Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/658D206948C4D2E8D5E6077E923EB5A551F916BE.cer
File:                     658D206948C4D2E8D5E6077E923EB5A551F916BE.cer (raw, json)
Hash identifier:          TEUBc1YRwrc4S1/DOo7/EXEOdljIGkTDt8q0hQWy/+k=
Subject key identifier:   65:8D:20:69:48:C4:D2:E8:D5:E6:07:7E:92:3E:B5:A5:51:F9:16:BE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5FC474DEE50BF5A4BF29F306DC299FF68FEF5900
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/658D206948C4D2E8D5E6077E923EB5A551F916BE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Dec 2024 15:51:13 +0000
Certificate not after:    Thu 18 Dec 2025 15:56:13 +0000
Subordinate resources:    AS: 266002
                          IP: 181.191.92.0/22
                          IP: 2804:4114::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c4:74:de:e5:0b:f5:a4:bf:29:f3:06:dc:29:9f:f6:8f:ef:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 19 15:51:13 2024 GMT
            Not After : Dec 18 15:56:13 2025 GMT
        Subject: CN=658D206948C4D2E8D5E6077E923EB5A551F916BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:02:be:18:f0:3e:1a:2c:7f:82:19:f3:f0:1c:
                    81:3a:64:44:ce:41:f1:54:21:fa:c7:f3:94:60:39:
                    96:65:c4:7d:43:2e:51:97:01:02:85:22:22:f0:b3:
                    c1:e2:e7:af:df:83:39:2e:60:e7:13:30:16:2e:b3:
                    58:6d:4b:e9:a7:e8:0a:93:8b:01:8d:da:b4:9f:c2:
                    cb:21:85:30:3b:b5:d8:19:9d:13:c9:a8:d1:6d:bb:
                    fb:78:c3:91:b7:21:53:cb:d2:10:33:8e:2a:51:3b:
                    04:a3:e0:d4:76:d0:e0:43:f9:10:44:69:fd:57:23:
                    02:34:32:58:cf:fb:2d:65:20:b9:87:3a:fa:6c:e7:
                    13:7d:32:ed:14:79:c3:16:1c:11:13:04:e7:cb:73:
                    16:41:91:4b:a8:d0:8c:c6:df:bd:9f:b9:f4:02:e7:
                    4d:dd:05:ee:35:02:27:a6:e0:f2:5f:f1:30:64:82:
                    31:e3:4f:41:90:6c:cc:ca:8a:10:4d:24:3e:1a:44:
                    24:e1:6e:b6:92:f1:9d:dc:83:2f:84:c1:8f:c5:d4:
                    78:87:51:d4:47:0b:30:75:02:9d:1e:f7:1d:17:8a:
                    7d:3b:f3:e3:3a:61:b0:c8:c8:5b:23:60:01:f2:7b:
                    48:4f:2a:78:d2:d7:88:54:cc:32:e7:fb:14:c5:94:
                    ca:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:8D:20:69:48:C4:D2:E8:D5:E6:07:7E:92:3E:B5:A5:51:F9:16:BE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/658D206948C4D2E8D5E6077E923EB5A551F916BE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.92.0/22
                IPv6:
                  2804:4114::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266002

    Signature Algorithm: sha256WithRSAEncryption
         b2:3d:35:df:86:97:a1:29:37:33:ff:f1:8d:76:13:45:fa:0d:
         2d:40:7a:2f:73:21:5c:c6:7c:92:a4:e3:7c:89:89:d1:7e:3c:
         9e:ff:6c:34:48:a2:70:57:06:ac:c9:19:1a:c0:0f:4f:38:e4:
         04:29:32:75:b4:29:af:4f:da:4a:31:e2:5d:76:f1:e2:61:8a:
         af:cb:32:a9:d8:da:45:f1:5c:8c:12:f3:91:3b:87:ef:32:58:
         9c:4b:fe:87:6a:4c:ae:0a:bc:79:5a:e7:c4:2a:5a:bf:c9:b6:
         0f:00:8b:64:34:8b:13:6e:4e:ac:08:c7:5f:a0:4d:46:ff:2a:
         66:25:43:15:b3:b3:e8:59:2a:0f:66:6b:63:ab:f1:e8:b8:14:
         5f:a4:eb:87:c9:f7:d2:55:13:a7:df:99:cb:df:70:37:4e:5b:
         99:be:c3:32:74:ab:5f:f5:6c:96:85:c4:19:e6:6c:c9:b8:32:
         a2:dd:c9:2b:1f:79:e4:c6:f5:d8:e6:75:8a:36:d1:3a:5b:a7:
         57:e3:99:e2:92:6f:5a:4f:30:0d:2e:4d:41:d8:76:30:f2:2f:
         43:90:a9:fc:be:7c:55:ff:6e:e8:02:47:c4:38:89:1b:67:29:
         ee:63:14:2a:18:ec:93:98:92:e6:6b:7d:ff:43:c9:c6:6e:2b:
         2f:2a:1f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:36:35 2025 by rpki-client