Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/27780288A49801FF3F36E0B04D17C61F5804DB92.cer
File:                     27780288A49801FF3F36E0B04D17C61F5804DB92.cer (raw, json)
Hash identifier:          8HarzhBwsxR+guuuFSpTKQScGxvVh5pQJi3uBhQj7bI=
Subject key identifier:   27:78:02:88:A4:98:01:FF:3F:36:E0:B0:4D:17:C6:1F:58:04:DB:92
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2A25586BC73C542DEA57A5CE824EB700E76661B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/1/27780288A49801FF3F36E0B04D17C61F5804DB92.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 11:36:45 +0000
Certificate not after:    Thu 03 Apr 2025 11:41:45 +0000
Subordinate resources:    AS: 263998
                          IP: 143.0.84.0/22
                          IP: 170.245.200.0/22
                          IP: 2804:291c::/32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:25:58:6b:c7:3c:54:2d:ea:57:a5:ce:82:4e:b7:00:e7:66:61:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 11:36:45 2024 GMT
            Not After : Apr  3 11:41:45 2025 GMT
        Subject: CN=27780288A49801FF3F36E0B04D17C61F5804DB92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7d:c8:bb:5d:10:dd:f1:7b:b2:f6:36:02:ef:
                    37:e3:6c:3e:c5:0d:b8:88:a2:74:fb:9f:0a:72:49:
                    85:26:11:5e:b5:54:c7:14:21:17:01:b0:d1:2f:d0:
                    b7:a9:93:f1:95:c8:c2:2c:b4:38:fe:19:3c:db:2b:
                    8f:2a:1b:3f:92:58:b2:6a:51:ac:26:54:58:d0:3e:
                    6e:3b:43:76:12:63:78:15:bf:ed:0d:de:7c:14:b0:
                    91:69:87:c9:b6:f5:26:34:cd:c7:7a:b8:94:e2:dd:
                    ad:a4:4c:f2:de:af:30:4f:58:6f:6f:60:2c:c1:7f:
                    5c:8a:aa:d8:10:6d:ea:db:2f:26:16:d3:68:19:bb:
                    05:10:c8:3e:71:e9:99:17:9c:bf:34:1c:c6:b7:d1:
                    f9:f4:63:a0:e9:d2:00:22:09:2d:98:2c:8d:2c:da:
                    9f:b4:7f:b6:ad:6f:ba:32:82:1f:c5:b9:71:5c:f3:
                    04:b0:e2:11:73:34:14:01:59:e2:60:ed:3c:58:7a:
                    e2:06:c6:4d:28:79:37:ef:ee:bd:b3:8a:a8:d3:6a:
                    0b:48:64:de:3a:a6:11:5e:bd:e3:e2:23:a7:da:ae:
                    de:7d:9c:8e:42:82:1d:df:9e:d3:40:78:a5:9a:d6:
                    c8:66:7d:a9:50:cb:c9:2c:15:b3:c7:b3:d5:3e:a0:
                    90:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:78:02:88:A4:98:01:FF:3F:36:E0:B0:4D:17:C6:1F:58:04:DB:92
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/1/27780288A49801FF3F36E0B04D17C61F5804DB92.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.84.0/22
                  170.245.200.0/22
                IPv6:
                  2804:291c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263998

    Signature Algorithm: sha256WithRSAEncryption
         28:ea:2d:8d:01:30:05:ae:fe:38:39:46:69:28:c3:8c:9d:10:
         3a:22:ae:cf:bd:c9:c3:23:af:ef:cb:fc:4a:67:a3:68:04:38:
         2a:ff:22:c1:b4:37:96:5d:39:4c:90:0b:8d:63:8b:5c:2b:97:
         eb:09:a4:8d:50:4a:54:6e:f2:2e:63:d3:d9:58:8e:fa:90:40:
         a7:31:be:73:14:d7:68:2e:3e:ee:b0:71:ce:87:0c:f9:d5:06:
         81:76:a8:44:df:ac:b2:ec:24:d1:b1:4d:e7:8c:60:87:4d:a0:
         69:51:fc:e6:08:aa:36:44:ee:92:2d:2e:d2:c3:0e:ab:3d:41:
         86:ef:24:cc:78:ed:28:e1:9a:a2:da:e7:30:3b:2b:98:83:44:
         91:c2:62:97:36:e8:b2:9e:cc:2a:3a:23:7e:13:06:5b:c6:71:
         59:6e:e9:c4:03:4e:d0:3f:db:ee:ee:26:29:80:d4:aa:4e:a2:
         5c:62:ba:29:d3:97:a8:6d:cb:d3:3d:52:49:8f:ec:30:97:49:
         da:24:3a:50:e2:1f:cb:e8:ec:db:65:c2:e2:ff:8c:15:b6:6d:
         5e:98:47:80:45:48:c6:d0:77:aa:e3:de:9c:78:23:67:4a:f9:
         28:68:05:07:46:74:ea:11:9e:d3:b2:6b:94:01:52:5d:d6:12:
         5e:4d:4a:a1
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUKiVYa8c8VC3qV6XOgk63AOdmYbIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxMTM2NDVaFw0yNTA0MDMxMTQxNDVaMDMxMTAvBgNV
BAMTKDI3NzgwMjg4QTQ5ODAxRkYzRjM2RTBCMDREMTdDNjFGNTgwNERCOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAfci7XRDd8Xuy9jYC7zfjbD7F
DbiIonT7nwpySYUmEV61VMcUIRcBsNEv0Lepk/GVyMIstDj+GTzbK48qGz+SWLJq
UawmVFjQPm47Q3YSY3gVv+0N3nwUsJFph8m29SY0zcd6uJTi3a2kTPLerzBPWG9v
YCzBf1yKqtgQberbLyYW02gZuwUQyD5x6ZkXnL80HMa30fn0Y6Dp0gAiCS2YLI0s
2p+0f7atb7oygh/FuXFc8wSw4hFzNBQBWeJg7TxYeuIGxk0oeTfv7r2ziqjTagtI
ZN46phFevePiI6fart59nI5Cgh3fntNAeKWa1shmfalQy8ksFbPHs9U+oJAtAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQneAKIpJgB/z82
4LBNF8YfWATbkjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQjFZ
bjJmUWpGVFpDS3F6ZnBEd3JzaDlvWldCb1V4VFcxUnBwTmpFVTNlaEgvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ix
WW4yZlFqRlRaQ0txemZwRHdyc2g5b1pXQm9VeFRXMVJwcE5qRVUzZWhILzEvMjc3
ODAyODhBNDk4MDFGRjNGMzZFMEIwNEQxN0M2MUY1ODA0REI5Mi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCjwBUAwQCqvXIMA0EAgACMAcDBQAoBCkcMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQHPjANBgkqhkiG9w0BAQsFAAOCAQEAKOotjQEw
Ba7+ODlGaSjDjJ0QOiKuz73JwyOv78v8SmejaAQ4Kv8iwbQ3ll05TJALjWOLXCuX
6wmkjVBKVG7yLmPT2ViO+pBApzG+cxTXaC4+7rBxzocM+dUGgXaoRN+ssuwk0bFN
54xgh02gaVH85giqNkTuki0u0sMOqz1Bhu8kzHjtKOGaotrnMDsrmINEkcJilzbo
sp7MKjojfhMGW8ZxWW7pxANO0D/b7u4mKYDUqk6iXGK6KdOXqG3L0z1SSY/sMJdJ
2iQ6UOIfy+js22XC4v+MFbZtXphHgEVIxtB3quPenHgjZ0r5KGgFB0Z06hGe07Jr
lAFSXdYSXk1KoQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:40:11 2025 by rpki-client