Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EA46E031507BB728382EEA5D7D4637258A8ECC2A.cer
File:                     EA46E031507BB728382EEA5D7D4637258A8ECC2A.cer (raw, json)
Hash identifier:          1Uq2u1+cC6q/sOyWa9V/X7rg238kr9dKwYz6XtCKbwI=
Subject key identifier:   EA:46:E0:31:50:7B:B7:28:38:2E:EA:5D:7D:46:37:25:8A:8E:CC:2A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       23A681863B762584E2E055F24B18DFEE5917D631
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/EA46E031507BB728382EEA5D7D4637258A8ECC2A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Dec 2024 02:57:53 +0000
Certificate not after:    Mon 22 Dec 2025 03:02:53 +0000
Subordinate resources:    AS: 270915
                          IP: 201.140.216.0/22
                          IP: 2804:7370::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a6:81:86:3b:76:25:84:e2:e0:55:f2:4b:18:df:ee:59:17:d6:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 23 02:57:53 2024 GMT
            Not After : Dec 22 03:02:53 2025 GMT
        Subject: CN=EA46E031507BB728382EEA5D7D4637258A8ECC2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:18:b1:67:ed:dd:3a:c2:5b:d1:dd:51:61:
                    19:0a:58:45:bd:da:c1:6d:2b:6e:be:db:7f:a7:74:
                    77:98:97:9a:c3:37:69:82:43:0e:00:8f:65:92:ca:
                    06:5e:e6:99:40:fa:d0:17:dc:5d:e3:e1:44:11:52:
                    05:d0:cd:28:b3:53:a9:56:12:0a:f0:8a:df:d6:3a:
                    97:e0:22:1a:6b:65:26:a7:50:41:79:52:e4:89:a1:
                    a0:15:47:74:98:ea:c1:db:9e:88:64:d3:7d:d6:a7:
                    6f:56:21:d8:c9:5c:da:02:ef:b2:2e:de:7f:28:3c:
                    54:a1:00:38:10:a1:84:ff:58:fc:da:0a:49:e1:bf:
                    ce:c9:41:af:ac:5a:f9:c1:8a:01:ad:24:92:94:38:
                    7b:c4:c3:08:39:95:d7:53:38:21:37:f9:59:cf:59:
                    f5:c9:11:3c:15:10:00:25:8b:de:fa:71:94:57:c4:
                    57:13:62:67:bf:8b:21:b4:58:7f:b5:8a:2b:dc:fb:
                    a3:90:31:65:cd:77:b8:50:12:0f:22:3c:4c:d6:9a:
                    fd:ed:5c:b4:01:2d:ea:17:ee:0f:4f:09:1b:56:84:
                    d3:ce:6f:d0:27:22:1e:06:ef:62:cb:c2:56:7c:67:
                    5d:02:b9:2a:19:a2:fc:7a:3c:3d:e2:1d:be:91:94:
                    9a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:46:E0:31:50:7B:B7:28:38:2E:EA:5D:7D:46:37:25:8A:8E:CC:2A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/EA46E031507BB728382EEA5D7D4637258A8ECC2A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.216.0/22
                IPv6:
                  2804:7370::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270915

    Signature Algorithm: sha256WithRSAEncryption
         cd:3a:67:cb:1a:45:76:2d:21:8c:13:71:10:43:ef:ea:77:74:
         a4:ac:ae:05:67:18:d8:50:7f:04:a0:4d:ef:b5:e8:3e:33:a2:
         f0:ac:1b:04:dc:11:ff:4d:ad:e3:c2:7d:2f:da:9d:cc:9f:7f:
         59:ea:21:49:ca:dc:56:c6:e2:4e:49:06:7e:d9:f7:aa:f7:ca:
         d0:e2:e4:cb:36:a2:35:3d:05:6a:d8:2c:20:67:7f:33:70:57:
         78:c1:00:60:84:dc:2b:53:73:40:e0:55:06:dd:94:89:97:59:
         9e:28:3a:67:fd:0b:1b:d1:ca:7d:f8:53:44:5d:15:fe:bd:e2:
         54:74:60:23:1d:ec:96:75:6c:f2:bf:f8:da:be:56:83:e6:e9:
         ac:6d:d3:d6:c0:6c:d4:1c:d1:0f:af:83:b1:ad:42:e3:f8:44:
         25:30:45:26:a4:57:cf:23:3f:9e:f7:69:82:82:81:a1:69:26:
         46:6f:c9:0d:d4:a1:6b:20:51:be:bb:2b:a8:45:fd:c7:6f:38:
         b7:38:c0:92:c2:6d:bf:e2:ee:02:64:b5:aa:41:a0:35:89:f3:
         bf:30:83:1e:16:89:b4:89:e6:a5:8e:b0:c5:5b:7b:52:85:96:
         9a:70:44:ff:02:ac:9b:f4:c0:1a:56:6d:b4:fd:fa:c3:da:52:
         e8:d0:13:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:33:24 2025 by rpki-client