Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5D02A9D5EA4562DFA1998A8F4C882ACD6908671E.cer
File:                     5D02A9D5EA4562DFA1998A8F4C882ACD6908671E.cer (raw, json)
Hash identifier:          TfddLMJyjdpsVUWbyvvKY1/jRbwPJbivN62/bFTB1qI=
Subject key identifier:   5D:02:A9:D5:EA:45:62:DF:A1:99:8A:8F:4C:88:2A:CD:69:08:67:1E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       477EA00003D40B2CBFAC2708A28AA096C4511FE5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/5D02A9D5EA4562DFA1998A8F4C882ACD6908671E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Jan 2025 13:49:36 +0000
Certificate not after:    Tue 20 Jan 2026 13:54:36 +0000
Subordinate resources:    AS: 61785
                          IP: 201.131.152.0/22
                          IP: 2804:194c::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:7e:a0:00:03:d4:0b:2c:bf:ac:27:08:a2:8a:a0:96:c4:51:1f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 21 13:49:36 2025 GMT
            Not After : Jan 20 13:54:36 2026 GMT
        Subject: CN=5D02A9D5EA4562DFA1998A8F4C882ACD6908671E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:10:39:6b:cd:40:45:61:3f:cd:ab:cb:cf:d0:
                    20:a1:db:59:83:8a:49:6d:1e:f7:0f:fc:54:ed:10:
                    51:a9:cc:a7:e4:d7:70:74:2a:8c:2b:56:a0:9e:c8:
                    d0:bc:14:45:43:32:a8:9b:3e:7c:6e:18:9d:14:b9:
                    e1:ca:82:e6:77:b1:a0:54:2a:07:ec:32:cc:77:9d:
                    c9:db:ff:cb:6e:19:af:df:b8:eb:89:59:b4:80:66:
                    6b:cd:7a:77:da:2f:de:ab:5b:d3:43:81:00:69:9b:
                    83:a6:df:32:d6:71:35:a0:f9:a5:04:17:f9:bc:0d:
                    23:05:91:53:20:86:42:1c:b7:3d:8b:73:8d:9c:48:
                    6e:5d:64:cf:e4:db:21:72:13:78:41:97:fb:42:94:
                    12:ee:ed:e2:1b:d1:a1:08:9d:6a:b2:37:5c:13:e8:
                    b6:2b:b8:89:32:1d:56:ca:1a:1a:a0:ba:be:3b:53:
                    5b:a8:b2:fd:33:45:b0:7a:9c:91:d4:7e:1b:0a:26:
                    1a:eb:b6:7e:e7:a5:12:69:80:fa:35:4d:07:a2:6d:
                    ea:c9:64:62:26:c8:08:b6:b8:8f:4d:1c:bd:38:67:
                    c1:8b:8b:8a:84:50:c9:42:a5:da:b6:d1:82:9d:15:
                    ad:ac:03:6a:21:36:90:9e:27:5a:b9:d3:20:5d:d9:
                    fd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:02:A9:D5:EA:45:62:DF:A1:99:8A:8F:4C:88:2A:CD:69:08:67:1E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/5D02A9D5EA4562DFA1998A8F4C882ACD6908671E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.152.0/22
                IPv6:
                  2804:194c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61785

    Signature Algorithm: sha256WithRSAEncryption
         ca:12:c6:db:e2:98:31:08:97:82:ff:9d:50:d9:3f:2b:bd:e2:
         4e:38:ee:2d:f9:88:ca:14:da:af:a7:56:b9:eb:28:33:ca:87:
         69:86:2d:0a:b9:a6:1c:7b:55:60:51:d9:d4:55:8f:27:32:a8:
         bd:fa:0b:e7:63:da:ed:76:59:b4:dc:a1:6a:c7:e6:21:e8:f8:
         fb:07:3e:2c:34:42:61:d4:41:7b:15:3c:70:9a:b8:df:df:11:
         53:14:0c:ce:4c:33:d1:68:24:95:5d:fe:7b:32:7d:2d:cb:87:
         27:08:c1:e2:48:ed:3f:1c:ba:20:ab:9a:73:b6:3a:a4:f3:23:
         14:41:ed:99:53:c9:69:ec:7a:a5:57:99:b4:1c:40:ba:71:e6:
         3e:ff:2c:a3:98:38:06:a1:c8:94:ac:fb:fa:57:02:c4:92:18:
         58:16:a6:d9:13:1b:aa:a8:a7:6e:59:db:12:49:e4:22:57:6b:
         3c:5e:48:b1:20:78:27:ff:ca:31:be:01:43:09:63:e7:bf:21:
         b2:11:d7:68:d7:70:c4:7e:3f:d8:4b:48:0c:99:83:09:1d:95:
         b8:de:f7:6d:e4:83:de:49:ec:a4:89:33:a8:33:07:59:0a:21:
         45:09:e9:01:62:f8:3c:40:fb:14:eb:1a:3e:c2:da:38:9e:66:
         a2:18:33:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:33 2025 by rpki-client