Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/72FB9C73B2E91C6D4BDADFB7388117163E95988F.cer
File:                     72FB9C73B2E91C6D4BDADFB7388117163E95988F.cer (raw, json)
Hash identifier:          Ibl1+TSRcUuLRlk9vzKZUog2FIJluBsKEq9QNzH3fm4=
Subject key identifier:   72:FB:9C:73:B2:E9:1C:6D:4B:DA:DF:B7:38:81:17:16:3E:95:98:8F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       66951FA4771808D0F22C251DB12CAF34DBF4860F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/36rK8tgWRDyBBnZSPvgp7NVyCkuvLPEXu15yKNgzrvzY/1/72FB9C73B2E91C6D4BDADFB7388117163E95988F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/36rK8tgWRDyBBnZSPvgp7NVyCkuvLPEXu15yKNgzrvzY/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:58:55 +0000
Certificate not after:    Wed 02 Apr 2025 19:03:55 +0000
Subordinate resources:    AS: 272738
                          IP: 2804:87e4::/32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:95:1f:a4:77:18:08:d0:f2:2c:25:1d:b1:2c:af:34:db:f4:86:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:58:55 2024 GMT
            Not After : Apr  2 19:03:55 2025 GMT
        Subject: CN=72FB9C73B2E91C6D4BDADFB7388117163E95988F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b1:4f:4e:1f:89:de:cf:66:ed:66:28:14:55:
                    fe:c5:01:7c:21:45:f0:36:07:0f:8f:aa:da:10:9e:
                    93:e4:bc:ac:29:a8:ea:27:01:62:ee:93:f5:51:13:
                    cb:84:0c:bf:21:4f:be:69:0d:e8:ae:ac:6c:61:d6:
                    31:53:b5:63:d1:42:d9:9c:db:ee:b5:29:f6:ae:f4:
                    73:82:5a:76:1a:24:07:38:40:46:0e:49:6a:cd:52:
                    18:5a:18:94:d9:00:c7:a6:f0:22:30:71:59:c9:1f:
                    66:df:6d:97:c7:e1:01:74:cf:da:31:81:fc:84:f1:
                    fc:18:ca:9d:e7:4d:11:31:1c:79:a0:31:0b:73:74:
                    ee:ae:68:7b:08:0d:b2:a7:27:eb:6c:25:23:66:50:
                    33:47:a8:ea:21:a0:dd:30:48:19:e6:92:bf:71:c6:
                    aa:1a:16:7b:48:54:45:5b:4f:d1:c5:23:cf:56:de:
                    b0:b3:04:ce:b0:0b:28:e8:15:5b:a1:d7:32:40:cc:
                    f8:81:88:3e:d6:61:55:ef:ff:e5:fa:1b:78:29:b2:
                    1c:32:8c:b3:bf:38:de:55:51:9d:c4:b2:02:37:6d:
                    fc:5c:0e:89:60:ba:09:2a:f9:01:a6:6d:15:e5:af:
                    c4:9e:16:13:6b:0e:12:a7:7f:a9:0a:52:d3:6f:51:
                    60:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:FB:9C:73:B2:E9:1C:6D:4B:DA:DF:B7:38:81:17:16:3E:95:98:8F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/36rK8tgWRDyBBnZSPvgp7NVyCkuvLPEXu15yKNgzrvzY/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/36rK8tgWRDyBBnZSPvgp7NVyCkuvLPEXu15yKNgzrvzY/1/72FB9C73B2E91C6D4BDADFB7388117163E95988F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272738

    Signature Algorithm: sha256WithRSAEncryption
         b2:4b:b7:b2:a9:c1:98:cc:6b:7c:61:cf:f1:4c:d2:35:30:28:
         e8:5c:fb:d5:27:b3:6b:59:32:5a:db:80:6c:4a:77:45:3c:43:
         e1:e9:3c:2c:4f:7b:a1:50:34:5d:eb:ed:8e:92:ce:d5:f3:f8:
         74:f1:00:95:40:bf:bf:c2:ee:71:7e:3d:2b:04:57:08:19:bd:
         e0:21:6d:da:b4:b3:52:f3:61:8a:3d:9a:21:b1:4e:46:d8:2e:
         ad:52:59:b8:17:ce:83:7d:66:44:6b:3c:32:d0:f6:46:22:94:
         86:c0:d3:65:13:c3:6e:ac:dd:ec:17:cf:e8:5e:05:45:5a:38:
         ee:ff:01:fe:b1:c0:93:75:71:eb:0b:e7:85:76:bc:f8:35:66:
         2e:6c:3c:67:a5:e4:6f:f6:2c:67:12:49:1e:c9:20:e4:d6:80:
         6c:83:b4:2d:6f:71:25:d2:dd:28:aa:ce:47:c9:8a:5a:2b:47:
         04:79:e5:d1:fd:be:cd:62:d6:86:32:49:3a:82:ce:f0:28:2c:
         8d:f1:01:2f:06:2f:8d:fb:dc:4f:7a:09:55:43:73:76:90:da:
         ad:c0:40:b5:bc:00:be:26:7f:6c:8d:a4:8a:66:41:23:85:83:
         96:c7:ae:fc:05:a8:4f:9a:10:ed:39:cc:c5:e8:1b:8a:14:52:
         66:74:14:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:38 2025 by rpki-client