Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/50F4615FFCF1E990B103A742A3FE00FC5724B1FC.cer
File:                     50F4615FFCF1E990B103A742A3FE00FC5724B1FC.cer (raw, json)
Hash identifier:          xC9dNdV1YufPnl5QNtxrlC/n9LeEGcEo+YlOfbL8KL0=
Subject key identifier:   50:F4:61:5F:FC:F1:E9:90:B1:03:A7:42:A3:FE:00:FC:57:24:B1:FC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0B5A892D408BD21CA11B6CF4876CBD6E0098A0E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/50F4615FFCF1E990B103A742A3FE00FC5724B1FC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Nov 2024 14:36:00 +0000
Certificate not after:    Fri 21 Nov 2025 14:41:00 +0000
Subordinate resources:    AS: 270962
                          IP: 187.84.120.0/22
                          IP: 2804:7428::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:5a:89:2d:40:8b:d2:1c:a1:1b:6c:f4:87:6c:bd:6e:00:98:a0:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 22 14:36:00 2024 GMT
            Not After : Nov 21 14:41:00 2025 GMT
        Subject: CN=50F4615FFCF1E990B103A742A3FE00FC5724B1FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:59:84:17:6e:a3:ba:4f:be:dc:22:0e:96:d3:
                    88:24:ea:fe:76:bf:63:5d:12:58:5c:a7:ae:d1:78:
                    16:66:08:26:eb:18:ba:3d:95:98:11:40:66:e1:e3:
                    09:b4:7a:8a:6f:81:72:fc:04:17:4c:a5:c8:d4:b4:
                    70:6b:d3:10:3d:90:06:84:ae:17:8a:e6:a4:18:a7:
                    0e:7d:81:cc:f8:78:4d:74:73:16:15:f3:c1:d0:63:
                    d1:ca:3c:63:26:dd:de:e0:dc:9e:bc:3b:a8:6a:18:
                    c9:90:3b:5d:56:84:cc:ff:07:b6:fd:bd:53:f7:a2:
                    92:d0:0f:e4:12:61:e1:43:09:ce:b5:1f:2c:cc:de:
                    e3:e4:99:26:33:9c:83:7f:61:60:6c:cc:38:68:15:
                    56:d7:c1:88:cf:2c:9f:fa:1e:29:82:d5:a7:70:e9:
                    bf:16:87:7f:da:bd:3e:fb:d6:1d:0f:2d:fc:e1:ed:
                    20:25:e8:c8:ca:ce:4e:b3:76:fc:21:47:b7:b7:97:
                    87:70:84:5b:cf:67:12:48:30:22:4b:70:f4:df:a4:
                    9b:a1:96:a2:78:fe:7c:c6:90:53:25:e7:73:ab:b0:
                    64:79:4f:ee:f5:7f:54:8b:f8:2e:87:59:3c:5a:36:
                    92:9e:70:15:c9:35:f3:52:90:0e:62:d6:92:29:13:
                    22:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                50:F4:61:5F:FC:F1:E9:90:B1:03:A7:42:A3:FE:00:FC:57:24:B1:FC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/50F4615FFCF1E990B103A742A3FE00FC5724B1FC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.120.0/22
                IPv6:
                  2804:7428::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270962

    Signature Algorithm: sha256WithRSAEncryption
         72:25:27:b9:db:50:6f:e5:85:9a:a4:dc:a4:11:d1:89:b7:fa:
         af:e8:4b:bd:7f:d4:34:16:ea:75:ec:9f:b0:f7:94:0a:b2:c9:
         a6:89:08:0e:99:15:bf:a7:de:0e:b2:ec:58:73:93:23:e0:e7:
         02:75:09:fe:dd:de:6f:e7:cf:6d:9f:b5:df:af:f7:d8:73:e1:
         58:52:54:80:94:b8:41:1a:35:f1:5b:bb:38:64:71:9f:fd:df:
         c3:94:f0:d1:87:ef:d5:72:c5:dc:d2:f0:bf:58:bb:ad:76:1e:
         19:99:b4:aa:1c:14:32:2d:da:17:71:90:98:6d:36:65:eb:f0:
         e2:2c:0c:bb:22:5f:7d:45:42:4c:18:3c:93:a6:86:26:01:2b:
         3f:10:21:d1:2c:d2:0f:92:64:1a:8f:6d:26:ec:dd:55:a2:5d:
         38:f8:42:b9:26:f1:53:5f:dc:b6:a8:6c:cf:4f:65:f6:a4:84:
         3b:ac:3b:13:23:3d:bf:34:ed:9d:76:bb:2c:16:03:04:31:ac:
         9d:35:c4:8c:1b:f7:16:97:cc:af:4e:27:8f:26:39:e9:a6:31:
         fa:24:61:62:5b:3f:fa:bb:ac:3a:8c:28:b0:5f:5a:e3:46:be:
         40:3f:a4:4f:cb:49:61:41:3e:3a:a3:6d:25:a3:e8:1a:19:49:
         81:59:62:97
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUC1qJLUCL0hyhG2z0h2y9bgCYoOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMjIxNDM2MDBaFw0yNTExMjExNDQxMDBaMDMxMTAvBgNV
BAMTKDUwRjQ2MTVGRkNGMUU5OTBCMTAzQTc0MkEzRkUwMEZDNTcyNEIxRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuWYQXbqO6T77cIg6W04gk6v52
v2NdElhcp67ReBZmCCbrGLo9lZgRQGbh4wm0eopvgXL8BBdMpcjUtHBr0xA9kAaE
rheK5qQYpw59gcz4eE10cxYV88HQY9HKPGMm3d7g3J68O6hqGMmQO11WhMz/B7b9
vVP3opLQD+QSYeFDCc61HyzM3uPkmSYznIN/YWBszDhoFVbXwYjPLJ/6HimC1adw
6b8Wh3/avT771h0PLfzh7SAl6MjKzk6zdvwhR7e3l4dwhFvPZxJIMCJLcPTfpJuh
lqJ4/nzGkFMl53OrsGR5T+71f1SL+C6HWTxaNpKecBXJNfNSkA5i1pIpEyJRAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRQ9GFf/PHpkLED
p0Kj/gD8VySx/DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNW5p
dDNORFBLSGpINzFxTnlhZ1RWN3htR2M3ZUpXZEZFQ0Q3WTdXTHk3MTUvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVu
aXQzTkRQS0hqSDcxcU55YWdUVjd4bUdjN2VKV2RGRUNEN1k3V0x5NzE1LzAvNTBG
NDYxNUZGQ0YxRTk5MEIxMDNBNzQyQTNGRTAwRkM1NzI0QjFGQy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCu1R4MA0EAgACMAcDBQAoBHQoMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQicjANBgkqhkiG9w0BAQsFAAOCAQEAciUnudtQb+WFmqTc
pBHRibf6r+hLvX/UNBbqdeyfsPeUCrLJpokIDpkVv6feDrLsWHOTI+DnAnUJ/t3e
b+fPbZ+136/32HPhWFJUgJS4QRo18Vu7OGRxn/3fw5Tw0Yfv1XLF3NLwv1i7rXYe
GZm0qhwUMi3aF3GQmG02Zevw4iwMuyJffUVCTBg8k6aGJgErPxAh0SzSD5JkGo9t
JuzdVaJdOPhCuSbxU1/ctqhsz09l9qSEO6w7EyM9vzTtnXa7LBYDBDGsnTXEjBv3
FpfMr04njyY56aYx+iRhYls/+rusOowosF9a40a+QD+kT8tJYUE+OqNtJaPoGhlJ
gVlilw==
-----END CERTIFICATE-----
Generated at Thu Feb 20 17:38:15 2025 by rpki-client