Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/99C2A53A53B7161516985068CD39F465FE646938.cer
File:                     99C2A53A53B7161516985068CD39F465FE646938.cer (raw, json)
Hash identifier:          UHBklLYe5Q4dDBpghN3ku7TsuQVspgpY7Lb92wXVz58=
Subject key identifier:   99:C2:A5:3A:53:B7:16:15:16:98:50:68:CD:39:F4:65:FE:64:69:38
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       782DD467EFC7DF47E431163F759078B282CD9F96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Dec 2024 16:31:44 +0000
Certificate not after:    Mon 22 Dec 2025 16:36:44 +0000
Subordinate resources:    AS: 28232
                          IP: 189.127.32.0/20
                          IP: 2804:7ed8::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:2d:d4:67:ef:c7:df:47:e4:31:16:3f:75:90:78:b2:82:cd:9f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 23 16:31:44 2024 GMT
            Not After : Dec 22 16:36:44 2025 GMT
        Subject: CN=99C2A53A53B7161516985068CD39F465FE646938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:20:92:f1:6d:df:bc:6f:ec:f8:22:6e:b9:24:
                    04:4d:02:2c:f8:8b:ab:74:7c:aa:e9:f9:71:fa:a6:
                    af:cc:e9:1a:15:a9:a0:45:ca:a6:91:f3:5c:f4:51:
                    65:f7:67:b5:fd:2b:03:37:e3:48:68:81:db:6d:d4:
                    ab:e1:c1:8d:e6:22:12:ba:bf:d6:83:0d:d1:6c:d9:
                    07:34:ac:d4:33:c3:59:6f:b4:a2:e5:62:c4:b9:a1:
                    bd:34:d8:28:07:a1:19:cd:c6:80:bb:bb:95:e1:70:
                    3b:57:3f:90:fe:fb:39:d6:9a:48:42:23:b9:7e:dd:
                    2b:79:41:db:68:ad:20:09:54:2b:4b:43:cf:c8:f9:
                    d4:69:84:8a:6e:4f:01:7b:b6:e8:d7:09:c2:bc:2a:
                    d9:f4:ba:d1:b6:c8:9a:b1:a0:2d:ec:ef:b7:00:be:
                    c3:ea:45:1e:e3:0d:f3:ae:92:1e:c5:e9:9e:e7:84:
                    46:6c:26:33:9f:5f:2a:23:e7:2a:3d:14:4e:e3:99:
                    7f:b0:3f:75:da:13:d1:04:1f:b1:01:e7:b7:af:24:
                    a7:cb:4a:4e:f0:44:5e:1a:d1:2f:74:68:ec:91:39:
                    d9:31:e3:88:33:13:22:90:5f:cd:eb:96:7e:70:d2:
                    7d:3d:73:58:cb:06:19:89:7f:56:4f:65:35:9c:8b:
                    e5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:C2:A5:3A:53:B7:16:15:16:98:50:68:CD:39:F4:65:FE:64:69:38
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.32.0/20
                IPv6:
                  2804:7ed8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28232

    Signature Algorithm: sha256WithRSAEncryption
         03:f0:0b:c3:77:02:9a:b9:1b:bf:ae:1e:2a:21:a9:fd:2f:82:
         b9:cb:fe:f8:e9:f8:03:84:cd:e3:94:c5:4a:d9:11:39:ac:e0:
         22:71:16:27:10:3a:f6:4d:d5:f0:dd:d5:4a:f3:3f:92:a3:da:
         33:2e:fa:9c:7b:62:52:47:51:2d:a6:a7:86:ef:27:46:f1:ed:
         2b:42:3b:a4:df:8b:b6:8c:1b:ff:9b:fa:7c:39:94:50:63:98:
         b2:3a:07:b5:c3:af:5c:14:11:35:5c:68:6b:b2:f0:29:9b:4c:
         38:bd:d1:c2:75:7f:1e:2f:bf:f9:bf:a9:87:51:87:74:67:c8:
         d1:b3:01:91:39:23:71:fd:1c:1f:cb:f8:00:3d:12:5e:5a:a6:
         e6:c2:0a:0a:ff:55:bf:ee:0d:bc:2d:03:bf:11:15:33:59:db:
         ed:a4:41:db:95:41:e9:e6:98:40:09:74:3f:a8:23:25:1f:57:
         11:e0:a1:c9:8a:b8:a3:e5:4d:9a:f2:19:73:8e:68:63:13:10:
         62:d1:e0:e7:5a:7f:0d:f6:a2:0a:38:8d:63:b8:b6:37:71:67:
         3a:24:34:1e:ce:3d:ae:cf:fe:1d:ce:ed:f8:09:ca:d3:3d:f2:
         cc:9b:4d:89:a6:1c:d9:d8:56:f6:da:01:d6:92:0a:04:ce:f6:
         a3:ed:86:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:18 2025 by rpki-client