Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8969EE982CBE9BCDB5B100091931153438B2D419.cer
File:                     8969EE982CBE9BCDB5B100091931153438B2D419.cer (raw, json)
Hash identifier:          pHn+466WJOgMC3ZTZHAdHrvLPeZO2JLQP9t1MAtkxBg=
Subject key identifier:   89:69:EE:98:2C:BE:9B:CD:B5:B1:00:09:19:31:15:34:38:B2:D4:19
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5A9DAE9615D0240B2A9F0C1456B5333506F47526
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 Jan 2025 13:50:47 +0000
Certificate not after:    Fri 09 Jan 2026 13:55:47 +0000
Subordinate resources:    AS: 267093
                          IP: 45.228.192.0/22
                          IP: 2804:4808::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:9d:ae:96:15:d0:24:0b:2a:9f:0c:14:56:b5:33:35:06:f4:75:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 10 13:50:47 2025 GMT
            Not After : Jan  9 13:55:47 2026 GMT
        Subject: CN=8969EE982CBE9BCDB5B100091931153438B2D419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:aa:56:1b:84:c8:8e:83:ef:bf:b0:d3:a4:22:
                    74:64:84:94:78:a0:ea:2c:9f:76:a0:60:22:b1:18:
                    c7:e4:16:3a:10:b8:eb:7c:b6:ff:e2:8f:0f:a2:19:
                    02:f4:06:d5:18:29:23:0f:4b:11:ba:a1:a1:e9:01:
                    b8:d5:66:c6:86:78:c3:6f:1f:00:c5:14:c2:46:9b:
                    52:32:ef:aa:a5:1a:ca:71:f2:7c:f3:95:bd:19:bb:
                    77:69:6b:0e:b3:d7:a4:dc:cd:bc:5a:b0:f7:90:5f:
                    84:1f:01:f3:48:63:48:d4:d5:76:21:c2:f5:09:56:
                    69:c8:dc:ce:f8:70:1b:b5:8c:b2:c2:34:69:e1:9f:
                    4f:7d:fe:63:22:4d:b5:fa:a2:81:19:4a:75:68:21:
                    bd:2a:00:b7:0f:34:34:ea:9f:48:a7:e3:b3:bd:af:
                    03:77:7e:94:68:fa:70:f9:c9:23:60:42:8d:de:3c:
                    9f:4f:3d:a0:af:98:86:90:a3:b7:1e:7b:e0:46:c9:
                    0e:dc:67:e5:5a:05:07:0d:5e:cd:2a:74:94:f3:e6:
                    f7:e0:22:48:70:80:84:a7:b6:1b:15:57:03:71:37:
                    f9:7e:53:5d:a9:ec:d5:48:45:75:80:ef:a5:b1:7e:
                    59:d2:5f:cf:02:17:d1:30:35:bb:bd:ed:4f:a8:87:
                    8f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:69:EE:98:2C:BE:9B:CD:B5:B1:00:09:19:31:15:34:38:B2:D4:19
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.192.0/22
                IPv6:
                  2804:4808::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267093

    Signature Algorithm: sha256WithRSAEncryption
         37:fa:17:84:84:a3:30:ae:0e:da:b0:e3:d3:00:21:ba:e6:b8:
         76:21:27:3a:e1:0c:6a:8f:8b:29:9d:a0:25:e8:5f:94:98:09:
         f4:d7:1c:33:5b:5a:ff:36:6a:05:4c:29:bb:43:eb:5d:52:49:
         90:5d:6b:52:62:ce:10:91:b9:cc:a1:96:62:07:9a:a6:29:1f:
         82:34:d3:13:83:3d:08:43:4a:53:6a:e5:c7:36:15:b2:42:b2:
         fb:c2:17:e2:bc:d9:f8:f9:d1:fe:76:7e:4d:8c:26:eb:9d:8b:
         79:47:db:d6:3b:0c:90:08:e3:4e:c2:56:99:b0:26:55:25:a0:
         31:86:d0:fb:71:c7:c3:de:ef:74:eb:f1:5d:ec:ac:6d:59:36:
         f9:b6:c7:10:65:eb:52:27:3c:87:d0:a7:f4:27:26:2c:1e:4e:
         99:1a:30:46:3b:48:8d:05:76:5a:8f:6e:7e:cc:c0:0f:1f:03:
         95:f3:46:35:5d:87:c1:7f:e2:2d:cf:03:6f:da:77:5d:10:bf:
         44:4b:df:2b:44:fa:b7:87:71:21:6e:34:ba:ee:26:11:e3:18:
         21:e2:69:41:94:9e:9e:8e:b6:0c:c0:6c:b4:2b:51:25:d7:7a:
         ce:aa:6a:4b:7d:16:32:3d:0f:b8:2e:1a:0b:55:c5:6e:d9:f9:
         de:98:e1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:50:54 2025 by rpki-client