Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/00329BFCE59988BC06ECC86EE26ADD745B04C576.cer
File:                     00329BFCE59988BC06ECC86EE26ADD745B04C576.cer (raw, json)
Hash identifier:          diuLjAp077Tdx5mPNKkSU1yufnz5uuDHb/24F2Tqyjk=
Subject key identifier:   00:32:9B:FC:E5:99:88:BC:06:EC:C8:6E:E2:6A:DD:74:5B:04:C5:76
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1F118C7113F52F242779EDA34C09F7F6A0B3E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/00329BFCE59988BC06ECC86EE26ADD745B04C576.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Apr 2024 13:51:04 +0000
Certificate not after:    Thu 24 Apr 2025 13:56:04 +0000
Subordinate resources:    AS: 271723
                          IP: 2804:8000::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:11:8c:71:13:f5:2f:24:27:79:ed:a3:4c:09:f7:f6:a0:b3:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 25 13:51:04 2024 GMT
            Not After : Apr 24 13:56:04 2025 GMT
        Subject: CN=00329BFCE59988BC06ECC86EE26ADD745B04C576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:27:28:ac:3d:ac:ec:a9:2d:26:f0:98:ce:3a:
                    d8:9d:1d:86:4e:b0:57:03:4d:85:a4:4e:50:37:1f:
                    c5:b7:ec:03:58:fe:5f:31:a2:20:46:57:d5:c6:a5:
                    1f:de:16:aa:03:1a:57:06:66:1f:3d:e7:19:af:97:
                    38:74:1e:ff:c9:57:76:72:13:f3:ef:1f:b6:f6:bd:
                    25:94:b2:8a:1b:03:c9:7f:51:1e:99:06:40:a0:75:
                    6a:f9:00:7b:59:c9:ff:92:d7:81:b7:a9:05:40:8a:
                    c7:87:b1:1c:ca:97:78:8c:fd:42:63:3b:82:8b:e0:
                    6d:ab:32:f0:40:ca:a3:5d:66:40:15:81:45:7c:7d:
                    4f:c8:84:50:68:2a:fb:c9:7c:04:f4:aa:a6:53:ce:
                    01:ad:e7:d6:38:00:eb:11:9e:c4:25:cb:6d:0f:fc:
                    60:66:1e:5c:9c:09:e5:87:f8:4b:4f:7a:2c:0f:c6:
                    a9:e0:d6:df:9f:06:98:27:a2:04:8a:7d:c0:d4:8c:
                    92:a0:26:e5:f7:d3:23:4f:81:5e:3e:94:9b:28:fa:
                    f6:b1:26:bb:78:a3:e9:70:c3:b9:2a:ea:d6:c7:f6:
                    8a:b8:5d:ea:66:bb:78:07:7b:d5:c7:ab:6c:fd:bc:
                    2f:79:99:1d:68:70:b4:af:0f:12:ab:39:e3:33:49:
                    9d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                00:32:9B:FC:E5:99:88:BC:06:EC:C8:6E:E2:6A:DD:74:5B:04:C5:76
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/00329BFCE59988BC06ECC86EE26ADD745B04C576.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8000::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271723

    Signature Algorithm: sha256WithRSAEncryption
         6e:ea:29:ff:cf:17:e7:5b:35:7a:62:76:eb:5a:70:77:88:03:
         67:ac:aa:9c:84:04:01:3f:07:8a:ce:86:fc:7e:f7:bc:4e:02:
         77:4f:08:7f:42:0b:46:d8:4f:02:bc:64:53:cf:1a:bf:f1:09:
         19:5b:d6:75:c3:51:e2:d9:54:5b:36:36:7f:cf:3b:db:b5:13:
         ac:97:de:90:4c:a8:6b:47:ca:b6:79:e3:fb:d7:11:5d:b0:e8:
         b3:8f:a6:a9:41:6d:9d:ca:82:5c:2e:52:77:ed:bf:d4:b1:58:
         4a:14:03:18:06:64:7f:08:e1:0b:8d:7b:55:10:b8:3f:23:fe:
         2b:26:fd:dd:44:e8:c7:71:ac:f0:06:07:78:e4:7a:c0:c1:b1:
         48:1b:af:40:f7:3c:b0:38:e2:b2:87:18:33:0c:50:ad:8f:f6:
         21:85:43:2f:67:91:c2:67:0a:34:6a:b6:b9:16:2a:3c:9a:16:
         26:6c:73:27:01:45:89:ec:6a:a6:5d:d4:16:a6:7e:f7:dc:99:
         4d:76:40:bc:b9:13:34:44:fd:88:1a:e4:81:66:01:14:d3:1b:
         8b:60:d3:a6:f5:39:56:fb:d2:e0:dd:06:b4:95:79:1a:46:df:
         f5:08:23:c3:c0:d8:74:d6:3c:61:63:3f:47:a6:de:78:79:5a:
         fe:bc:8f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----