Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/89CC368C6617311D256B7895B2037F34C4664792.cer
File:                     89CC368C6617311D256B7895B2037F34C4664792.cer (raw, json)
Hash identifier:          NnipYXW9xURHC1LsSvhPg3CBNnVfUokbWbPtP2XiUdA=
Subject key identifier:   89:CC:36:8C:66:17:31:1D:25:6B:78:95:B2:03:7F:34:C4:66:47:92
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       72728557AD9CC79CC67266E2EFCC7420346891D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DiaNQcRQK7kn7mBWRCceTNyjpNJX6SjKwJxZoWgxAk1M/1/89CC368C6617311D256B7895B2037F34C4664792.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DiaNQcRQK7kn7mBWRCceTNyjpNJX6SjKwJxZoWgxAk1M/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 01:46:55 +0000
Certificate not after:    Thu 03 Apr 2025 01:51:55 +0000
Subordinate resources:    AS: 272671
                          IP: 2804:86dc::/32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:72:85:57:ad:9c:c7:9c:c6:72:66:e2:ef:cc:74:20:34:68:91:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 01:46:55 2024 GMT
            Not After : Apr  3 01:51:55 2025 GMT
        Subject: CN=89CC368C6617311D256B7895B2037F34C4664792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5d:6f:38:37:b3:51:11:91:18:f7:eb:de:ae:
                    1b:df:52:5c:ca:ac:60:12:14:32:8f:e4:c3:03:27:
                    dc:c3:40:62:b9:82:bf:fa:13:6d:ec:83:a8:f1:76:
                    cf:87:1d:50:5a:7f:e8:a8:fa:87:f5:92:a4:0e:bd:
                    e8:30:bb:be:39:90:12:2c:16:76:92:b1:fc:37:01:
                    a9:77:7d:55:22:9d:62:10:fd:61:24:15:a3:18:30:
                    57:3b:8f:21:40:76:2c:af:5d:57:7c:d2:9b:06:a7:
                    de:79:59:8c:16:9f:19:87:31:bf:d7:85:74:76:aa:
                    39:77:b4:98:01:c3:8a:ee:e0:a7:c9:e4:53:3e:a4:
                    08:c9:f4:a7:fd:39:cd:20:a2:af:0c:f6:62:92:e8:
                    38:14:79:02:95:f5:09:63:67:c9:c6:0f:9c:c1:3f:
                    da:12:0d:5c:f0:06:0b:36:50:de:7d:ea:75:61:cb:
                    e0:92:ea:cf:04:0f:4b:9a:6a:49:b3:16:48:fb:9d:
                    a4:6e:f0:c2:e2:a6:45:29:8a:60:c8:e3:81:be:7f:
                    40:a1:f5:00:60:2c:05:a6:25:cb:4d:e7:f6:31:bc:
                    ec:ea:48:e9:97:2f:1d:14:e6:1e:b3:73:98:a6:a6:
                    6e:6d:5d:5b:a2:21:40:d0:c2:30:0e:45:05:42:82:
                    52:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:CC:36:8C:66:17:31:1D:25:6B:78:95:B2:03:7F:34:C4:66:47:92
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DiaNQcRQK7kn7mBWRCceTNyjpNJX6SjKwJxZoWgxAk1M/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DiaNQcRQK7kn7mBWRCceTNyjpNJX6SjKwJxZoWgxAk1M/1/89CC368C6617311D256B7895B2037F34C4664792.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272671

    Signature Algorithm: sha256WithRSAEncryption
         b8:c1:4b:01:53:69:47:a0:c2:fb:75:4e:6d:72:84:3a:df:30:
         8d:13:1a:1a:f2:35:80:a8:93:9e:69:11:51:d3:9d:f6:66:04:
         71:14:4d:32:58:d7:ec:bd:75:8e:09:45:98:d5:eb:ed:58:80:
         36:63:c3:b9:29:b1:81:87:9e:17:c6:f7:7f:89:f9:d0:55:d7:
         c4:df:b7:b1:7c:03:e4:d4:64:94:30:6b:f6:56:08:b2:f5:4b:
         e0:09:fa:78:31:b2:4e:00:c7:a4:4b:e2:9f:39:30:12:1b:f6:
         e4:99:48:b4:f4:32:9e:2f:2b:2c:c7:de:5e:81:bb:77:2a:fb:
         ff:97:a5:30:14:e0:cb:a5:8e:81:34:38:dc:3c:24:80:ac:04:
         2e:eb:00:e1:70:0a:b5:58:9b:5f:49:53:88:bc:ee:40:48:f8:
         47:8f:f6:79:c7:45:94:5e:32:5d:c8:80:64:9c:d8:c8:82:09:
         3e:36:8c:ea:38:60:8e:51:3e:3f:3a:47:6e:3f:0c:13:20:ed:
         13:5c:ad:28:56:55:03:83:15:54:b5:7b:55:e3:34:23:c6:00:
         33:75:17:b3:ff:c6:d2:ae:7c:49:e0:e9:b6:72:bd:10:78:72:
         ea:c5:d6:e1:d8:9b:ce:50:82:01:1d:c1:47:67:c9:75:52:11:
         e7:71:3e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:30:14 2025 by rpki-client