Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.cer
File:                     32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.cer (raw, json)
Hash identifier:          8PLuAmAaW2SmIagXZ51A730Mqmc6i01nFjQ90E6oWjo=
Subject key identifier:   32:BB:51:84:13:3F:0A:D5:68:62:7F:CE:8D:A6:B0:35:4D:CE:9B:EC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       466BBE7C6D8600DFFDF5337315465EDA31D8C969
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 31 Jan 2025 12:29:19 +0000
Certificate not after:    Fri 30 Jan 2026 12:34:19 +0000
Subordinate resources:    AS: 272182
                          IP: 2804:8330::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:6b:be:7c:6d:86:00:df:fd:f5:33:73:15:46:5e:da:31:d8:c9:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 31 12:29:19 2025 GMT
            Not After : Jan 30 12:34:19 2026 GMT
        Subject: CN=32BB5184133F0AD568627FCE8DA6B0354DCE9BEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:44:37:0e:bb:87:fb:9c:ba:fc:a2:a2:5c:f6:
                    a0:a3:d8:1d:9a:36:7b:a7:37:e8:45:5f:d7:6c:b5:
                    12:dd:36:88:e7:5e:6f:07:00:62:4d:b4:aa:b1:85:
                    7f:9c:7c:68:55:5d:d0:22:13:f6:25:01:5f:90:c8:
                    e1:b2:d3:cc:d6:94:d0:3e:29:12:df:39:48:d3:e2:
                    46:dd:f6:a8:d7:60:00:9d:b6:1b:37:98:93:2e:50:
                    9c:d6:2a:fe:bb:be:97:96:bc:a1:8c:34:ab:ac:dc:
                    d4:da:eb:d6:f4:47:b5:6a:09:88:f2:d9:57:e7:17:
                    ef:0a:65:2a:38:6b:f6:af:d6:b2:68:eb:72:d5:2c:
                    9a:34:ca:91:18:a7:90:56:6d:ed:82:27:87:61:35:
                    d8:7f:69:b6:90:3c:0b:7a:90:5f:99:b0:4c:11:37:
                    b9:51:b9:51:f7:f5:e0:32:5a:f9:dc:d1:d0:d3:83:
                    c8:1c:60:ed:38:bf:b1:25:39:36:ea:0a:16:8b:c3:
                    8a:e0:9b:37:27:89:9a:20:23:44:c4:af:a4:25:bc:
                    41:4a:8f:a6:7c:ee:50:48:d5:85:68:32:10:18:b4:
                    42:70:3d:b2:a5:e3:93:07:06:1f:e0:42:cd:1b:c5:
                    a8:39:bf:bc:07:b4:f2:b6:59:26:3a:37:03:cf:15:
                    b6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:BB:51:84:13:3F:0A:D5:68:62:7F:CE:8D:A6:B0:35:4D:CE:9B:EC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8330::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272182

    Signature Algorithm: sha256WithRSAEncryption
         41:1e:64:22:a5:70:a0:a6:46:6b:64:f5:43:b7:dd:8a:0d:90:
         d6:22:1a:ad:95:7d:8d:1e:74:0a:bc:ab:a9:bc:c8:71:77:ae:
         16:98:e3:8c:5e:06:84:28:a4:20:aa:5c:a6:6c:50:90:ea:81:
         62:cb:68:41:5f:6d:3e:a6:68:00:40:2c:26:cf:5d:fb:56:8a:
         e0:c7:d1:f1:29:89:4e:b7:be:08:77:26:1e:63:e7:7f:24:cd:
         f3:e4:28:85:a4:45:b6:c9:c0:84:0a:bf:5b:ac:f7:73:fb:38:
         d8:da:f9:e3:0a:55:c2:91:08:53:39:e7:4a:74:5b:42:88:10:
         4d:ad:06:ab:58:39:d5:cf:8b:c5:09:58:1a:ee:90:90:7f:04:
         23:77:38:79:c0:59:de:b4:a6:25:4e:55:6f:91:49:7b:29:78:
         97:01:ff:21:12:a9:50:3d:fb:53:0e:b9:cc:a5:80:d5:0b:15:
         59:22:d8:9f:73:7f:16:3f:b1:3e:ac:fe:40:62:b3:90:7d:f9:
         04:86:72:e7:af:d0:69:2b:70:76:ae:ce:69:ba:66:58:66:86:
         5e:f7:e9:aa:b1:81:74:08:66:9f:9f:87:75:1e:3e:e0:83:2a:
         3a:d8:52:a7:7e:e4:f3:b3:73:4e:d2:31:3e:ad:e5:b4:2f:07:
         f7:85:b7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:54 2025 by rpki-client