Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E013AB8E55CC157E0D73605EC9E019342448B031.cer
File:                     E013AB8E55CC157E0D73605EC9E019342448B031.cer (raw, json)
Hash identifier:          batgMreLK3j9T/X31xoay5Ll80sJUuq6872L766au80=
Subject key identifier:   E0:13:AB:8E:55:CC:15:7E:0D:73:60:5E:C9:E0:19:34:24:48:B0:31
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7342CF5EA8B482BF87C31F85A04BE5304FC35542
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/E013AB8E55CC157E0D73605EC9E019342448B031.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Dec 2024 15:27:37 +0000
Certificate not after:    Tue 16 Dec 2025 15:32:37 +0000
Subordinate resources:    AS: 269311
                          IP: 45.184.44.0/22
                          IP: 2804:62ac::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:42:cf:5e:a8:b4:82:bf:87:c3:1f:85:a0:4b:e5:30:4f:c3:55:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 17 15:27:37 2024 GMT
            Not After : Dec 16 15:32:37 2025 GMT
        Subject: CN=E013AB8E55CC157E0D73605EC9E019342448B031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:07:44:ad:78:a8:dd:6a:de:e6:a2:32:fc:1e:
                    6e:7b:c5:68:a2:2b:a2:01:99:67:08:65:91:8f:d3:
                    89:52:97:fb:f2:66:31:19:40:30:98:bc:6b:29:c0:
                    94:0d:b9:9e:77:05:8d:1b:99:90:d0:fe:c1:aa:2f:
                    1c:fd:f6:eb:ee:69:a7:32:35:0e:94:71:00:07:d3:
                    95:fc:8a:75:fa:df:01:9c:c6:0e:f8:35:1c:33:fd:
                    32:e7:36:41:e6:e2:74:67:a5:bb:2b:0a:48:41:0a:
                    2d:08:10:79:ab:e0:b0:5f:b9:ff:f2:52:23:a7:13:
                    29:4c:08:e2:c0:1f:28:93:38:97:70:05:56:7c:88:
                    e8:e2:ab:53:15:4c:a7:99:ad:78:a9:23:73:01:ae:
                    69:5a:8a:ff:9b:e1:55:32:84:15:85:ae:95:78:73:
                    7a:0c:9d:d1:9a:5d:57:7c:f0:a9:35:d0:0d:c6:be:
                    b8:55:b0:8c:1e:f4:b7:f0:17:1d:50:0d:47:7f:95:
                    44:a2:4f:e2:3e:c5:d8:55:19:be:80:e5:07:79:f9:
                    2d:8a:67:12:5a:ce:46:95:1f:39:56:a2:58:96:75:
                    7a:55:c2:a4:a3:30:1d:90:7b:07:6a:f6:1c:b2:0a:
                    52:9b:ad:ca:13:26:e1:a2:a3:d6:16:4c:06:ff:de:
                    ef:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:13:AB:8E:55:CC:15:7E:0D:73:60:5E:C9:E0:19:34:24:48:B0:31
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/E013AB8E55CC157E0D73605EC9E019342448B031.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.44.0/22
                IPv6:
                  2804:62ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269311

    Signature Algorithm: sha256WithRSAEncryption
         d0:a6:60:52:1b:4c:6f:36:a5:3d:b7:09:8f:53:69:30:31:3f:
         a3:cc:77:42:46:6d:61:93:0f:a2:6a:b9:a8:93:c9:10:c2:c3:
         87:b1:67:37:d4:76:7f:a3:ac:f6:1f:21:6c:f2:8e:e1:69:68:
         04:ad:40:30:d3:b4:c0:be:d3:86:94:60:68:ca:1f:52:3d:b1:
         6a:ac:68:63:40:dc:54:f9:03:7b:88:c4:14:36:80:84:f9:07:
         f4:66:bd:da:94:c9:81:b6:e6:cf:c1:cb:32:d8:33:ca:78:09:
         68:4a:5b:20:84:98:35:45:8c:3f:4e:95:ee:01:21:a4:60:36:
         7a:c2:e1:e7:3b:db:2d:75:a8:17:5f:65:77:ee:82:b7:98:1b:
         74:2a:d6:37:b8:54:33:c9:d8:f6:64:bf:b3:41:80:6b:96:fd:
         2a:24:f4:23:df:41:6b:31:e6:da:51:39:c6:95:b0:51:a5:29:
         74:17:cd:06:ca:26:7a:c5:33:7d:3a:1f:8d:b5:48:fc:7d:86:
         5a:6d:dc:ec:6e:2f:97:48:fe:5c:d5:e6:c5:64:8d:bb:b2:2d:
         db:02:ca:92:ad:8d:c5:38:a5:5e:22:df:ef:ed:68:d0:6f:68:
         1d:93:f5:32:b8:e3:cf:89:80:fb:f8:01:fa:9a:15:56:c8:90:
         f7:e1:86:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:32:17 2025 by rpki-client