Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/054C71C610782246B4C0B46E56363D579D3A2753.cer
File:                     054C71C610782246B4C0B46E56363D579D3A2753.cer (raw, json)
Hash identifier:          wWT5vX9qWQzhvHGlMrBKaFXobmCATHBeVyhmM9c/sFc=
Subject key identifier:   05:4C:71:C6:10:78:22:46:B4:C0:B4:6E:56:36:3D:57:9D:3A:27:53
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4E635AE1D01E15AF11E9B82035EF2BD332BEAD23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/0/054C71C610782246B4C0B46E56363D579D3A2753.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 19:39:37 +0000
Certificate not after:    Fri 04 Apr 2025 19:44:37 +0000
Subordinate resources:    AS: 53094
                          IP: 143.208.68.0/22
                          IP: 187.102.16.0/20
                          IP: 2804:2a80::/32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:63:5a:e1:d0:1e:15:af:11:e9:b8:20:35:ef:2b:d3:32:be:ad:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 19:39:37 2024 GMT
            Not After : Apr  4 19:44:37 2025 GMT
        Subject: CN=054C71C610782246B4C0B46E56363D579D3A2753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:04:5e:e0:49:33:04:76:b2:f9:65:10:0e:9b:
                    e7:2f:15:6d:3e:af:80:bf:e4:df:02:b0:e1:23:c6:
                    4f:f0:ab:bf:f7:83:b6:fe:65:49:5c:c0:db:58:28:
                    d2:d7:a7:76:4e:65:9d:dd:e3:22:ec:7e:90:3c:82:
                    b4:a1:99:b9:91:cb:0c:d0:08:d0:b7:75:1f:41:f4:
                    b2:a7:66:14:06:f1:87:d2:f7:4d:15:7c:72:c3:62:
                    e6:9c:52:e2:2a:3d:43:53:96:7e:2d:2b:c5:86:b3:
                    bb:15:1b:fb:df:19:f8:a0:dd:38:87:bb:42:4e:43:
                    d8:90:81:70:d4:cb:7e:9e:d1:01:d4:f1:b2:5e:5b:
                    27:03:b2:4b:b6:dc:c6:72:40:d3:1e:cd:5d:28:b8:
                    87:f5:02:c6:3e:ed:a5:8e:d1:1a:a3:ec:b1:1f:30:
                    3b:a8:0c:b5:3c:da:73:8d:b2:a5:d3:51:9c:79:b1:
                    02:44:c0:e4:de:35:36:40:15:6c:63:24:bb:e5:72:
                    10:d1:0c:18:de:5e:8b:85:e4:b5:a0:2e:c7:c7:97:
                    58:f4:2c:38:7c:ca:22:85:1e:1e:c2:16:2d:d8:cf:
                    37:31:c1:7c:62:a5:0d:4b:01:8d:dd:2f:0b:8b:46:
                    9d:73:8c:d6:08:d7:97:99:0b:07:0b:5d:1a:7b:86:
                    ae:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:4C:71:C6:10:78:22:46:B4:C0:B4:6E:56:36:3D:57:9D:3A:27:53
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/0/054C71C610782246B4C0B46E56363D579D3A2753.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.68.0/22
                  187.102.16.0/20
                IPv6:
                  2804:2a80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53094

    Signature Algorithm: sha256WithRSAEncryption
         8d:b5:f0:30:3d:46:79:78:e4:d5:24:2e:11:c1:c8:62:46:44:
         10:2f:79:f7:5b:3c:e2:10:71:85:70:d6:86:9e:b5:cb:be:e6:
         73:a5:04:cf:ff:e8:bc:08:a0:ef:14:c8:3e:65:2a:c0:be:32:
         0e:54:c1:58:67:a1:58:a1:de:c8:09:52:d2:27:56:29:61:f8:
         3d:1b:ef:9b:c5:15:84:5e:07:2b:17:07:03:9a:1e:75:db:4c:
         cd:5c:b6:1a:0a:b7:3a:22:5b:6f:e9:5b:10:5c:17:40:26:b8:
         7d:ac:60:6d:97:25:d3:5e:ca:a0:6d:41:a7:d6:d9:86:8c:b9:
         50:2a:28:11:bf:16:bd:96:38:11:63:d2:fa:5e:13:26:c2:49:
         d3:0a:dc:ee:c7:23:71:12:62:65:b5:0b:2f:d1:39:4a:8b:88:
         93:a4:45:b6:2d:3a:be:14:ba:14:6d:a7:78:2a:d8:93:b1:cd:
         4e:b8:38:11:c7:b0:a1:83:de:97:c3:a2:47:2e:ce:d4:25:75:
         e1:e0:fc:e9:74:5a:26:f1:25:0f:7f:33:96:9d:b2:5a:67:bc:
         23:9c:27:b2:f9:f5:da:66:2f:be:0b:b6:0d:1f:c5:82:ac:18:
         ec:db:33:8f:68:73:a1:8e:28:e2:d6:b6:a7:d3:ce:c2:3d:12:
         9b:d3:51:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:06:36 2025 by rpki-client