Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/74B2984FDE38265B0E0869FB87A5810D0C881EB5.cer
File:                     74B2984FDE38265B0E0869FB87A5810D0C881EB5.cer (raw, json)
Hash identifier:          qrM4oEeFPJb8WK/iFxNPVmfRiwoKlk4J+W94dbGKnsc=
Subject key identifier:   74:B2:98:4F:DE:38:26:5B:0E:08:69:FB:87:A5:81:0D:0C:88:1E:B5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2DE7162E93E05817A02DCC2C087C30B801DBD232
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/74B2984FDE38265B0E0869FB87A5810D0C881EB5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 29 Nov 2024 12:29:59 +0000
Certificate not after:    Fri 28 Nov 2025 12:34:59 +0000
Subordinate resources:    AS: 272753
                          IP: 187.109.112.0/22
                          IP: 2804:8824::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e7:16:2e:93:e0:58:17:a0:2d:cc:2c:08:7c:30:b8:01:db:d2:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 29 12:29:59 2024 GMT
            Not After : Nov 28 12:34:59 2025 GMT
        Subject: CN=74B2984FDE38265B0E0869FB87A5810D0C881EB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:4a:68:bf:dd:68:4c:a0:2c:45:01:39:c0:
                    dc:34:f6:cf:21:cf:1b:bc:e2:0b:86:49:97:56:72:
                    22:95:cf:8d:ab:23:19:f7:e4:10:22:d1:8b:6b:fb:
                    aa:46:fc:97:f0:4f:41:a9:26:bb:d0:61:81:0b:42:
                    b4:f4:4c:72:f7:ec:30:8d:20:96:f2:5e:20:36:5f:
                    e0:fa:4d:27:12:df:cb:54:d7:b8:22:75:31:3f:c3:
                    93:ca:3b:93:50:0a:02:5f:cb:30:8b:29:08:79:65:
                    ec:23:4b:28:2b:09:6c:ef:ac:94:3d:5d:d4:0c:0c:
                    f1:0f:98:21:65:90:17:7f:d7:bb:99:98:64:31:f9:
                    40:a1:ac:b8:e9:d0:8a:25:0c:8f:f9:fc:ef:f5:73:
                    75:5a:d8:35:e0:af:96:49:10:09:99:e0:6f:27:98:
                    73:8b:8a:e5:2a:9c:bc:5e:95:44:0d:d6:d9:38:c9:
                    04:55:b6:29:7e:43:f3:f0:a2:8b:b1:94:20:b7:4d:
                    c2:19:26:50:48:fd:40:7b:a7:5a:36:aa:5b:09:ac:
                    25:81:81:c2:65:82:27:d9:2a:a3:f3:68:1f:fd:17:
                    c3:50:e4:8a:ef:c9:63:96:81:23:e9:10:fe:50:0a:
                    5e:75:f7:92:67:e2:99:0a:55:f7:15:97:7b:15:8a:
                    e3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                74:B2:98:4F:DE:38:26:5B:0E:08:69:FB:87:A5:81:0D:0C:88:1E:B5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/74B2984FDE38265B0E0869FB87A5810D0C881EB5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.112.0/22
                IPv6:
                  2804:8824::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272753

    Signature Algorithm: sha256WithRSAEncryption
         8c:21:57:95:11:41:4c:1c:7d:a7:4a:64:1c:47:3c:4c:b7:16:
         2b:6e:5e:0a:ce:7f:b6:22:61:6f:4b:3f:69:62:f6:be:fb:10:
         21:1a:f5:83:16:7f:c5:67:2a:38:db:f0:29:75:f9:b1:57:9e:
         92:a0:8c:6a:fe:65:00:27:0b:41:f9:19:68:20:13:cd:b9:8d:
         79:ad:9f:ad:b5:ea:8c:d4:a4:90:b9:81:52:ba:47:e0:74:6b:
         3c:aa:20:bc:d7:60:e1:14:c6:f5:a4:68:a1:ea:f1:7a:b3:e1:
         a9:75:83:a8:6e:45:72:34:2f:66:54:1a:48:05:b4:94:4e:86:
         07:b3:10:85:3a:c4:56:cf:30:49:21:f6:ea:24:9e:01:0e:10:
         ed:23:f7:68:d2:4b:7b:c9:ec:23:93:50:0c:13:38:0a:e0:a2:
         98:32:01:fc:d0:b5:2d:78:09:79:0d:e2:2e:cc:e9:59:36:8a:
         c3:fc:a2:26:2d:34:2c:e5:f0:d9:e3:df:8f:59:8a:c4:42:c6:
         40:3b:a6:12:75:a9:c3:ef:f5:35:5b:2e:a6:f4:29:19:e3:b7:
         35:6b:46:c8:9e:bd:6c:8e:37:e3:59:e9:48:31:cd:dc:69:55:
         d0:eb:96:c2:ca:09:e6:c8:92:c0:1d:f1:13:1d:05:70:83:68:
         90:10:e8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:35 2025 by rpki-client