Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.cer
File:                     0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.cer (raw, json)
Hash identifier:          nXX/fS855wPShC+TmpJWpCxrpNrFMjnAucjaQLrLo58=
Subject key identifier:   0D:D7:BC:EF:DB:A4:4C:DF:A5:2E:3C:F9:3B:50:7F:D3:5B:63:8C:F5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       63C89F334FAA246260965F1F19CC88490049FE6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 Jan 2025 14:41:17 +0000
Certificate not after:    Fri 09 Jan 2026 14:46:17 +0000
Subordinate resources:    AS: 270960
                          IP: 177.36.64.0/22
                          IP: 2804:7420::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c8:9f:33:4f:aa:24:62:60:96:5f:1f:19:cc:88:49:00:49:fe:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 10 14:41:17 2025 GMT
            Not After : Jan  9 14:46:17 2026 GMT
        Subject: CN=0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a4:6e:18:c9:c0:cc:06:4e:ff:01:af:f0:d2:
                    3f:03:4d:da:5b:e0:dc:19:0b:74:e9:88:3d:d3:91:
                    63:fc:ba:90:e1:a4:90:1e:94:a8:3d:9d:6e:db:3c:
                    1e:f7:57:5a:e8:2d:76:05:56:df:18:20:52:7b:7a:
                    4d:10:da:08:0f:07:79:ea:93:fa:f0:89:6b:64:95:
                    27:7c:2c:2d:a5:61:0f:b7:2d:7f:e1:b4:78:3a:3b:
                    85:5a:4f:8b:1e:25:f5:16:33:e2:87:15:d1:60:69:
                    3b:f2:cc:c1:a8:70:95:5d:2e:0a:4a:f1:76:ff:81:
                    6b:c0:7e:6d:74:ac:cf:54:ba:63:db:98:e1:ef:67:
                    64:1f:9b:72:05:b4:cd:29:2b:5b:3c:38:9b:ba:a1:
                    dc:07:85:10:0b:65:ea:37:d7:fb:64:a4:46:c1:ed:
                    56:9e:4c:6e:92:00:9c:75:67:3a:a1:7c:19:12:c9:
                    f8:b0:56:a4:67:14:01:e7:72:7c:b6:2b:d0:0c:8c:
                    df:a9:e3:80:28:aa:3c:cb:4c:54:11:2b:2a:11:a9:
                    ab:9a:19:3a:13:66:7a:3b:20:19:1d:e4:e4:50:cf:
                    f4:2d:33:8b:01:9b:24:32:e7:40:3b:35:4e:7c:0c:
                    f0:df:71:fe:57:e9:7e:98:91:df:67:7e:5e:5c:8c:
                    18:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:D7:BC:EF:DB:A4:4C:DF:A5:2E:3C:F9:3B:50:7F:D3:5B:63:8C:F5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.64.0/22
                IPv6:
                  2804:7420::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270960

    Signature Algorithm: sha256WithRSAEncryption
         08:d4:e8:37:e9:e6:0e:99:d5:61:e7:0c:82:bf:b9:80:c0:2d:
         81:20:84:ef:50:e4:d9:9e:49:b2:46:61:d7:2a:13:9c:4d:2d:
         af:ba:44:59:a5:91:30:fe:0e:e2:41:88:00:e7:bd:d2:a5:21:
         0d:f5:30:3b:06:69:73:65:71:22:15:ed:ad:e5:3d:26:c8:dc:
         c2:51:f9:c7:ae:d7:f2:fc:50:bb:96:ea:40:7e:9f:38:5c:db:
         b9:97:4d:74:34:fc:03:05:a1:2f:77:3f:82:c2:1d:4a:3f:fd:
         f6:2d:e0:85:b8:26:14:15:1b:f7:d7:52:a1:d1:e8:18:e1:da:
         34:00:a7:d6:87:bb:48:0a:3f:83:b2:c3:27:cf:9d:e2:99:ee:
         1a:52:ee:d5:f5:6e:f7:ff:99:f7:93:59:de:28:46:13:bb:b3:
         4b:9c:ee:32:20:ff:4d:25:8d:40:1e:da:88:35:24:76:5c:fe:
         07:58:bb:40:d9:dd:4f:87:25:80:d7:f8:64:20:19:34:a0:84:
         e8:b6:9e:4e:9c:9b:6c:04:0c:ea:6c:62:4c:97:4f:34:9a:18:
         89:40:8f:bf:06:26:2d:81:9b:6c:1f:1b:ca:e8:cd:48:59:a5:
         33:56:8a:bd:d8:2b:0f:ea:9a:86:7f:33:af:10:8f:7f:ff:d8:
         90:0a:19:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 01:24:10 2025 by rpki-client