Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E06CBB0DE419A77CF2E6E083CF317F7EF2AFF9E9.cer
File:                     E06CBB0DE419A77CF2E6E083CF317F7EF2AFF9E9.cer (raw, json)
Hash identifier:          ytH4/eyoahHB6+gU2zeuyvMdH+f5CCE9PX5s+TX0wTQ=
Subject key identifier:   E0:6C:BB:0D:E4:19:A7:7C:F2:E6:E0:83:CF:31:7F:7E:F2:AF:F9:E9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1BE5111FB9FBD2582C3D67624202A398A87A5D65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/1/E06CBB0DE419A77CF2E6E083CF317F7EF2AFF9E9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 06:26:52 +0000
Certificate not after:    Thu 03 Apr 2025 06:31:52 +0000
Subordinate resources:    AS: 264211
                          IP: 138.99.164.0/22
                          IP: 2804:2444::/32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e5:11:1f:b9:fb:d2:58:2c:3d:67:62:42:02:a3:98:a8:7a:5d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 06:26:52 2024 GMT
            Not After : Apr  3 06:31:52 2025 GMT
        Subject: CN=E06CBB0DE419A77CF2E6E083CF317F7EF2AFF9E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:37:14:2b:b2:1b:f0:50:79:9b:ac:d4:7a:4f:
                    e5:16:ec:90:d6:1d:d0:0f:fb:a1:a3:7c:c2:d2:83:
                    2f:0b:63:3d:f9:a1:a4:a9:eb:9d:11:31:49:7e:4f:
                    24:b6:b9:4e:82:bd:a3:b4:a4:e5:ba:82:7b:22:f3:
                    30:1a:59:32:ec:6a:39:93:f2:7d:c7:78:2b:01:f4:
                    f6:86:7f:7c:cf:9a:df:f0:e7:d2:ab:c9:b4:1c:62:
                    a1:ed:6b:6c:24:21:27:63:6e:34:b1:d3:21:32:ea:
                    99:9b:4f:5c:6c:5e:47:1c:53:c2:06:ec:09:bd:b4:
                    56:10:0e:80:99:51:df:71:08:c5:66:fd:95:1a:03:
                    d9:f3:17:65:2c:a9:bd:11:25:a1:92:f7:ba:16:86:
                    21:b5:e8:c1:79:07:c8:b2:74:54:e8:ed:b7:f6:cc:
                    6a:82:f2:57:d3:bb:e1:9d:e1:8a:6b:28:ee:b6:37:
                    c1:7d:fa:96:30:75:d0:90:32:02:ef:8e:76:2a:c0:
                    59:18:b5:5a:6d:9a:12:7c:8d:5e:d6:3c:8d:e3:c4:
                    e7:cd:52:f7:92:96:1a:43:31:db:2a:e4:af:7f:5b:
                    ee:e0:b8:fe:e6:60:30:11:98:f0:ce:04:a9:7e:cf:
                    bd:b0:28:c2:aa:fa:02:0e:0e:e9:98:2f:2a:07:d6:
                    e2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:6C:BB:0D:E4:19:A7:7C:F2:E6:E0:83:CF:31:7F:7E:F2:AF:F9:E9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/1/E06CBB0DE419A77CF2E6E083CF317F7EF2AFF9E9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.164.0/22
                IPv6:
                  2804:2444::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264211

    Signature Algorithm: sha256WithRSAEncryption
         31:7e:2f:ba:fb:15:9f:f3:5c:58:b5:03:d2:fc:64:e3:90:19:
         28:83:8b:99:59:7a:46:6e:a8:93:cf:cd:ae:cd:5e:48:2a:c8:
         f2:5e:10:d2:07:68:0a:21:e9:85:46:52:b3:59:c7:a1:4f:43:
         b5:74:67:71:7d:9d:10:8b:79:78:4f:ce:16:2a:a3:25:4a:49:
         e5:56:12:b2:b0:94:f1:19:a1:fd:f2:6e:4f:88:ce:c1:0c:64:
         44:00:d5:7e:81:3e:5c:3e:6a:bf:46:d6:5f:19:e7:b2:2a:1c:
         91:e2:f0:6d:f0:3f:02:38:bd:d8:cf:f4:31:ef:2f:18:96:29:
         0c:f3:fa:b6:3f:44:bc:ab:b2:e4:9d:f3:42:e8:5c:94:be:21:
         ad:4d:97:70:fd:46:49:81:78:94:fb:d4:8f:83:49:fd:3e:92:
         10:5a:7f:d7:1e:4b:9a:be:62:41:12:6e:28:65:55:46:f6:36:
         cf:bd:82:db:e6:13:6e:08:25:82:e5:83:48:72:58:8c:40:72:
         fe:36:e9:53:68:53:53:65:a1:07:de:5b:f9:2f:40:28:e7:7f:
         4e:ee:ac:a9:6f:4a:c8:a7:2b:80:55:18:2c:c3:af:2b:73:1e:
         43:c1:14:3c:2f:19:20:57:0c:e6:82:27:ba:f4:19:5b:81:e4:
         42:83:9a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:20 2025 by rpki-client