Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E6FF495D0A4F0F74E959F3832234CB61EF9A5B41.cer
File:                     E6FF495D0A4F0F74E959F3832234CB61EF9A5B41.cer (raw, json)
Hash identifier:          T7Ns54N3D2gjiiKwfGTDzzTS+xhnOhbBPsxZ/MFzFQI=
Subject key identifier:   E6:FF:49:5D:0A:4F:0F:74:E9:59:F3:83:22:34:CB:61:EF:9A:5B:41
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7819F058AC4BC1C97A26ECD41CFDB7A0684E2F23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/1/E6FF495D0A4F0F74E959F3832234CB61EF9A5B41.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 10:59:16 +0000
Certificate not after:    Thu 03 Apr 2025 11:04:16 +0000
Subordinate resources:    AS: 264000
                          IP: 143.0.124.0/22
                          IP: 2804:2924::/32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:19:f0:58:ac:4b:c1:c9:7a:26:ec:d4:1c:fd:b7:a0:68:4e:2f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 10:59:16 2024 GMT
            Not After : Apr  3 11:04:16 2025 GMT
        Subject: CN=E6FF495D0A4F0F74E959F3832234CB61EF9A5B41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:18:b7:0c:b1:00:cb:61:5c:a0:49:33:c6:d3:
                    d2:a6:de:d6:5a:99:69:50:61:d3:a3:1f:bb:24:59:
                    4f:48:50:ae:8c:a7:78:2e:92:10:53:e0:7c:85:fa:
                    46:22:cd:4d:3a:0e:54:7c:b7:c3:0c:96:38:8d:ce:
                    35:5d:d9:c9:e3:ed:8d:e2:6a:bb:25:1a:a5:eb:41:
                    2a:a5:49:cd:fa:c0:9d:0f:77:ae:62:01:99:cf:77:
                    38:00:51:05:ec:06:b5:e4:ce:07:29:54:19:b1:e3:
                    f7:82:bf:b5:77:31:23:72:9a:61:70:c8:1e:19:5e:
                    1a:d1:65:18:3d:39:ba:35:35:75:0f:4c:6c:09:56:
                    b7:ad:55:b9:72:dc:e1:51:d7:52:ad:60:8e:83:ac:
                    24:07:fa:9a:12:49:2c:d4:f5:d7:1a:ac:85:01:14:
                    0b:39:fb:86:47:45:fd:f3:ee:94:05:ad:77:35:18:
                    83:68:d3:6f:3e:8b:c7:16:73:59:6e:59:17:d6:98:
                    d9:ae:62:fc:8d:93:2e:2a:b3:ac:5a:a4:7e:dd:e8:
                    c2:ae:44:a7:78:9d:7e:f9:5f:69:23:cd:49:4b:28:
                    76:1e:cc:e9:2e:33:44:9e:b1:bb:27:49:f4:3f:06:
                    45:f4:04:56:4f:0a:a6:04:22:4a:f8:55:b3:45:0e:
                    8f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:FF:49:5D:0A:4F:0F:74:E9:59:F3:83:22:34:CB:61:EF:9A:5B:41
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/1/E6FF495D0A4F0F74E959F3832234CB61EF9A5B41.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.124.0/22
                IPv6:
                  2804:2924::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264000

    Signature Algorithm: sha256WithRSAEncryption
         a9:d4:ee:7e:5b:5d:5b:d1:a5:88:ff:5c:5f:bf:00:48:b6:ec:
         cb:44:c8:7f:eb:93:ec:97:e0:2a:d2:48:1f:de:62:00:2e:91:
         1b:55:54:ae:79:7f:98:1f:0c:8f:fc:3f:e0:32:2a:aa:c2:b0:
         6a:0a:88:00:9d:d1:d8:19:a6:b4:46:ab:ff:09:dc:68:bc:b8:
         eb:c7:d4:02:b1:73:bc:a5:a0:a1:70:0f:75:32:db:86:db:f7:
         32:1f:ab:20:9a:bb:c1:47:b6:fa:37:c6:cc:b7:08:f1:6d:f3:
         88:c1:42:a4:8f:5c:0a:d0:dd:95:a2:80:b3:13:c4:f9:18:62:
         9d:a2:4e:d4:70:08:bd:2f:89:0a:23:0d:0e:2c:41:81:b4:e7:
         73:d5:18:5b:42:06:f0:3e:f9:f4:70:88:ee:ab:11:43:a3:f4:
         c4:e1:85:33:14:9a:82:86:c2:de:19:ce:38:cb:1d:f1:ce:43:
         dd:dd:da:05:eb:9d:7a:df:8d:79:ca:82:d5:c0:47:1a:20:ae:
         08:7f:d4:eb:d3:5e:d9:3c:f9:cc:fa:1f:98:a0:db:6f:40:ed:
         b9:9b:4f:dc:4c:e2:5b:07:f6:87:73:20:5c:d6:fe:21:e6:fd:
         f1:50:f7:b9:0a:dd:14:e2:d8:26:72:f0:24:97:74:bc:8b:1f:
         a6:27:6b:4b
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUeBnwWKxLwcl6JuzUHP23oGhOLyMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxMDU5MTZaFw0yNTA0MDMxMTA0MTZaMDMxMTAvBgNV
BAMTKEU2RkY0OTVEMEE0RjBGNzRFOTU5RjM4MzIyMzRDQjYxRUY5QTVCNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLGLcMsQDLYVygSTPG09Km3tZa
mWlQYdOjH7skWU9IUK6Mp3gukhBT4HyF+kYizU06DlR8t8MMljiNzjVd2cnj7Y3i
arslGqXrQSqlSc36wJ0Pd65iAZnPdzgAUQXsBrXkzgcpVBmx4/eCv7V3MSNymmFw
yB4ZXhrRZRg9Obo1NXUPTGwJVretVbly3OFR11KtYI6DrCQH+poSSSzU9dcarIUB
FAs5+4ZHRf3z7pQFrXc1GINo028+i8cWc1luWRfWmNmuYvyNky4qs6xapH7d6MKu
RKd4nX75X2kjzUlLKHYezOkuM0SesbsnSfQ/BkX0BFZPCqYEIkr4VbNFDo9VAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTm/0ldCk8PdOlZ
84MiNMth75pbQTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUtq
Q2RTaGt2NFk5Ymh2Q0p5eUd6OTRGTllZN3lQYmk1MmRUUFp6VkxLcHIvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FL
akNkU2hrdjRZOWJodkNKeXlHejk0Rk5ZWTd5UGJpNTJkVFBaelZMS3ByLzEvRTZG
RjQ5NUQwQTRGMEY3NEU5NTlGMzgzMjIzNENCNjFFRjlBNUI0MS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCjwB8MA0EAgACMAcDBQAoBCkkMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQHQDANBgkqhkiG9w0BAQsFAAOCAQEAqdTufltdW9GliP9c
X78ASLbsy0TIf+uT7JfgKtJIH95iAC6RG1VUrnl/mB8Mj/w/4DIqqsKwagqIAJ3R
2BmmtEar/wncaLy468fUArFzvKWgoXAPdTLbhtv3Mh+rIJq7wUe2+jfGzLcI8W3z
iMFCpI9cCtDdlaKAsxPE+RhinaJO1HAIvS+JCiMNDixBgbTnc9UYW0IG8D759HCI
7qsRQ6P0xOGFMxSagobC3hnOOMsd8c5D3d3aBeudet+NecqC1cBHGiCuCH/U69Ne
2Tz5zPofmKDbb0DtuZtP3EziWwf2h3MgXNb+Ieb98VD3uQrdFOLYJnLwJJd0vIsf
pidrSw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:16:10 2025 by rpki-client