Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/144DB8D5072DA69BE11C1887C1F907F9E34C2010.cer
File:                     144DB8D5072DA69BE11C1887C1F907F9E34C2010.cer (raw, json)
Hash identifier:          pYTyT4eafkuFD7FuALUOvHF1ea4oOyWENjhMe5Z1T8k=
Subject key identifier:   14:4D:B8:D5:07:2D:A6:9B:E1:1C:18:87:C1:F9:07:F9:E3:4C:20:10
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       41184B2F50DA679B590BD9CA3F47B87F62B054B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/144DB8D5072DA69BE11C1887C1F907F9E34C2010.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Feb 2025 20:14:04 +0000
Certificate not after:    Mon 09 Feb 2026 20:19:04 +0000
Subordinate resources:    AS: 270793
                          IP: 201.159.160.0/22
                          IP: 2804:7180::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:18:4b:2f:50:da:67:9b:59:0b:d9:ca:3f:47:b8:7f:62:b0:54:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 10 20:14:04 2025 GMT
            Not After : Feb  9 20:19:04 2026 GMT
        Subject: CN=144DB8D5072DA69BE11C1887C1F907F9E34C2010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:03:83:a6:b2:76:72:37:a5:f4:af:69:19:43:
                    84:d3:10:f4:17:6b:6a:fc:d0:12:64:6c:57:f1:31:
                    ee:b9:f3:01:9a:0c:3f:d8:d4:7a:b1:4f:42:be:d1:
                    79:18:82:20:20:df:10:68:04:62:3b:21:df:ee:2d:
                    6a:2d:3a:62:ff:e0:81:8a:87:92:60:08:b4:f2:ec:
                    2a:e7:42:63:d9:33:e4:ab:16:73:ca:76:45:53:36:
                    12:07:d4:8c:80:f2:49:9d:65:40:42:0b:fd:17:59:
                    d0:74:4a:b5:11:28:03:93:81:f8:0a:be:a2:fe:72:
                    d0:9d:c8:29:e4:eb:5a:fe:cb:c0:13:40:bf:01:92:
                    68:9f:a9:32:36:6e:8e:b9:8c:e2:83:01:1d:4c:15:
                    d7:02:c4:9f:12:a8:cb:c1:81:8f:d0:19:e9:e1:28:
                    69:42:ce:96:31:f3:c2:af:77:ec:12:40:94:12:6b:
                    3e:7c:31:38:89:9f:d2:1d:39:2e:9e:e5:0b:0c:54:
                    bd:ac:6f:39:26:ab:e3:c5:8e:9a:93:28:4b:72:d6:
                    c1:c8:25:25:7e:a7:96:68:9b:d4:77:c7:96:19:61:
                    4d:a4:60:0a:56:4c:c5:49:18:43:29:53:d5:aa:23:
                    c3:b1:f8:8a:ea:31:1f:a3:34:4c:46:db:85:e0:65:
                    a3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:4D:B8:D5:07:2D:A6:9B:E1:1C:18:87:C1:F9:07:F9:E3:4C:20:10
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/144DB8D5072DA69BE11C1887C1F907F9E34C2010.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.160.0/22
                IPv6:
                  2804:7180::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270793

    Signature Algorithm: sha256WithRSAEncryption
         93:ae:d4:41:12:de:23:3c:1b:7f:9b:64:ea:ec:76:e9:94:30:
         87:27:bb:89:34:2d:b9:3a:61:85:2f:c6:16:2a:7b:3b:09:b0:
         07:27:6f:02:b3:68:10:fb:1c:d8:d5:66:3b:f5:8b:3b:a0:f4:
         23:ab:e3:36:d6:12:1a:c1:01:b7:21:b0:3a:5f:ef:ac:8a:10:
         4d:88:11:7f:e1:21:d7:34:93:3a:8c:be:44:0d:cb:62:66:28:
         fd:46:e3:59:e7:46:2f:ec:5e:5d:07:a2:ed:e9:82:a5:18:a8:
         f1:a8:59:db:a6:8b:25:83:18:3f:9d:5f:97:ea:94:5c:e7:60:
         9d:29:8b:6b:4e:6d:0e:0f:ac:af:32:8f:57:97:80:05:43:ae:
         31:e7:93:d6:5e:26:a0:24:b3:6b:bd:ec:bf:37:e2:4c:07:65:
         f4:82:a8:ec:38:f7:c5:c9:7d:22:86:f1:d0:c1:40:54:75:d7:
         2c:dc:21:19:aa:c8:03:ec:7a:6d:19:98:dc:bf:6c:c3:7c:bc:
         c8:d3:01:48:38:b4:70:a3:15:af:4e:9b:67:ad:43:ef:d0:9d:
         ee:76:f2:9d:d5:96:86:99:28:53:69:4b:51:6e:db:e5:59:c1:
         ea:85:d0:b8:9c:70:98:cb:ef:17:95:fc:e0:58:e4:54:41:22:
         47:c0:2c:f6
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUQRhLL1DaZ5tZC9nKP0e4f2KwVLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAyMTAyMDE0MDRaFw0yNjAyMDkyMDE5MDRaMDMxMTAvBgNV
BAMTKDE0NERCOEQ1MDcyREE2OUJFMTFDMTg4N0MxRjkwN0Y5RTM0QzIwMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7A4OmsnZyN6X0r2kZQ4TTEPQX
a2r80BJkbFfxMe658wGaDD/Y1HqxT0K+0XkYgiAg3xBoBGI7Id/uLWotOmL/4IGK
h5JgCLTy7CrnQmPZM+SrFnPKdkVTNhIH1IyA8kmdZUBCC/0XWdB0SrURKAOTgfgK
vqL+ctCdyCnk61r+y8ATQL8BkmifqTI2bo65jOKDAR1MFdcCxJ8SqMvBgY/QGenh
KGlCzpYx88Kvd+wSQJQSaz58MTiJn9IdOS6e5QsMVL2sbzkmq+PFjpqTKEty1sHI
JSV+p5Zom9R3x5YZYU2kYApWTMVJGEMpU9WqI8Ox+IrqMR+jNExG24XgZaNtAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQUTbjVBy2mm+Ec
GIfB+Qf540wgEDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUF0
M29hYmVpUHZUQW42U2dUd3NRS1REcmtMMWJNaDM3dlJQb2pYOEV1bzMvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FB
dDNvYWJlaVB2VEFuNlNnVHdzUUtURHJrTDFiTWgzN3ZSUG9qWDhFdW8zLzAvMTQ0
REI4RDUwNzJEQTY5QkUxMUMxODg3QzFGOTA3RjlFMzRDMjAxMC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyZ+gMA0EAgACMAcDBQAoBHGAMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQhyTANBgkqhkiG9w0BAQsFAAOCAQEAk67UQRLeIzwbf5tk
6ux26ZQwhye7iTQtuTphhS/GFip7OwmwBydvArNoEPsc2NVmO/WLO6D0I6vjNtYS
GsEBtyGwOl/vrIoQTYgRf+Eh1zSTOoy+RA3LYmYo/UbjWedGL+xeXQei7emCpRio
8ahZ26aLJYMYP51fl+qUXOdgnSmLa05tDg+srzKPV5eABUOuMeeT1l4moCSza73s
vzfiTAdl9IKo7Dj3xcl9Iobx0MFAVHXXLNwhGarIA+x6bRmY3L9sw3y8yNMBSDi0
cKMVr06bZ61D79Cd7nbyndWWhpkoU2lLUW7b5VnB6oXQuJxwmMvvF5X84FjkVEEi
R8As9g==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:09 2025 by rpki-client