Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3150E72F416D44754BF18D019F7809CC304C05DA.cer
File:                     3150E72F416D44754BF18D019F7809CC304C05DA.cer (raw, json)
Hash identifier:          kcoxy2I+SbiaRJ7TTWYgK8sgJ3GY5F0Ir2Cd9Htb56s=
Subject key identifier:   31:50:E7:2F:41:6D:44:75:4B:F1:8D:01:9F:78:09:CC:30:4C:05:DA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5B64DD567EEE17B8F9094D389C1B3C73D0DF29C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/1/3150E72F416D44754BF18D019F7809CC304C05DA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:26 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:26 +0000
Subordinate resources:    AS: 264096
                          IP: 201.77.8.0/21
                          IP: 2804:2264::/32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:64:dd:56:7e:ee:17:b8:f9:09:4d:38:9c:1b:3c:73:d0:df:29:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:26 2024 GMT
            Not After : Apr  2 18:30:26 2025 GMT
        Subject: CN=3150E72F416D44754BF18D019F7809CC304C05DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a0:8f:65:37:5a:3e:79:4d:55:16:0f:97:a9:
                    3f:9c:33:81:b3:e1:fa:1a:17:0f:4e:36:2f:db:00:
                    37:e3:ba:c3:40:9b:e9:c8:9b:0e:96:42:2c:b3:75:
                    6b:6f:8b:0d:b5:11:d4:6c:41:d6:7e:50:04:34:36:
                    c9:72:d0:06:a7:58:b0:c7:69:93:ad:2d:e2:ba:16:
                    d5:64:90:98:88:10:12:75:8b:63:fa:77:54:05:b2:
                    bd:d2:44:52:2e:f8:dd:20:35:85:4b:4b:0e:d1:61:
                    fb:87:31:07:85:dc:60:fa:50:e3:7f:d2:51:74:e2:
                    22:1b:33:00:99:4b:86:5f:ce:d6:b3:9e:1d:05:b2:
                    14:a3:80:d8:c6:23:6b:47:36:f3:ea:65:4a:8c:87:
                    8e:ea:7f:8b:d7:91:cf:b6:3d:d0:e3:e4:cf:cc:77:
                    93:9e:cc:b2:0e:e1:69:d4:26:fe:2d:36:e8:39:b9:
                    e0:a7:e3:e2:23:9b:8b:36:04:b5:aa:cc:67:51:c2:
                    75:3b:31:fb:d8:82:2b:b1:9b:86:75:1e:29:19:e0:
                    7e:e9:8d:51:60:16:1f:8f:a6:89:44:54:3e:43:03:
                    e0:83:97:b1:88:93:6f:03:22:8b:d0:aa:9f:17:75:
                    ba:4f:af:25:29:c5:b8:39:3b:a7:20:7e:34:91:f2:
                    b4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                31:50:E7:2F:41:6D:44:75:4B:F1:8D:01:9F:78:09:CC:30:4C:05:DA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/1/3150E72F416D44754BF18D019F7809CC304C05DA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.8.0/21
                IPv6:
                  2804:2264::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264096

    Signature Algorithm: sha256WithRSAEncryption
         22:f4:d5:d5:7d:f0:92:d0:03:4f:7c:fb:e5:86:98:47:9e:01:
         f6:97:82:99:31:c7:35:c6:a8:f0:4f:ce:ec:69:ad:6f:15:4b:
         3e:b4:72:05:cc:ca:37:6b:c3:0d:4f:35:d8:d6:df:9b:3d:81:
         a8:b9:aa:c2:91:5a:f8:ce:b0:63:a1:79:d6:10:77:ae:62:3d:
         c8:cf:7d:e3:bc:ac:88:31:16:b6:c9:0e:dd:40:e6:2b:11:a0:
         9f:d8:6a:5c:03:1a:8a:53:5d:72:5d:bc:62:76:83:a0:26:24:
         95:db:e3:70:65:d2:13:6f:0e:28:20:b6:ac:3d:a4:16:35:f5:
         90:10:33:e6:12:c0:ca:28:58:12:c9:b0:04:8e:8b:a5:f5:56:
         7e:97:6f:a6:94:a8:5d:aa:72:93:63:1b:99:f8:a5:4f:a2:ff:
         21:7e:2d:93:b1:e6:d6:81:c6:49:4e:8f:ec:b2:db:a6:b5:9d:
         5d:e4:b7:be:fd:82:59:d1:52:bf:72:a0:46:a0:97:0c:2a:9e:
         1d:91:5c:87:16:c0:9b:23:e6:80:29:9c:ac:de:46:99:12:e2:
         55:7d:3d:3e:64:42:87:cc:9a:21:ce:63:e0:d3:b6:19:2c:56:
         07:45:3b:66:84:4a:56:d7:79:f5:ce:47:1e:6c:84:e8:84:57:
         0e:ab:7b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:08 2025 by rpki-client