Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5BEE76C74078CE00219A97D2B3153CFD3E77D3FC.cer
File:                     5BEE76C74078CE00219A97D2B3153CFD3E77D3FC.cer (raw, json)
Hash identifier:          CQaa4WErEr62ws2ifczfTFt7ur3XdHGqcZ4qJB7GmCg=
Subject key identifier:   5B:EE:76:C7:40:78:CE:00:21:9A:97:D2:B3:15:3C:FD:3E:77:D3:FC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5A769459D1A90C1B4BBB00F4895F4C12E6917933
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/1/5BEE76C74078CE00219A97D2B3153CFD3E77D3FC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:58:59 +0000
Certificate not after:    Wed 02 Apr 2025 19:03:59 +0000
Subordinate resources:    AS: 264900
                          IP: 168.228.8.0/22
                          IP: 170.80.236.0/22
                          IP: 2804:2f94::/32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:76:94:59:d1:a9:0c:1b:4b:bb:00:f4:89:5f:4c:12:e6:91:79:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:58:59 2024 GMT
            Not After : Apr  2 19:03:59 2025 GMT
        Subject: CN=5BEE76C74078CE00219A97D2B3153CFD3E77D3FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fb:b3:05:7e:81:f0:6b:8e:22:dc:5f:62:9d:
                    21:e8:1e:d8:45:13:85:01:7b:cc:4f:22:90:1e:52:
                    e3:3c:8a:f5:09:45:90:b1:ca:da:6a:ce:66:f8:3e:
                    40:82:1e:b9:ef:28:87:42:2c:93:6f:5c:bc:f1:a7:
                    19:8e:56:82:89:d2:70:ec:f8:b2:5b:42:2b:c2:6f:
                    84:7a:f9:16:f3:28:96:4e:eb:ea:dd:0b:cf:b5:98:
                    99:32:e1:27:5f:cf:a4:de:38:bc:87:8f:e4:58:89:
                    e4:b3:64:41:c0:db:aa:c6:c2:1a:6c:65:d3:bb:a8:
                    a2:73:25:f6:a8:ca:02:4d:3f:cd:17:a2:5a:96:e0:
                    c6:3d:22:88:a8:89:ed:53:b7:9a:40:b4:fb:30:73:
                    bb:b1:79:53:6a:f0:7c:a9:3e:15:0d:4f:73:ce:ea:
                    f9:2b:53:dc:03:1e:b5:3a:bc:04:b3:f7:26:30:73:
                    0f:fd:90:59:6f:66:3e:7d:b5:66:27:f0:af:92:99:
                    da:17:f6:2b:f7:75:39:00:d9:67:fa:b6:8b:5d:b5:
                    73:c2:b7:da:1b:45:98:2f:c9:f0:b5:f9:17:3b:53:
                    b2:d2:df:da:05:d0:b9:5f:06:24:22:1e:98:be:e0:
                    a5:df:4a:17:a6:fd:09:31:f9:21:61:e1:2d:00:6a:
                    68:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5B:EE:76:C7:40:78:CE:00:21:9A:97:D2:B3:15:3C:FD:3E:77:D3:FC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/1/5BEE76C74078CE00219A97D2B3153CFD3E77D3FC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.8.0/22
                  170.80.236.0/22
                IPv6:
                  2804:2f94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264900

    Signature Algorithm: sha256WithRSAEncryption
         d7:75:89:ba:96:fa:29:b1:83:b7:67:df:f1:12:03:04:73:0f:
         1e:9a:eb:0a:88:14:00:f9:60:ef:d7:2f:74:cf:3a:d1:57:d9:
         a1:1e:27:f5:6e:30:f4:b1:ab:0c:bb:5a:7a:a7:ff:cd:2e:dd:
         3b:ae:73:53:ed:c7:f5:f3:17:bb:12:58:d8:0e:41:8a:07:8e:
         0f:11:2d:ad:2e:90:cb:b6:dd:9e:68:70:62:52:8e:2e:25:13:
         ea:17:0d:7a:95:e7:40:76:9d:7f:bc:45:bd:8c:81:51:97:ea:
         cf:d2:aa:7c:64:3f:8c:51:62:6d:aa:96:e5:b0:1b:84:43:bd:
         97:71:3b:26:6b:b4:8c:a1:2a:10:58:93:56:e1:ec:ef:b2:bf:
         12:3d:43:a0:c4:f6:af:0a:47:cb:58:71:33:fa:80:a1:8d:8d:
         a5:ab:22:5b:93:60:d4:47:a0:ac:74:c7:40:4c:fd:b4:30:83:
         10:3c:8e:58:f8:12:e1:ce:ce:6f:95:f6:f0:95:a8:b0:37:34:
         ae:5a:d6:e5:e8:a2:79:92:eb:44:12:ca:31:d6:f1:e3:5a:2d:
         81:e7:56:b3:38:25:76:85:d9:9f:8e:47:b2:25:ca:5d:f8:de:
         8a:8a:81:56:c9:af:37:79:db:21:c4:0d:35:8a:1d:a5:20:a4:
         5b:e2:52:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:12 2025 by rpki-client