Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/246182213039B298C4A9FA87E2ACD4454889C79E.cer
File:                     246182213039B298C4A9FA87E2ACD4454889C79E.cer (raw, json)
Hash identifier:          hh839p5YAB4Whi6YXAm5QcDpUP9eJiNSNDdazDHJIus=
Subject key identifier:   24:61:82:21:30:39:B2:98:C4:A9:FA:87:E2:AC:D4:45:48:89:C7:9E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2B2247B1FB8178A96A55E9C33BF0F9F0151C04CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/1/246182213039B298C4A9FA87E2ACD4454889C79E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 01:14:12 +0000
Certificate not after:    Thu 03 Apr 2025 01:19:12 +0000
Subordinate resources:    AS: 264570
                          IP: 138.36.40.0/22
                          IP: 2804:21bc::/32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:22:47:b1:fb:81:78:a9:6a:55:e9:c3:3b:f0:f9:f0:15:1c:04:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 01:14:12 2024 GMT
            Not After : Apr  3 01:19:12 2025 GMT
        Subject: CN=246182213039B298C4A9FA87E2ACD4454889C79E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:68:ea:2f:22:c0:44:82:e8:50:3d:9f:47:d0:
                    5e:1e:02:58:59:ca:f6:41:d0:37:32:c2:96:d2:18:
                    e2:d6:b7:45:d2:c2:74:19:75:12:d3:5b:58:0c:e4:
                    15:2c:5c:f6:4f:f0:92:f1:b7:76:e9:0b:93:61:eb:
                    1f:fd:ab:06:cd:01:b2:1c:29:a8:1b:4c:ec:28:09:
                    9b:aa:9b:d5:0c:c5:98:57:58:bc:4d:35:53:44:c3:
                    73:a5:98:45:ef:8f:9e:f6:3c:43:41:04:ea:94:60:
                    31:70:22:96:98:a2:7f:f0:74:cd:29:5f:a8:54:50:
                    ac:fd:52:e4:ed:a6:c2:e5:28:8c:7d:90:51:fe:76:
                    40:91:3f:7c:b8:ae:20:3e:2a:82:ff:ec:08:3a:ed:
                    cb:ff:e6:e0:cd:f7:4a:b7:eb:4b:95:88:27:d5:ca:
                    1c:14:f0:66:12:01:84:ec:57:de:95:fc:bc:52:f1:
                    e1:b7:cb:22:35:95:42:40:7b:b5:61:66:b6:b2:78:
                    94:f5:37:12:3b:99:ef:35:14:5c:7f:91:60:fb:e4:
                    34:4e:48:0a:9c:d7:a3:ad:ac:fa:c3:c3:ab:70:0a:
                    52:fc:52:d8:37:48:b7:82:a2:a6:55:4e:d4:b5:f7:
                    30:e1:62:37:c8:6e:7d:60:69:75:08:5c:cb:34:d0:
                    dc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                24:61:82:21:30:39:B2:98:C4:A9:FA:87:E2:AC:D4:45:48:89:C7:9E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/1/246182213039B298C4A9FA87E2ACD4454889C79E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.40.0/22
                IPv6:
                  2804:21bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264570

    Signature Algorithm: sha256WithRSAEncryption
         db:d9:06:42:6b:61:a9:27:cd:fe:d2:18:67:51:7b:1f:54:47:
         32:af:e2:74:a5:90:71:9c:9f:66:c6:f2:fd:02:68:47:bc:42:
         e1:aa:03:05:48:20:24:12:62:9e:ae:1f:62:12:b8:ac:3b:55:
         33:20:fc:55:54:76:f4:66:4f:d4:70:2d:47:5a:ad:f9:c4:87:
         b7:d5:df:db:58:65:c7:af:b4:ae:74:0b:de:c5:7f:66:ac:da:
         01:03:9a:31:06:16:40:19:1b:7d:7f:ad:4e:e5:0c:0f:bf:b0:
         43:6e:39:07:f0:e3:25:33:31:ff:8e:67:8d:b1:a1:bd:05:91:
         16:8c:36:24:94:ea:cc:f4:8e:f6:21:45:d6:1b:be:e4:26:5d:
         02:6b:c9:b6:b9:14:c9:8b:21:c6:53:95:9f:df:9b:fb:be:c7:
         88:df:45:0b:62:c0:11:1a:e7:d6:49:a0:8a:11:29:b8:16:75:
         a2:25:c6:63:b8:18:63:bf:38:84:05:65:0a:18:b2:df:80:cc:
         18:de:ec:06:3b:82:66:71:02:c4:a2:05:fd:a6:2d:63:dc:dd:
         e8:ff:87:9c:b2:1e:53:4a:c6:d4:7c:6b:db:11:f6:49:6e:5b:
         84:65:97:49:09:fd:d2:e5:c1:63:6b:6d:48:28:01:f4:35:90:
         36:3b:39:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:22:25 2025 by rpki-client