Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7948260E0BEAA7417DD376357ACF0E40F6931454.cer
File:                     7948260E0BEAA7417DD376357ACF0E40F6931454.cer (raw, json)
Hash identifier:          qsPDP3vPf0gQUbyUlW84FFytUH5xPrUcdtBM44pthlc=
Subject key identifier:   79:48:26:0E:0B:EA:A7:41:7D:D3:76:35:7A:CF:0E:40:F6:93:14:54
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       402D077ABD82B4703DB69D0417E8F371206DF0CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/1/7948260E0BEAA7417DD376357ACF0E40F6931454.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 19:30:51 +0000
Certificate not after:    Wed 02 Apr 2025 19:35:51 +0000
Subordinate resources:    AS: 270664
                          IP: 186.65.92.0/22
                          IP: 2804:6f80::/32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:2d:07:7a:bd:82:b4:70:3d:b6:9d:04:17:e8:f3:71:20:6d:f0:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 19:30:51 2024 GMT
            Not After : Apr  2 19:35:51 2025 GMT
        Subject: CN=7948260E0BEAA7417DD376357ACF0E40F6931454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:00:93:04:74:f8:a8:41:fc:de:99:b7:7d:fc:
                    2c:ae:da:33:d7:89:1a:b8:9b:3e:e8:08:43:5d:94:
                    90:02:43:35:71:fc:13:20:59:6d:d5:50:17:b2:7f:
                    fd:ad:29:6f:24:98:fb:f7:8c:2f:58:14:59:23:b2:
                    7f:13:2c:12:60:5c:48:5a:99:8f:44:08:b5:c1:73:
                    77:42:f3:e6:a7:d6:c0:5c:ad:3b:07:f5:ee:db:8f:
                    31:0d:7b:6e:72:57:de:fa:7b:08:76:03:65:55:94:
                    b0:34:e8:0b:37:54:50:ae:6d:94:d8:ad:84:59:2c:
                    b1:11:41:7e:4d:14:cd:02:f0:65:1b:18:b7:1c:24:
                    6a:9b:4a:ba:0a:91:20:13:bd:5c:55:6b:0f:86:4b:
                    2a:60:4c:4e:86:ef:8c:a3:a9:58:17:03:d6:74:6b:
                    25:49:17:d0:76:8d:c3:6c:14:56:86:88:7f:51:ae:
                    68:18:5d:3c:e3:ff:96:dc:dd:da:0b:d5:1d:14:1f:
                    22:eb:41:c4:18:e1:73:89:a8:5f:0c:25:0f:68:88:
                    ad:82:39:90:13:6a:37:49:eb:b3:56:5c:a2:12:ed:
                    3a:28:05:b5:1b:01:4a:b5:8a:42:2a:7c:64:d2:13:
                    b0:fc:76:cc:36:97:48:6c:d5:62:74:c9:90:ee:e8:
                    54:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                79:48:26:0E:0B:EA:A7:41:7D:D3:76:35:7A:CF:0E:40:F6:93:14:54
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/1/7948260E0BEAA7417DD376357ACF0E40F6931454.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.92.0/22
                IPv6:
                  2804:6f80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270664

    Signature Algorithm: sha256WithRSAEncryption
         45:3a:ba:02:89:c2:bf:c8:63:0f:dc:ee:2c:67:0c:ba:42:3e:
         2a:f2:0f:b4:3d:83:c8:45:a5:75:fc:0f:dc:ef:2f:9b:a9:a7:
         2b:15:9b:d6:8f:d2:f5:51:ef:28:1a:08:4a:d6:4b:1f:76:95:
         8c:d6:75:f6:b0:fe:27:fd:5c:df:d2:db:6f:82:38:ea:48:7d:
         60:47:02:28:4b:9b:a8:12:de:2c:25:f4:5e:53:80:78:71:72:
         f4:5a:08:0b:2d:f1:35:14:d3:ab:22:d1:8d:53:99:88:02:82:
         14:76:b6:45:94:65:f0:7e:e7:5b:6c:e3:42:72:f0:fd:60:a7:
         1c:5c:69:66:ed:0e:59:d9:ec:b1:c5:d1:21:0a:6b:5e:eb:21:
         ab:36:3c:91:b3:67:37:fe:60:32:ae:7c:f3:32:a9:18:ea:92:
         2a:07:f2:b8:57:3a:ef:da:43:b4:eb:82:80:4c:a7:76:f7:20:
         1a:d6:e0:30:6c:ef:cf:e5:24:e0:57:ef:2b:c3:04:88:87:18:
         fe:cf:83:92:f6:85:00:24:c1:99:66:cf:42:53:e3:0f:98:04:
         1a:65:e0:12:bf:00:b8:4a:9d:a7:3d:d4:d0:a9:75:fa:d8:7f:
         46:27:f9:f5:79:37:10:dd:e8:f6:8d:9f:0f:2b:6a:b8:9a:24:
         13:ad:81:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:51:04 2025 by rpki-client