:05:13:64:ab:0e:9d:4c:c2:e1:7c:0e:cd:8d:
                    64:b4:c0:16:9d:90:57:22:78:07:8c:8b:00:15:96:
                    d5:01:6c:4a:b4:af:01:fc:23:89:9c:87:21:b4:4b:
                    8a:8b:24:eb:9e:dd:e0:59:40:75:dd:cd:88:c3:36:
                    c4:58:b1:bd:38:09:16:0d:d1:6a:b6:ea:52:39:98:
                    56:94:7c:db:93:85:02:24:c5:b0:d5:06:4f:df:8b:
                    73:fd:7b:ef:13:2a:cc:9a:dc:60:f1:60:97:4a:7e:
                    7c:99:7e:ba:66:21:1b:86:f3:aa:3b:68:94:ec:ba:
                    ea:5b:9d:90:45:66:7f:cb:25:96:c2:e0:ed:e1:07:
                    bc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:8D:30:E8:6F:5B:B3:42:34:68:76:9C:A0:DC:A6:BE:69:FC:B1:E0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/0/FD8D30E86F5BB3423468769CA0DCA6BE69FCB1E0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.120.0/22
                IPv6:
                  2804:4bac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267323

    Signature Algorithm: sha256WithRSAEncryption
         49:6b:f9:3b:f8:e2:86:2f:74:e1:50:7a:ac:d4:a7:1b:7e:9a:
         fe:53:6c:ef:9c:cf:55:12:3a:bf:0c:18:a0:a6:a8:cd:cd:ae:
         3e:7a:9d:fb:83:18:7a:40:33:ea:cd:6b:69:67:52:0d:4d:ce:
         a7:df:5e:0a:f8:24:2c:4c:e2:9c:c9:67:c7:c7:56:f9:ec:04:
         21:0d:09:89:e3:54:72:c2:28:d4:6e:78:1d:1f:96:0e:7c:59:
         d0:f9:4e:c1:de:ba:ef:36:5f:4c:31:75:c8:a2:62:59:13:9a:
         0e:e6:bf:1f:b8:b6:76:23:35:4f:54:9b:36:ea:3c:46:25:a4:
         8b:f6:b3:cf:d8:2b:ff:73:e4:48:c8:1d:6b:61:36:3e:cb:f5:
         3f:25:60:19:83:ee:31:24:5f:8b:9a:9b:5e:09:e1:24:75:42:
         b1:3f:01:52:c2:ae:94:65:1a:7d:a9:d4:37:89:56:00:3c:4c:
         42:e2:19:e3:01:8f:75:43:32:a9:b5:f9:17:3b:21:87:a3:b9:
         54:d9:99:99:42:be:f2:1f:c9:10:a5:9f:39:5b:17:51:30:d9:
         f3:b4:68:52:28:f3:eb:89:30:9c:63:d9:41:8d:c5:ea:a1:86:
         e0:5b:1d:ae:72:0c:93:04:76:3b:5e:0b:92:73:21:40:69:11:
         b8:04:f4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----