Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1B98F44B9168C77B05AAB78D5A4528E229CA12C2.cer
File:                     1B98F44B9168C77B05AAB78D5A4528E229CA12C2.cer (raw, json)
Hash identifier:          TSsU7XFMUikKeAjLqSSKBY4j/jdod3KGw3xvFE+E3pc=
Subject key identifier:   1B:98:F4:4B:91:68:C7:7B:05:AA:B7:8D:5A:45:28:E2:29:CA:12:C2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1D30A60CC99015B1B0A46A7283B6175FEEA3E3F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/1/1B98F44B9168C77B05AAB78D5A4528E229CA12C2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 18:09:45 +0000
Certificate not after:    Thu 03 Apr 2025 18:14:45 +0000
Subordinate resources:    AS: 271423
                          IP: 200.36.196.0/22
                          IP: 2804:7b4c::/32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:30:a6:0c:c9:90:15:b1:b0:a4:6a:72:83:b6:17:5f:ee:a3:e3:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 18:09:45 2024 GMT
            Not After : Apr  3 18:14:45 2025 GMT
        Subject: CN=1B98F44B9168C77B05AAB78D5A4528E229CA12C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7a:97:4b:1d:41:d8:f6:54:80:f1:e8:ea:a4:
                    73:23:ed:94:ae:84:39:dd:ec:b0:2a:75:99:bc:e0:
                    91:dd:94:53:17:f6:9b:ce:86:c8:48:45:26:7b:0c:
                    f1:fb:20:b9:a5:e1:4a:51:f6:88:8a:ed:3f:3f:dc:
                    e7:18:51:2a:d9:eb:41:7a:bd:7c:08:67:17:40:12:
                    ec:33:d6:ee:91:49:d8:2a:be:86:6a:98:16:d9:aa:
                    33:25:37:a6:9f:68:65:21:17:87:4d:68:17:4e:02:
                    d9:09:86:40:cf:25:f9:65:4d:3e:db:9a:0b:f1:48:
                    87:90:3e:ad:8e:a7:7c:91:44:1d:c6:3b:6e:c2:87:
                    d6:3d:63:a7:95:76:2a:e4:ea:17:53:dc:8c:15:50:
                    0d:55:60:91:b6:e4:76:5a:ad:ec:7c:d3:3a:4b:bd:
                    b8:a0:1a:95:a3:de:e7:d7:40:94:c9:4b:99:b8:55:
                    e1:5b:b3:13:17:6a:b1:c5:43:b1:47:84:c9:a7:0d:
                    8a:69:45:86:85:25:3b:d1:e0:e9:51:07:34:36:a8:
                    a8:92:ee:be:d2:1d:c9:86:c6:8d:39:32:e4:30:0c:
                    eb:b9:62:81:1c:13:e0:99:98:be:06:cd:82:dc:0f:
                    e2:2e:6f:c1:ed:aa:60:1c:ba:8b:a8:57:fa:79:8f:
                    e5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:98:F4:4B:91:68:C7:7B:05:AA:B7:8D:5A:45:28:E2:29:CA:12:C2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/1/1B98F44B9168C77B05AAB78D5A4528E229CA12C2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.196.0/22
                IPv6:
                  2804:7b4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271423

    Signature Algorithm: sha256WithRSAEncryption
         9b:59:b4:2a:c6:3d:eb:f1:be:1e:92:34:a6:f5:8e:36:1d:62:
         d8:d9:ee:fa:18:2b:43:d4:0a:2b:df:8b:0f:f2:4f:0b:31:ce:
         d4:d2:6a:69:1a:38:df:1c:cd:4f:af:6a:b1:2e:79:f2:5c:f6:
         ac:67:02:f4:ec:d0:ae:c2:99:a9:10:28:42:25:19:d5:74:61:
         ff:45:cc:c4:9f:7d:11:d8:3e:36:2f:0f:dc:d9:b9:2a:b7:d7:
         59:4b:7c:04:0a:41:cb:fd:73:0f:9c:b9:5e:18:3b:8a:d8:72:
         a2:5f:9b:28:87:66:5a:3e:e2:f6:de:82:7f:ea:69:80:e0:76:
         f3:cd:4e:c5:de:92:e5:c6:40:32:fa:d1:ce:41:f9:34:63:37:
         0a:3f:21:c9:f7:03:cd:f0:a4:2c:b0:d1:f4:41:b5:48:5e:80:
         83:c5:36:bb:fb:d6:8b:47:08:40:a0:85:ef:db:cc:65:32:69:
         e6:2a:ff:5b:93:18:82:59:f9:71:fb:4b:94:87:cb:18:21:e2:
         db:8a:62:68:25:e8:8e:a2:98:2f:c8:6b:07:5d:4f:82:8e:e6:
         3a:5b:fd:fe:79:31:41:ca:da:0f:96:ea:c9:2a:ff:1d:e5:0e:
         81:83:39:ba:56:76:e0:b8:dc:9a:18:7c:73:88:28:4c:96:43:
         6c:3c:c8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:06:55 2025 by rpki-client