Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7A38E6F2469CB0B2FC49E585F855B64C41A4C6EA.cer
File:                     7A38E6F2469CB0B2FC49E585F855B64C41A4C6EA.cer (raw, json)
Hash identifier:          Jgdoyh3Mdd8/KcCrVLIFQLSzIP6HVlum4xu2sraNZWs=
Subject key identifier:   7A:38:E6:F2:46:9C:B0:B2:FC:49:E5:85:F8:55:B6:4C:41:A4:C6:EA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       51A07EC0E4402566D6257BBD63568F579D6E4FB1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/1/7A38E6F2469CB0B2FC49E585F855B64C41A4C6EA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 04:02:33 +0000
Certificate not after:    Thu 03 Apr 2025 04:07:33 +0000
Subordinate resources:    AS: 270426
                          IP: 190.111.140.0/22
                          IP: 2804:6bcc::/32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a0:7e:c0:e4:40:25:66:d6:25:7b:bd:63:56:8f:57:9d:6e:4f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 04:02:33 2024 GMT
            Not After : Apr  3 04:07:33 2025 GMT
        Subject: CN=7A38E6F2469CB0B2FC49E585F855B64C41A4C6EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6d:d4:7f:1e:6a:4c:9a:8c:9a:8a:13:fa:98:
                    3b:de:f3:c3:30:55:59:4e:c3:18:b3:dd:69:35:cd:
                    27:b4:59:fb:eb:f7:61:84:86:ea:03:6c:6e:c2:72:
                    05:6e:27:14:f7:e6:cc:d5:61:2a:50:c1:08:64:8e:
                    ba:bb:ad:05:d2:28:84:fd:62:2d:19:b8:e6:a0:b6:
                    91:d1:c0:ca:66:84:47:03:64:27:c3:27:a0:74:f4:
                    a0:4d:c5:b6:c4:26:d7:b9:45:e4:03:ee:70:60:0a:
                    7b:5b:ca:03:dd:5d:d5:b4:32:4e:75:8c:6f:a8:30:
                    23:d5:5e:fc:4d:dd:13:b4:17:82:cf:d8:6a:33:a3:
                    d5:4f:16:19:49:b1:94:55:c1:d7:48:6e:01:1e:bc:
                    3a:ad:d7:f5:c0:63:a2:48:fe:28:50:53:5b:b3:0b:
                    39:9e:98:17:52:68:d4:33:81:ea:79:ed:d7:1e:a0:
                    d9:29:c4:ce:6a:09:a5:78:8e:e8:b2:c1:83:7d:f0:
                    7d:2b:de:8a:d9:2d:d3:af:93:82:a4:8a:2b:94:b2:
                    3b:af:18:ea:d7:14:44:d7:17:73:05:56:58:8e:2e:
                    45:20:eb:b2:18:cd:aa:44:a3:63:17:61:0a:a2:19:
                    22:cd:91:e8:c9:80:33:18:f8:07:f2:4c:64:d1:62:
                    0a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:38:E6:F2:46:9C:B0:B2:FC:49:E5:85:F8:55:B6:4C:41:A4:C6:EA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/1/7A38E6F2469CB0B2FC49E585F855B64C41A4C6EA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.140.0/22
                IPv6:
                  2804:6bcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270426

    Signature Algorithm: sha256WithRSAEncryption
         33:d2:0f:34:df:da:06:04:de:ab:42:4b:b7:1c:c0:53:b3:e9:
         81:79:ba:26:1a:b0:b3:6a:54:3d:83:59:96:9d:68:40:19:00:
         b3:6b:a4:fe:05:ca:3e:3f:06:e6:76:b4:24:a2:e5:00:eb:8d:
         c8:c1:03:36:26:6b:ad:30:de:f1:dd:73:d9:44:ae:99:7f:41:
         49:b1:b6:22:ee:b6:19:a6:46:9f:8e:5d:dd:c3:8a:05:3d:30:
         72:39:a8:31:a8:6b:d5:71:20:b5:10:69:04:39:49:6c:5b:69:
         43:f0:b8:64:d2:ac:db:2a:0e:71:8f:70:ed:e1:a9:c6:15:30:
         a3:30:39:1c:95:15:1b:be:a2:5c:bb:56:79:19:4f:91:b5:60:
         49:30:b3:58:89:88:1d:25:c9:d8:13:44:24:0d:25:ab:42:52:
         64:e8:42:d5:c8:d6:1c:06:a0:88:dc:df:11:71:4c:26:8e:fa:
         0c:19:e6:93:21:71:f1:2f:51:e2:63:9d:5b:77:4a:30:04:68:
         09:15:aa:ba:c1:ee:f4:25:6b:da:da:53:22:a3:70:8a:94:59:
         64:df:d2:94:0c:2f:8d:b4:98:33:c3:5f:12:be:d5:d0:4c:7e:
         36:15:9e:10:00:19:f4:eb:4b:d6:3c:42:26:80:09:16:90:7e:
         a8:6f:6e:a4
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUUaB+wORAJWbWJXu9Y1aPV51uT7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwNDAyMzNaFw0yNTA0MDMwNDA3MzNaMDMxMTAvBgNV
BAMTKDdBMzhFNkYyNDY5Q0IwQjJGQzQ5RTU4NUY4NTVCNjRDNDFBNEM2RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcbdR/HmpMmoyaihP6mDve88Mw
VVlOwxiz3Wk1zSe0Wfvr92GEhuoDbG7CcgVuJxT35szVYSpQwQhkjrq7rQXSKIT9
Yi0ZuOagtpHRwMpmhEcDZCfDJ6B09KBNxbbEJte5ReQD7nBgCntbygPdXdW0Mk51
jG+oMCPVXvxN3RO0F4LP2Gozo9VPFhlJsZRVwddIbgEevDqt1/XAY6JI/ihQU1uz
CzmemBdSaNQzgep57dceoNkpxM5qCaV4juiywYN98H0r3orZLdOvk4KkiiuUsjuv
GOrXFETXF3MFVliOLkUg67IYzapEo2MXYQqiGSLNkejJgDMY+AfyTGTRYgodAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR6OObyRpywsvxJ
5YX4VbZMQaTG6jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN01L
WVJ3ZmdnUFNNNnhMN1VHVHl2VnJmVzdjR0MzVDdtN0E1R0drSlR3aUMvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdN
S1lSd2ZnZ1BTTTZ4TDdVR1R5dlZyZlc3Y0dDM1Q3bTdBNUdHa0pUd2lDLzEvN0Ez
OEU2RjI0NjlDQjBCMkZDNDlFNTg1Rjg1NUI2NEM0MUE0QzZFQS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCvm+MMA0EAgACMAcDBQAoBGvMMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQgWjANBgkqhkiG9w0BAQsFAAOCAQEAM9IPNN/aBgTeq0JL
txzAU7PpgXm6Jhqws2pUPYNZlp1oQBkAs2uk/gXKPj8G5na0JKLlAOuNyMEDNiZr
rTDe8d1z2USumX9BSbG2Iu62GaZGn45d3cOKBT0wcjmoMahr1XEgtRBpBDlJbFtp
Q/C4ZNKs2yoOcY9w7eGpxhUwozA5HJUVG76iXLtWeRlPkbVgSTCzWImIHSXJ2BNE
JA0lq0JSZOhC1cjWHAagiNzfEXFMJo76DBnmkyFx8S9R4mOdW3dKMARoCRWqusHu
9CVr2tpTIqNwipRZZN/SlAwvjbSYM8NfEr7V0Ex+NhWeEAAZ9OtL1jxCJoAJFpB+
qG9upA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:26 2025 by rpki-client