Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013.cer
File:                     D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013.cer (raw, json)
Hash identifier:          xW/8GQcmpISq6aLaiOgwaxiAzXsi2XZGRu1k3OsdYMk=
Subject key identifier:   D1:5B:B5:57:0E:42:F8:BC:CE:4A:4B:F2:F0:DF:8D:11:73:0E:E0:13
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4E63D6FD942F39B3A8F7B9DC3FB9BF5B49C2134E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GKJKB2GYD2MJBCMwwrN6CpTuXS5PdWq4AfZmAoPwQwVB/0/D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GKJKB2GYD2MJBCMwwrN6CpTuXS5PdWq4AfZmAoPwQwVB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Mar 2025 16:59:39 +0000
Certificate not after:    Wed 25 Mar 2026 17:04:39 +0000
Subordinate resources:    AS: 273473
                          IP: 2804:8f2c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:63:d6:fd:94:2f:39:b3:a8:f7:b9:dc:3f:b9:bf:5b:49:c2:13:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 26 16:59:39 2025 GMT
            Not After : Mar 25 17:04:39 2026 GMT
        Subject: CN=D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:37:60:d1:dd:3a:67:fd:d6:b7:e2:8f:f2:f9:
                    f6:8e:6d:f2:2b:0c:16:1b:6e:93:5b:b4:1e:21:e7:
                    3f:b6:1d:5c:28:ae:ef:6c:bd:6d:3d:aa:8a:53:53:
                    60:d1:60:d3:67:dc:80:34:ce:d5:69:68:92:9d:17:
                    f8:25:d1:4c:89:80:ee:1e:04:14:ce:dc:2d:2b:03:
                    c4:e5:8c:e9:11:73:34:f2:96:4b:a2:7f:7d:b7:a1:
                    51:c4:7f:e9:2b:fd:4f:7f:e0:a3:95:bd:3b:74:a8:
                    73:13:fc:bb:da:71:be:04:7a:18:97:a3:b6:1a:bc:
                    7c:b6:22:a8:8d:9c:fe:5f:40:2b:73:a3:c3:ad:94:
                    67:8e:12:a0:70:cb:2c:d9:02:a7:99:34:48:8e:fd:
                    a4:01:76:40:48:6b:a0:aa:7f:b0:74:67:e3:51:c2:
                    d1:db:3a:e0:af:50:97:84:59:de:6d:9e:fc:7e:e3:
                    4e:64:e3:93:bb:aa:1c:1b:0c:b3:1a:7a:ed:3d:72:
                    a7:a2:2c:60:96:75:e2:a5:f0:32:50:8d:d6:92:84:
                    66:7c:f4:fc:05:72:0c:0d:80:19:f4:bb:c1:c5:30:
                    18:95:09:9a:56:6b:4b:42:cd:66:5e:1a:3a:91:64:
                    c8:ba:6c:49:d8:b1:5d:51:b5:fe:81:0c:5e:36:00:
                    9f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D1:5B:B5:57:0E:42:F8:BC:CE:4A:4B:F2:F0:DF:8D:11:73:0E:E0:13
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GKJKB2GYD2MJBCMwwrN6CpTuXS5PdWq4AfZmAoPwQwVB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GKJKB2GYD2MJBCMwwrN6CpTuXS5PdWq4AfZmAoPwQwVB/0/D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273473

    Signature Algorithm: sha256WithRSAEncryption
         2f:75:2d:2b:23:55:5a:fd:ab:6e:ee:d4:e3:56:7b:63:fe:1d:
         d3:10:be:3f:6c:0c:c4:2f:71:3f:a0:13:5a:f4:7a:d5:b3:74:
         1d:ff:58:0c:e7:31:09:5e:98:19:94:99:13:fd:16:77:9e:70:
         2f:0b:2a:0f:9b:3d:37:00:41:46:b1:d9:38:a9:1a:a7:2f:7c:
         dd:42:05:92:96:8f:ac:5e:ec:d0:60:5b:15:0e:4f:be:b0:47:
         1f:b6:c0:d9:7e:85:65:31:7a:ef:6c:ce:7a:67:f9:ae:0b:29:
         42:0c:d7:7c:5c:38:72:21:f8:82:3d:3b:d6:54:48:91:e4:f0:
         21:85:29:59:ee:c4:2b:04:27:43:13:cf:7a:38:8e:04:22:cf:
         16:39:b4:84:31:11:75:35:4b:35:9c:a0:aa:37:8f:ae:51:74:
         e4:1e:8e:fc:3a:37:51:db:40:52:d0:5e:5e:fe:93:87:e1:85:
         aa:1d:ac:d1:03:ed:6e:ff:01:16:ff:33:b0:3c:55:38:ae:44:
         6d:35:c4:67:77:5e:10:a9:fd:49:49:94:bf:08:d0:bc:13:1c:
         2d:7e:68:f8:fe:80:11:e6:35:a7:8f:88:50:53:76:79:6a:6d:
         0b:32:22:7f:c9:5a:69:1b:57:d6:73:14:5c:f3:d9:49:94:c5:
         fe:94:4a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----