Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7D387AC57CAC3C5F07D3053B964DFBBBAD73BF1B.cer
File:                     7D387AC57CAC3C5F07D3053B964DFBBBAD73BF1B.cer (raw, json)
Hash identifier:          zGZ4Zmhhyopb7JkBiGB6lNepBIOmlC9MjOeepRd1cWM=
Subject key identifier:   7D:38:7A:C5:7C:AC:3C:5F:07:D3:05:3B:96:4D:FB:BB:AD:73:BF:1B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       526C798E6263D291F07A4D05B784BF70BF6EB5C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/1/7D387AC57CAC3C5F07D3053B964DFBBBAD73BF1B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 04:07:20 +0000
Certificate not after:    Thu 03 Apr 2025 04:12:20 +0000
Subordinate resources:    AS: 270247
                          IP: 177.53.160.0/22
                          IP: 2804:6914::/32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:6c:79:8e:62:63:d2:91:f0:7a:4d:05:b7:84:bf:70:bf:6e:b5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 04:07:20 2024 GMT
            Not After : Apr  3 04:12:20 2025 GMT
        Subject: CN=7D387AC57CAC3C5F07D3053B964DFBBBAD73BF1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:20:33:40:7e:67:3a:c8:b5:43:3e:ca:41:42:
                    f6:12:d9:a0:74:ec:b3:51:0c:00:ba:f4:f3:c4:dc:
                    3e:53:9f:cc:48:6b:5a:35:bd:1c:c2:f9:56:ef:29:
                    d2:5e:7a:19:5a:df:55:0d:5c:54:07:71:55:ac:61:
                    d1:3d:e3:05:58:bf:79:15:f5:3f:49:65:db:02:cd:
                    47:03:20:83:19:b1:c7:cb:8f:1f:3e:3f:9e:89:33:
                    dc:3d:48:8d:69:41:b9:de:64:16:30:fd:58:dd:96:
                    60:36:8c:b0:ff:0f:77:f3:bd:07:62:92:e5:9f:d0:
                    3c:75:99:55:ae:7d:0f:39:a5:11:29:23:3c:4f:d8:
                    64:97:a9:10:23:b9:8c:72:40:ac:95:9f:cd:7f:41:
                    ce:53:47:fc:1b:ae:b7:16:f5:62:32:09:46:b7:c1:
                    f8:1b:a7:71:0a:be:60:c3:7e:aa:32:96:b5:6e:eb:
                    01:0e:55:91:72:26:20:61:0b:19:1e:14:d0:75:9b:
                    13:ae:29:9c:06:e4:b4:9a:67:8f:7e:93:d4:25:c1:
                    05:c7:07:f3:02:c9:f7:21:44:d4:63:52:84:bd:56:
                    ab:d9:b2:c3:c7:2e:50:ef:b6:77:09:17:ed:8b:ef:
                    9f:f7:7f:1f:db:1a:c1:d1:6e:57:30:00:c4:00:bc:
                    21:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:38:7A:C5:7C:AC:3C:5F:07:D3:05:3B:96:4D:FB:BB:AD:73:BF:1B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/1/7D387AC57CAC3C5F07D3053B964DFBBBAD73BF1B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.160.0/22
                IPv6:
                  2804:6914::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270247

    Signature Algorithm: sha256WithRSAEncryption
         93:e0:ad:63:f3:9d:5b:54:ab:4a:70:5c:76:5d:b8:71:e5:3d:
         b4:62:e1:72:b8:5a:b4:d1:7f:34:e2:f1:2c:39:17:dc:9f:0c:
         05:ee:c7:7a:d1:61:49:eb:cb:c4:a5:66:49:8e:34:57:6f:df:
         2f:48:7a:44:92:75:20:d4:49:1a:01:9a:0a:ce:2e:11:9c:19:
         5a:6c:55:fb:a7:71:c4:8a:ef:af:9b:48:1b:8b:d9:e5:2a:72:
         3e:85:ae:0d:45:4f:9d:d6:5b:d7:24:d4:fc:11:df:09:0b:3a:
         76:02:19:6b:dd:69:b4:c2:6f:02:80:0e:13:3a:b5:d8:6a:ff:
         27:49:9b:22:4c:ae:b2:1d:9c:c6:68:6c:f0:c3:96:1b:6a:1a:
         72:f4:77:b2:19:ea:a3:0f:ce:b2:5f:2e:22:b4:da:b2:0d:84:
         d9:26:c5:b6:9e:4a:3d:4a:1e:fa:cb:47:b7:ec:23:ef:8d:ad:
         14:bc:f9:15:4c:c3:07:53:36:c5:0f:90:d3:0e:8e:a0:97:da:
         6f:42:56:e8:b5:f1:90:c8:60:71:a5:57:1b:72:9c:91:6d:86:
         51:52:27:2e:b4:d0:0f:cb:47:e6:b8:cb:ac:ea:be:bb:44:db:
         b7:07:56:47:7d:2e:6c:9d:19:7e:4d:af:c3:b9:95:6a:b8:ee:
         7c:3c:81:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:29 2025 by rpki-client