Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.cer
File:                     011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.cer (raw, json)
Hash identifier:          Xa6XINkm1tDz+VPSplkTxW0F8QWqedTaP2qaVLh2/ug=
Subject key identifier:   01:1E:03:C9:16:9D:EF:F6:62:F6:BE:1D:9E:BF:43:0B:FA:9E:04:53
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       11B9952669C15BC3C6F39E0BE21D7DFA13F7723F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 Jan 2025 19:42:36 +0000
Certificate not after:    Fri 09 Jan 2026 19:47:36 +0000
Subordinate resources:    AS: 28360
                          IP: 138.94.8.0/22
                          IP: 177.8.0.0/19
                          IP: 179.124.224.0/20
                          IP: 189.76.208.0 -- 189.76.239.255
                          IP: 2804:14::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b9:95:26:69:c1:5b:c3:c6:f3:9e:0b:e2:1d:7d:fa:13:f7:72:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 10 19:42:36 2025 GMT
            Not After : Jan  9 19:47:36 2026 GMT
        Subject: CN=011E03C9169DEFF662F6BE1D9EBF430BFA9E0453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d4:28:d4:ee:1a:46:b9:b7:83:37:6b:45:cc:
                    a6:b8:83:b0:f0:35:5d:af:50:c2:6a:62:8e:8f:0d:
                    67:49:72:56:34:9c:6c:2f:89:55:3c:e5:a9:d7:87:
                    6f:73:68:5a:61:5a:1f:76:0c:9d:c2:5d:83:cc:ea:
                    76:21:be:c9:b9:38:2d:31:bc:a9:5c:ce:88:4d:6e:
                    78:ec:51:7b:eb:cd:44:35:c1:bf:f0:e9:8f:9e:02:
                    36:41:ec:88:17:c3:c2:78:58:02:16:e1:38:f9:fb:
                    94:63:2e:4f:1e:4a:7c:87:18:4e:92:f5:74:7e:06:
                    e4:89:36:3f:0c:2e:9c:31:e7:8a:cc:98:cc:ac:8d:
                    d6:00:ff:12:77:45:d8:d2:04:ab:28:bb:5f:28:de:
                    c6:1c:b6:77:4f:3f:07:4a:86:70:d5:c5:05:ee:2b:
                    b0:bc:dd:27:00:ba:c5:d9:2e:0a:69:af:d4:a2:06:
                    7a:0d:f4:15:66:af:48:11:bd:4f:ca:a8:9b:51:31:
                    d9:ae:af:b9:d6:b2:a6:3a:e2:44:0c:98:f6:97:72:
                    e6:56:c8:7c:84:7b:32:cb:a0:30:af:99:a5:7d:a3:
                    d1:a3:ae:ac:e6:6d:42:c0:6c:58:3a:1c:94:95:c8:
                    42:91:e5:d0:50:52:e0:84:fe:c6:f8:ab:a5:5a:81:
                    5b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                01:1E:03:C9:16:9D:EF:F6:62:F6:BE:1D:9E:BF:43:0B:FA:9E:04:53
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.8.0/22
                  177.8.0.0/19
                  179.124.224.0/20
                  189.76.208.0-189.76.239.255
                IPv6:
                  2804:14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28360

    Signature Algorithm: sha256WithRSAEncryption
         52:0f:23:45:65:e2:4f:18:cc:b4:6f:e2:61:05:07:49:01:9d:
         ec:db:6a:0d:d9:93:bd:b4:25:a0:7a:c5:94:fc:52:63:30:b8:
         cf:8c:14:fd:68:fb:30:56:9b:b5:ad:14:07:ff:dd:cf:80:74:
         63:da:92:da:e3:d2:1e:ef:50:93:5c:39:d5:f8:1b:b1:59:72:
         77:9f:b9:a4:db:1a:60:c5:48:87:62:a2:c7:81:13:7e:4c:51:
         9f:5d:12:1d:0a:5b:34:bc:dd:36:e1:ce:22:e8:a4:8c:b3:85:
         ef:c8:82:ac:7a:cb:50:66:7b:37:a7:ed:6b:43:64:3d:11:a6:
         57:69:f1:e1:99:c4:fc:d1:89:34:39:9c:b8:8d:d9:22:9a:b1:
         25:27:23:0f:fb:15:fc:e9:b6:e3:8a:06:9f:b5:2c:9b:12:6b:
         f6:8b:cb:55:0a:21:89:15:15:05:8a:8c:69:8b:ae:ab:df:5a:
         4e:a5:f5:98:ac:49:9d:70:4a:8e:30:c8:6e:4b:aa:05:6b:4d:
         ed:0f:e0:c3:72:ad:14:6c:fe:92:40:bf:25:d1:58:8c:75:0b:
         7c:54:83:e9:06:95:fd:44:a0:07:b5:fc:4c:cc:46:2f:c9:b4:
         42:0d:bc:08:f5:df:c6:7e:a1:92:90:61:4b:50:1a:33:e9:d7:
         eb:8f:bb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:34 2025 by rpki-client