Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.cer
File:                     358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.cer (raw, json)
Hash identifier:          Pi1RQraQiCXMqabyzi0TuiAIL0omfWFcbUm9I66ohLk=
Subject key identifier:   35:8D:35:26:28:3B:AF:81:BF:39:4F:D5:D5:1A:9A:7C:6A:6D:5E:01
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       41DBB70072C8DA8EDACD6F11F5D6F224FC715676
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Feb 2025 20:11:30 +0000
Certificate not after:    Mon 02 Feb 2026 20:16:30 +0000
Subordinate resources:    AS: 52596
                          IP: 179.191.48.0/21
                          IP: 2804:d14::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:db:b7:00:72:c8:da:8e:da:cd:6f:11:f5:d6:f2:24:fc:71:56:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  3 20:11:30 2025 GMT
            Not After : Feb  2 20:16:30 2026 GMT
        Subject: CN=358D3526283BAF81BF394FD5D51A9A7C6A6D5E01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ad:56:7b:93:ad:9b:d9:1f:d6:4f:d1:ab:9a:
                    6e:a5:33:25:81:73:c9:cb:c9:92:f4:c4:ba:17:3d:
                    05:01:b5:10:55:c5:b7:8b:a4:24:33:7f:70:73:b1:
                    79:ac:83:c4:59:5a:10:04:33:a9:56:3b:ce:a8:ec:
                    66:da:f4:99:3b:50:ef:e6:f5:ee:0a:a5:c7:bf:fd:
                    05:d9:8c:ed:80:81:46:50:e4:7c:60:4d:94:42:7f:
                    62:e4:8a:0d:66:d6:4c:98:22:a6:83:ea:87:da:d0:
                    f5:4e:3e:f3:03:b2:63:2b:65:28:ae:36:93:0a:94:
                    6c:81:ad:a7:61:95:d1:3c:fb:fb:7b:7e:1a:ff:df:
                    0e:66:ab:4f:d0:f1:2d:17:a5:e6:67:5a:ce:d2:e7:
                    b6:d3:58:a4:78:cc:1e:dd:ff:7e:bd:38:01:5e:9b:
                    3f:87:6b:e3:3a:86:e2:c4:58:60:5d:ff:2b:51:ff:
                    7e:cc:5a:3f:4d:a4:83:f9:87:7f:46:bc:20:35:8a:
                    a8:e3:51:c4:2b:62:83:47:c7:d2:df:58:30:e4:51:
                    19:4f:5f:18:24:2a:33:f0:77:12:a2:9e:0f:f3:64:
                    58:19:ae:e7:c1:0d:51:68:36:b6:40:cb:e6:be:74:
                    d7:9c:44:31:20:13:1c:1b:09:fb:db:43:c7:bb:2a:
                    ad:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                35:8D:35:26:28:3B:AF:81:BF:39:4F:D5:D5:1A:9A:7C:6A:6D:5E:01
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.48.0/21
                IPv6:
                  2804:d14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52596

    Signature Algorithm: sha256WithRSAEncryption
         45:a3:0a:c0:9e:b2:c4:6f:68:69:b3:08:fb:63:91:ab:a2:c7:
         cc:b1:85:99:7e:53:11:28:c9:ef:c4:33:b7:95:25:3e:1a:12:
         ea:ce:fc:10:1a:50:b7:6e:6d:cc:c5:d4:5a:c9:89:63:d0:8f:
         9f:88:dd:3a:7a:06:fb:6e:b8:1a:94:2b:ed:65:09:4f:03:74:
         ab:1f:82:f5:64:25:61:a3:6c:43:74:a6:18:03:14:d6:a1:da:
         20:cd:b3:29:27:25:14:2a:d4:77:76:77:87:b5:e2:45:b8:cd:
         ab:b5:25:dc:b1:f6:85:3a:67:6e:cf:62:17:ed:58:85:5d:58:
         ec:93:6d:fc:a2:a2:01:ec:c3:b5:33:e4:92:ed:23:22:d9:64:
         e3:2c:bc:b0:48:2e:c4:e8:8c:cb:c8:04:b6:0b:4c:42:cb:2d:
         55:e1:3a:f3:02:ba:fb:c9:30:78:05:04:08:94:e2:69:f6:32:
         62:13:ea:08:0c:5b:c4:f7:06:5f:0c:7a:00:1c:c9:00:8c:a1:
         db:40:85:57:19:3d:7e:38:53:04:90:05:b2:d2:76:10:9d:41:
         f7:9d:92:11:c0:7d:2d:e1:41:7e:95:99:c7:4f:99:9b:27:26:
         3a:04:47:b2:05:3f:c5:79:57:10:f0:d1:c3:09:16:a6:71:de:
         4e:27:98:37
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUQdu3AHLI2o7azW8R9dbyJPxxVnYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAyMDMyMDExMzBaFw0yNjAyMDIyMDE2MzBaMDMxMTAvBgNV
BAMTKDM1OEQzNTI2MjgzQkFGODFCRjM5NEZENUQ1MUE5QTdDNkE2RDVFMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCerVZ7k62b2R/WT9Grmm6lMyWB
c8nLyZL0xLoXPQUBtRBVxbeLpCQzf3BzsXmsg8RZWhAEM6lWO86o7Gba9Jk7UO/m
9e4Kpce//QXZjO2AgUZQ5HxgTZRCf2Lkig1m1kyYIqaD6ofa0PVOPvMDsmMrZSiu
NpMKlGyBradhldE8+/t7fhr/3w5mq0/Q8S0XpeZnWs7S57bTWKR4zB7d/369OAFe
mz+Ha+M6huLEWGBd/ytR/37MWj9NpIP5h39GvCA1iqjjUcQrYoNHx9LfWDDkURlP
XxgkKjPwdxKing/zZFgZrufBDVFoNrZAy+a+dNecRDEgExwbCfvbQ8e7Kq2fAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ1jTUmKDuvgb85
T9XVGpp8am1eATAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmli
Tllac1NnTXEyd3pFeGh5ZXNRVEJ0aEVhSE5ISmE0OG1lb0ZwVWJmV3gvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zp
Yk5ZWnNTZ01xMnd6RXhoeWVzUVRCdGhFYUhOSEphNDhtZW9GcFViZld4LzAvMzU4
RDM1MjYyODNCQUY4MUJGMzk0RkQ1RDUxQTlBN0M2QTZENUUwMS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQDs78wMA0EAgACMAcDBQAoBA0UMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwDNdDANBgkqhkiG9w0BAQsFAAOCAQEARaMKwJ6yxG9oabMI
+2ORq6LHzLGFmX5TESjJ78Qzt5UlPhoS6s78EBpQt25tzMXUWsmJY9CPn4jdOnoG
+264GpQr7WUJTwN0qx+C9WQlYaNsQ3SmGAMU1qHaIM2zKSclFCrUd3Z3h7XiRbjN
q7Ul3LH2hTpnbs9iF+1YhV1Y7JNt/KKiAezDtTPkku0jItlk4yy8sEguxOiMy8gE
tgtMQsstVeE68wK6+8kweAUECJTiafYyYhPqCAxbxPcGXwx6ABzJAIyh20CFVxk9
fjhTBJAFstJ2EJ1B952SEcB9LeFBfpWZx0+ZmycmOgRHsgU/xXlXEPDRwwkWpnHe
TieYNw==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:15 2025 by rpki-client