Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer
File:                     5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer (raw, json)
Hash identifier:          Fm3/Jj7s8Yc+ujwGfJQFmZCRaWsaZFjQWce2TmA+B9k=
Subject key identifier:   5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7896C9B6AEF84DE43A9BE6033E029DCBB1BC9F93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:36 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:36 +0000
Subordinate resources:    AS: 268235
                          IP: 45.236.116.0/22
                          IP: 2804:4e08::/32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:96:c9:b6:ae:f8:4d:e4:3a:9b:e6:03:3e:02:9d:cb:b1:bc:9f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:36 2024 GMT
            Not After : Apr  2 18:31:36 2025 GMT
        Subject: CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:87:0b:0d:58:1f:13:43:ce:21:68:1b:cd:78:
                    55:8b:19:48:7b:d4:fe:e9:dd:00:1a:b8:80:38:ac:
                    5f:e2:60:86:58:23:e1:d7:1f:df:0c:ee:58:c3:97:
                    66:2d:0c:20:f6:38:93:ac:53:04:85:8c:98:91:65:
                    1c:39:1b:6d:f2:32:18:1d:3a:15:da:98:e1:ed:50:
                    d8:cb:6b:a0:3f:94:d9:f9:c0:0e:0f:c9:78:0b:ba:
                    4c:b3:7a:db:cf:1d:1e:a8:ab:56:bb:df:f1:eb:46:
                    68:fc:a0:3a:a9:d2:d3:f9:4b:24:37:65:07:f1:a0:
                    10:91:16:63:55:1f:85:47:32:bd:4d:ea:0e:26:56:
                    fb:8e:4c:f0:3c:c0:27:68:a5:10:8e:0e:77:c9:7e:
                    c9:17:76:84:0b:e1:a0:83:35:bd:36:f4:66:b8:ee:
                    2b:34:42:79:d8:bc:88:c6:a4:5e:7e:c2:e8:36:8d:
                    8f:f6:7b:3b:4b:f1:e6:5a:50:3f:ce:ae:eb:f5:33:
                    88:7a:e6:b6:eb:10:a7:20:c2:4a:69:30:62:63:f9:
                    02:37:3d:3d:a6:56:dc:58:5c:90:9f:d2:4a:ef:69:
                    9e:56:e0:d5:e8:99:1e:2c:64:ab:85:0d:eb:8b:a2:
                    da:3a:35:54:b4:df:43:16:3a:cc:ab:95:ff:80:26:
                    70:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.116.0/22
                IPv6:
                  2804:4e08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268235

    Signature Algorithm: sha256WithRSAEncryption
         74:f8:cb:08:f1:1d:a2:62:f8:54:e3:bf:a9:34:bb:8c:aa:3b:
         dd:9b:3b:ef:09:dc:9a:35:c4:17:e8:f5:13:63:2e:75:b4:34:
         93:3c:ed:e1:6b:fc:4c:de:ce:20:d1:d8:3c:05:14:07:34:11:
         59:05:b8:ed:29:af:86:c3:9e:9e:63:f4:47:b4:02:5d:94:c2:
         df:b2:4b:2f:58:1a:82:b9:c3:3a:f0:01:60:7d:93:ad:68:41:
         be:b8:19:fa:81:77:57:a7:d7:85:3f:76:ec:91:0e:2a:08:a3:
         11:90:55:e0:d8:14:a0:7e:c8:54:14:38:ec:42:47:20:07:17:
         9a:72:d8:eb:80:0d:4b:82:9b:66:26:3a:bb:17:a6:f9:27:27:
         49:39:fe:e8:7b:84:42:bd:44:da:03:71:67:8f:be:a8:c5:4f:
         f2:e0:70:2f:cd:38:90:12:23:bb:d0:57:87:d1:cd:01:d6:02:
         3e:23:b3:fc:b7:30:13:ae:79:af:1d:52:ba:ae:65:db:16:3b:
         22:5b:ff:1c:d5:2c:37:7b:e9:f4:69:1a:3e:2b:59:d3:49:ef:
         3f:cf:fc:dd:83:3e:15:36:0d:c2:78:d5:11:e9:14:58:23:3e:
         b0:e7:f9:ad:43:94:b8:e7:e0:7e:65:2c:e1:4d:6c:06:16:7e:
         dc:36:5c:01
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUeJbJtq74TeQ6m+YDPgKdy7G8n5MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxODI2MzZaFw0yNTA0MDIxODMxMzZaMDMxMTAvBgNV
BAMTKDVBQjlDREJFMjI2Q0I2NjZEODI3MkIzQzE2NjcxM0IxRjEwQTU2QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRhwsNWB8TQ84haBvNeFWLGUh7
1P7p3QAauIA4rF/iYIZYI+HXH98M7ljDl2YtDCD2OJOsUwSFjJiRZRw5G23yMhgd
OhXamOHtUNjLa6A/lNn5wA4PyXgLukyzetvPHR6oq1a73/HrRmj8oDqp0tP5SyQ3
ZQfxoBCRFmNVH4VHMr1N6g4mVvuOTPA8wCdopRCODnfJfskXdoQL4aCDNb029Ga4
7is0QnnYvIjGpF5+wug2jY/2eztL8eZaUD/Oruv1M4h65rbrEKcgwkppMGJj+QI3
PT2mVtxYXJCf0krvaZ5W4NXomR4sZKuFDeuLoto6NVS030MWOsyrlf+AJnBRAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRauc2+Imy2Ztgn
KzwWZxOx8QpWxTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzNu
a0pMZzZzQ29rcVlxRlZLNjNhMTl4c0VpaHJHMUxNb05YOEc1S002S3IvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0cz
bmtKTGc2c0Nva3FZcUZWSzYzYTE5eHNFaWhyRzFMTW9OWDhHNUtNNktyLzEvNUFC
OUNEQkUyMjZDQjY2NkQ4MjcyQjNDMTY2NzEzQjFGMTBBNTZDNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLex0MA0EAgACMAcDBQAoBE4IMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQXyzANBgkqhkiG9w0BAQsFAAOCAQEAdPjLCPEdomL4VOO/
qTS7jKo73Zs77wncmjXEF+j1E2MudbQ0kzzt4Wv8TN7OINHYPAUUBzQRWQW47Smv
hsOenmP0R7QCXZTC37JLL1gagrnDOvABYH2TrWhBvrgZ+oF3V6fXhT927JEOKgij
EZBV4NgUoH7IVBQ47EJHIAcXmnLY64ANS4KbZiY6uxem+ScnSTn+6HuEQr1E2gNx
Z4++qMVP8uBwL804kBIju9BXh9HNAdYCPiOz/LcwE655rx1Suq5l2xY7Ilv/HNUs
N3vp9GkaPitZ00nvP8/83YM+FTYNwnjVEekUWCM+sOf5rUOUuOfgfmUs4U1sBhZ+
3DZcAQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:03 2025 by rpki-client