Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2FEB984B03AE182A25501462242A224C191703BF.cer
File:                     2FEB984B03AE182A25501462242A224C191703BF.cer (raw, json)
Hash identifier:          TGp6DDeuGDJ8XvsEmSOYfcQ7TkGBlOS8aeVZvlPyKoQ=
Subject key identifier:   2F:EB:98:4B:03:AE:18:2A:25:50:14:62:24:2A:22:4C:19:17:03:BF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       485E89D4BE88A6D834396CC676686EEBC36C9D76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/2FEB984B03AE182A25501462242A224C191703BF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Nov 2024 21:05:06 +0000
Certificate not after:    Wed 26 Nov 2025 21:10:06 +0000
Subordinate resources:    AS: 270288
                          IP: 200.123.232.0/22
                          IP: 2804:69bc::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5e:89:d4:be:88:a6:d8:34:39:6c:c6:76:68:6e:eb:c3:6c:9d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 27 21:05:06 2024 GMT
            Not After : Nov 26 21:10:06 2025 GMT
        Subject: CN=2FEB984B03AE182A25501462242A224C191703BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3c:ef:3d:02:14:61:89:bc:d0:42:f3:c2:9b:
                    fc:e7:a3:61:27:6e:58:f6:d7:7e:62:eb:0e:d5:e7:
                    05:b7:a9:4a:42:32:09:52:76:73:e8:27:86:05:81:
                    b0:22:50:58:61:b7:3f:c7:cc:5a:57:9e:ab:a5:d4:
                    de:55:f8:d4:5c:43:dc:e2:22:40:13:4f:aa:df:49:
                    71:ce:e8:b4:7e:fc:05:e5:28:da:31:dc:4d:59:15:
                    11:2f:9d:b3:07:43:02:de:d0:86:7a:87:99:60:87:
                    e4:06:6d:b8:ee:fa:47:25:ba:57:0c:33:b9:d3:30:
                    82:13:2c:d5:24:9d:3a:27:0c:1c:a2:25:06:55:b1:
                    19:5c:d7:fc:a5:45:c1:72:f2:3f:a2:24:ce:f4:bc:
                    c5:a7:66:0c:41:82:55:b3:46:bd:c0:2c:24:f2:3f:
                    3b:94:f8:c3:e1:3c:0c:2e:41:73:2e:4c:35:3a:4c:
                    ee:b6:47:07:4e:28:4a:e6:e2:1f:09:3e:58:16:70:
                    3a:ff:42:89:3c:f6:c6:9b:20:80:d0:6a:81:71:d0:
                    76:00:a4:9d:10:d7:46:a7:57:cf:ef:7a:13:5e:ef:
                    6c:5e:04:86:20:cb:5e:b4:9e:79:49:49:d9:51:28:
                    e2:18:dd:8c:7d:59:6c:41:05:63:b4:74:00:71:aa:
                    47:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:EB:98:4B:03:AE:18:2A:25:50:14:62:24:2A:22:4C:19:17:03:BF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/2FEB984B03AE182A25501462242A224C191703BF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.232.0/22
                IPv6:
                  2804:69bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270288

    Signature Algorithm: sha256WithRSAEncryption
         b9:9f:49:f2:f9:2b:dd:41:46:33:8e:3d:93:44:83:5a:fa:75:
         d5:20:86:db:55:3d:48:4c:7b:bd:29:a6:e5:4c:7e:18:f6:e9:
         0d:d7:8e:4d:b3:c0:83:db:6c:40:34:bb:d3:ba:f4:47:58:a2:
         3e:b5:5a:2c:c9:ff:81:ed:88:aa:83:d7:94:72:1d:54:1d:06:
         b9:da:de:b1:56:7e:3d:6a:07:76:13:af:62:04:e8:f3:5f:51:
         a3:38:6b:54:af:e2:00:a3:6b:64:05:c1:36:1e:83:30:ec:67:
         ca:cb:24:88:32:b6:4d:31:93:05:11:f5:7b:fd:65:1d:ea:e0:
         0a:dd:91:f0:b4:56:20:64:c8:cc:d1:e7:e8:f4:0b:3f:37:1b:
         5f:4c:ac:57:9a:13:70:18:da:0f:44:d1:8c:7d:7f:d6:26:6f:
         05:ec:8d:00:38:c6:d1:85:28:36:a3:05:3c:ed:fc:50:ba:12:
         27:1b:2f:31:cf:aa:9c:71:5f:87:b3:a1:c4:ad:e4:40:6b:a3:
         f0:46:45:00:52:7b:d5:7e:8c:dd:89:b4:62:7f:2e:14:f4:5d:
         89:6a:b1:54:02:77:9c:82:5b:9b:a7:f6:12:5d:88:9b:6e:90:
         ef:1e:91:0b:47:a2:d7:00:de:aa:dd:5e:09:e5:11:f0:1e:73:
         ad:9c:b3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:19 2025 by rpki-client