Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer
File:                     5429A630D95311C5AADAF5AC62BF18BF86863194.cer (raw, json)
Hash identifier:          ATexSyYGipw2DtmgPwossGCjKtuSUoRUrxXe+31jb6U=
Subject key identifier:   54:29:A6:30:D9:53:11:C5:AA:DA:F5:AC:62:BF:18:BF:86:86:31:94
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1DB4D6043002C032CAB5867BBC7FF3CCEDE6617F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Dec 2024 19:35:10 +0000
Certificate not after:    Thu 18 Dec 2025 19:40:10 +0000
Subordinate resources:    AS: 52593
                          IP: 170.83.208.0/22
                          IP: 177.87.232.0/22
                          IP: 2804:d10::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b4:d6:04:30:02:c0:32:ca:b5:86:7b:bc:7f:f3:cc:ed:e6:61:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 19 19:35:10 2024 GMT
            Not After : Dec 18 19:40:10 2025 GMT
        Subject: CN=5429A630D95311C5AADAF5AC62BF18BF86863194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6d:d9:6f:a2:71:4b:b3:5e:20:bf:c6:de:53:
                    33:3d:0c:13:b4:4e:0a:fb:04:7f:f8:71:5e:ad:05:
                    2b:e1:d0:3c:08:eb:f0:51:a0:30:fd:d1:5f:c4:d7:
                    5f:78:3e:a5:df:a5:de:0e:30:71:14:d2:51:96:87:
                    ec:3f:6c:a9:0c:70:7e:15:10:f0:7e:d3:ce:2c:ea:
                    5d:10:7e:e0:6f:af:a4:ec:41:fa:75:46:bd:2f:fd:
                    e4:e6:f0:50:d2:4f:d6:93:16:b5:02:cc:15:f4:8c:
                    9c:0e:36:27:28:96:5c:4c:7f:0a:e1:6e:b9:60:8f:
                    ab:4b:a8:ee:d8:ca:55:17:93:ad:85:f9:44:bb:3a:
                    3d:fc:46:07:d6:70:ad:d3:56:61:8f:79:4c:a9:87:
                    78:36:57:53:40:25:0b:37:d8:8c:f0:02:ce:16:23:
                    a1:3f:0a:53:a0:00:f2:71:a6:dd:77:b9:71:95:b5:
                    d6:b8:97:8d:25:f7:c3:25:31:e4:c5:5c:ca:54:5a:
                    a2:91:3f:46:60:ee:22:28:a8:aa:e7:c6:ab:0a:a0:
                    fc:0b:49:3b:c4:a3:9a:1d:05:c6:99:9f:c4:af:33:
                    5f:c8:0d:ee:d3:b4:a5:d4:b0:39:f1:19:93:66:c7:
                    c7:31:96:85:2b:e7:37:a2:ec:3b:ff:f9:48:ff:fc:
                    4e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:29:A6:30:D9:53:11:C5:AA:DA:F5:AC:62:BF:18:BF:86:86:31:94
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.208.0/22
                  177.87.232.0/22
                IPv6:
                  2804:d10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52593

    Signature Algorithm: sha256WithRSAEncryption
         ab:21:22:13:6a:a1:a5:cc:ec:f7:22:bf:8c:42:ad:35:c9:91:
         42:22:bf:3f:7f:c2:1f:9c:9f:8f:d6:0e:d0:18:3b:6c:2b:5a:
         4e:fe:23:82:3f:0c:29:bf:c0:77:51:7a:f1:5e:ec:88:18:c4:
         e9:d7:5e:7e:8d:09:4a:58:40:f1:d7:6d:cd:ba:df:e8:ce:fe:
         93:34:66:63:da:c8:89:13:48:1a:d7:06:0a:b4:44:00:c1:88:
         bd:ef:c7:09:fc:8e:75:e4:c8:2a:80:06:26:15:65:6c:06:b2:
         b6:67:1a:28:63:e3:fe:3b:70:bd:1b:d0:8a:08:89:37:1b:02:
         39:63:98:cb:63:30:e5:0b:11:30:31:c5:9b:16:cf:5a:18:50:
         59:c5:de:b8:4e:87:7a:d2:1b:78:e6:83:5e:e1:2f:00:ae:66:
         02:b2:99:40:b3:59:91:95:34:0f:21:76:3b:f5:6b:4e:2f:74:
         c0:95:ac:f7:44:34:29:90:66:28:a1:e1:cb:aa:b6:46:5a:07:
         09:db:3e:61:f8:ec:ca:0e:72:82:2d:22:e7:38:c5:a1:e8:7c:
         20:e7:74:69:fc:70:36:a0:61:25:8a:95:24:13:44:f5:42:8b:
         61:8b:fa:99:6f:e8:2d:fa:24:5d:b1:ab:9d:55:67:4b:9b:55:
         77:0d:e6:f5
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUHbTWBDACwDLKtYZ7vH/zzO3mYX8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEyMTkxOTM1MTBaFw0yNTEyMTgxOTQwMTBaMDMxMTAvBgNV
BAMTKDU0MjlBNjMwRDk1MzExQzVBQURBRjVBQzYyQkYxOEJGODY4NjMxOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxbdlvonFLs14gv8beUzM9DBO0
Tgr7BH/4cV6tBSvh0DwI6/BRoDD90V/E1194PqXfpd4OMHEU0lGWh+w/bKkMcH4V
EPB+084s6l0QfuBvr6TsQfp1Rr0v/eTm8FDST9aTFrUCzBX0jJwONicollxMfwrh
brlgj6tLqO7YylUXk62F+US7Oj38RgfWcK3TVmGPeUyph3g2V1NAJQs32IzwAs4W
I6E/ClOgAPJxpt13uXGVtda4l40l98MlMeTFXMpUWqKRP0Zg7iIoqKrnxqsKoPwL
STvEo5odBcaZn8SvM1/IDe7TtKXUsDnxGZNmx8cxloUr5zei7Dv/+Uj//E6lAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRUKaYw2VMRxara
9axivxi/hoYxlDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOE1T
VlhxMkFwb1BpWlJxWmFQQzNycTc2bllMVFVLZzdUOUtaUWFaWHdNSDcvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhN
U1ZYcTJBcG9QaVpScVphUEMzcnE3Nm5ZTFRVS2c3VDlLWlFhWlh3TUg3LzAvNTQy
OUE2MzBEOTUzMTFDNUFBREFGNUFDNjJCRjE4QkY4Njg2MzE5NC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCqlPQAwQCsVfoMA0EAgACMAcDBQAoBA0QMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwDNcTANBgkqhkiG9w0BAQsFAAOCAQEAqyEiE2qh
pczs9yK/jEKtNcmRQiK/P3/CH5yfj9YO0Bg7bCtaTv4jgj8MKb/Ad1F68V7siBjE
6ddefo0JSlhA8ddtzbrf6M7+kzRmY9rIiRNIGtcGCrREAMGIve/HCfyOdeTIKoAG
JhVlbAaytmcaKGPj/jtwvRvQigiJNxsCOWOYy2Mw5QsRMDHFmxbPWhhQWcXeuE6H
etIbeOaDXuEvAK5mArKZQLNZkZU0DyF2O/VrTi90wJWs90Q0KZBmKKHhy6q2RloH
Cds+Yfjsyg5ygi0i5zjFoeh8IOd0afxwNqBhJYqVJBNE9UKLYYv6mW/oLfokXbGr
nVVnS5tVdw3m9Q==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:52 2025 by rpki-client