Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5E0D27E75714B4B3A75F41D13C9D2D95E1284413.cer
File:                     5E0D27E75714B4B3A75F41D13C9D2D95E1284413.cer (raw, json)
Hash identifier:          Y7L7qLkcBtm+H6+H7caG1h/7r4HMzJK+DWNCz7EzP1k=
Subject key identifier:   5E:0D:27:E7:57:14:B4:B3:A7:5F:41:D1:3C:9D:2D:95:E1:28:44:13
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4B8ABC75A214E32F6C05CC26F5D949BAB38F130D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/1/5E0D27E75714B4B3A75F41D13C9D2D95E1284413.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 03:29:16 +0000
Certificate not after:    Thu 03 Apr 2025 03:34:16 +0000
Subordinate resources:    AS: 268876
                          IP: 45.171.122.0/23
                          IP: 2804:5be8::/32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:8a:bc:75:a2:14:e3:2f:6c:05:cc:26:f5:d9:49:ba:b3:8f:13:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 03:29:16 2024 GMT
            Not After : Apr  3 03:34:16 2025 GMT
        Subject: CN=5E0D27E75714B4B3A75F41D13C9D2D95E1284413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d7:0f:09:96:26:25:ce:23:9b:d9:2d:0b:40:
                    0e:f3:89:22:48:4a:df:15:2f:d5:89:f1:52:1f:01:
                    b1:05:6c:06:99:8a:25:33:ec:1b:46:02:e8:db:b1:
                    51:12:43:31:2f:0f:b1:fc:d0:fc:10:32:76:e6:31:
                    00:9d:33:96:51:e8:8e:f5:20:18:d7:a4:b7:7d:b3:
                    a9:03:ca:a5:89:9b:c3:56:66:d3:34:ee:23:90:69:
                    e9:c5:63:f7:8d:47:b4:23:31:a1:7b:5c:de:98:41:
                    f7:e1:d6:3e:3a:ad:05:94:84:1e:83:56:2a:1e:fe:
                    ef:6a:5c:aa:3f:b1:d0:b3:83:4b:d4:64:6b:1b:0e:
                    66:b2:e0:9b:82:49:0f:cb:2c:ea:ab:5b:e5:50:fa:
                    e0:3d:e6:ae:38:53:c5:d6:c3:f6:64:c9:d4:9c:b5:
                    40:a6:ae:2b:d1:4d:b8:69:62:48:2d:c9:45:8f:34:
                    0f:09:75:3b:15:ec:a6:20:29:79:d5:aa:fc:d9:3d:
                    06:68:7e:3d:3f:9d:29:0e:9b:4f:f3:5b:0e:b2:87:
                    5a:03:0b:24:81:e6:7e:d2:cf:35:d9:14:20:19:c6:
                    13:57:e0:f0:c7:49:c6:39:1d:c2:17:c7:04:a8:86:
                    e8:c1:6c:69:46:4e:84:ef:7d:3b:27:0c:04:c1:c5:
                    43:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:0D:27:E7:57:14:B4:B3:A7:5F:41:D1:3C:9D:2D:95:E1:28:44:13
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/1/5E0D27E75714B4B3A75F41D13C9D2D95E1284413.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.122.0/23
                IPv6:
                  2804:5be8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268876

    Signature Algorithm: sha256WithRSAEncryption
         dc:9c:bc:ac:24:12:5c:8d:1a:66:91:ea:dc:50:76:32:ae:5d:
         27:d5:f1:7a:cc:a8:86:84:bd:11:59:7a:3a:c1:cd:9c:9e:cc:
         77:15:f8:1f:05:aa:bf:a0:e7:f5:09:92:62:38:4b:64:89:56:
         9d:bd:c4:fb:0c:ac:50:d7:0f:45:f8:40:a5:48:89:5f:9a:6d:
         c3:6b:94:61:20:e3:b1:44:6c:33:bf:b4:b5:c4:5c:8c:28:aa:
         40:a0:3b:eb:e5:fb:32:0e:48:df:b0:56:99:bd:52:48:c7:e4:
         b2:88:89:3a:39:cb:c4:d8:88:e1:fb:1c:6c:7c:37:85:95:d1:
         bb:7d:9f:3c:04:10:b6:72:bc:66:3a:4a:2b:8b:0e:bd:d3:c2:
         91:11:ad:92:f3:cb:aa:35:fa:13:68:34:1e:10:7f:6c:e6:98:
         37:9d:31:96:d3:aa:44:f4:1a:c9:ed:93:1f:8e:bd:09:90:6b:
         5b:5a:7b:c9:99:15:a9:dd:a6:3e:08:97:69:f0:32:79:82:49:
         4c:fc:ca:21:05:31:01:22:6e:91:b1:27:b7:6c:05:56:5c:dc:
         98:5b:31:c6:18:e0:f9:cd:c6:8c:1e:f7:d4:f1:22:04:50:e0:
         ff:71:39:5d:c4:d2:e6:be:ee:10:95:40:fd:c3:14:fe:d8:32:
         44:eb:a5:7c
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUS4q8daIU4y9sBcwm9dlJurOPEw0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwMzI5MTZaFw0yNTA0MDMwMzM0MTZaMDMxMTAvBgNV
BAMTKDVFMEQyN0U3NTcxNEI0QjNBNzVGNDFEMTNDOUQyRDk1RTEyODQ0MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX1w8JliYlziOb2S0LQA7ziSJI
St8VL9WJ8VIfAbEFbAaZiiUz7BtGAujbsVESQzEvD7H80PwQMnbmMQCdM5ZR6I71
IBjXpLd9s6kDyqWJm8NWZtM07iOQaenFY/eNR7QjMaF7XN6YQffh1j46rQWUhB6D
Vioe/u9qXKo/sdCzg0vUZGsbDmay4JuCSQ/LLOqrW+VQ+uA95q44U8XWw/ZkydSc
tUCmrivRTbhpYkgtyUWPNA8JdTsV7KYgKXnVqvzZPQZofj0/nSkOm0/zWw6yh1oD
CySB5n7SzzXZFCAZxhNX4PDHScY5HcIXxwSohujBbGlGToTvfTsnDATBxUOFAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBReDSfnVxS0s6df
QdE8nS2V4ShEEzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDJI
Tk5GVlNTbkNtNDZqODJ5QWFVREFkRHZpMXl5Qkw1cXJacFNHcnJuRXYvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0gy
SE5ORlZTU25DbTQ2ajgyeUFhVURBZER2aTF5eUJMNXFyWnBTR3JybkV2LzEvNUUw
RDI3RTc1NzE0QjRCM0E3NUY0MUQxM0M5RDJEOTVFMTI4NDQxMy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQBLat6MA0EAgACMAcDBQAoBFvoMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQaTDANBgkqhkiG9w0BAQsFAAOCAQEA3Jy8rCQSXI0aZpHq
3FB2Mq5dJ9XxesyohoS9EVl6OsHNnJ7MdxX4HwWqv6Dn9QmSYjhLZIlWnb3E+wys
UNcPRfhApUiJX5ptw2uUYSDjsURsM7+0tcRcjCiqQKA76+X7Mg5I37BWmb1SSMfk
soiJOjnLxNiI4fscbHw3hZXRu32fPAQQtnK8ZjpKK4sOvdPCkRGtkvPLqjX6E2g0
HhB/bOaYN50xltOqRPQaye2TH469CZBrW1p7yZkVqd2mPgiXafAyeYJJTPzKIQUx
ASJukbEnt2wFVlzcmFsxxhjg+c3GjB731PEiBFDg/3E5XcTS5r7uEJVA/cMU/tgy
ROulfA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:19:40 2025 by rpki-client