Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EDDE9456DFB0E0B6141479B36FE32CA0BF98688B.cer
File:                     EDDE9456DFB0E0B6141479B36FE32CA0BF98688B.cer (raw, json)
Hash identifier:          w/r4Ow1eOeqWtob9aULF44wo+92B5/6TD7BatNHnxO0=
Subject key identifier:   ED:DE:94:56:DF:B0:E0:B6:14:14:79:B3:6F:E3:2C:A0:BF:98:68:8B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7C564A0CBE43663A838FA741AD445659555DA0FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/EDDE9456DFB0E0B6141479B36FE32CA0BF98688B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Jan 2025 20:43:28 +0000
Certificate not after:    Mon 26 Jan 2026 20:48:28 +0000
Subordinate resources:    AS: 28260
                          IP: 177.130.0.0/20
                          IP: 186.193.240.0/20
                          IP: 187.16.240.0/20
                          IP: 187.95.32.0/20
                          IP: 2804:28e4::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:56:4a:0c:be:43:66:3a:83:8f:a7:41:ad:44:56:59:55:5d:a0:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 27 20:43:28 2025 GMT
            Not After : Jan 26 20:48:28 2026 GMT
        Subject: CN=EDDE9456DFB0E0B6141479B36FE32CA0BF98688B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b6:bc:0f:2c:ff:e5:c0:44:e9:b5:c5:e1:93:
                    f5:74:55:d4:6d:e0:52:c2:5b:d6:50:38:69:3c:07:
                    3e:e0:d8:ee:69:3d:26:3d:c6:18:f9:b7:1d:f8:84:
                    44:7d:48:ed:04:57:c2:55:09:d5:17:d2:bb:53:8b:
                    86:79:40:51:6f:24:6b:92:32:5c:cb:18:cc:1d:ae:
                    5a:ae:35:7a:d2:37:74:86:3c:bd:47:18:24:66:c2:
                    24:9c:01:31:81:08:f4:aa:3e:7c:60:d8:a9:09:a7:
                    5e:b3:0c:4b:7f:78:59:5c:78:3f:83:fe:4e:a5:cd:
                    3c:2e:68:ab:8a:51:5f:7e:80:16:ae:35:32:b7:ee:
                    78:d5:6f:ee:6d:37:89:a7:d5:c0:e4:f1:86:0d:b7:
                    0b:ca:4c:a0:83:92:65:c4:57:3a:1a:16:34:91:07:
                    d4:af:78:1d:30:c5:66:c0:45:d8:fb:98:77:5a:18:
                    21:f2:d7:8e:70:5b:5a:ba:cb:f1:6f:06:8b:ec:ea:
                    21:e1:4b:0b:54:77:67:a7:f7:6e:39:1b:aa:9c:76:
                    92:b1:f2:ae:3c:a3:cd:37:32:22:2c:9e:90:a0:66:
                    e1:00:2a:d0:2f:6a:57:d1:1f:a5:f2:7f:83:7a:ba:
                    eb:fe:ed:1c:41:87:a3:87:8a:73:1d:c6:7e:8b:54:
                    2c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                ED:DE:94:56:DF:B0:E0:B6:14:14:79:B3:6F:E3:2C:A0:BF:98:68:8B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/EDDE9456DFB0E0B6141479B36FE32CA0BF98688B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.0.0/20
                  186.193.240.0/20
                  187.16.240.0/20
                  187.95.32.0/20
                IPv6:
                  2804:28e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28260

    Signature Algorithm: sha256WithRSAEncryption
         10:75:06:1f:7e:db:b4:0f:cd:39:50:a0:dc:8d:70:a4:a8:dd:
         4d:e0:4b:ed:ed:99:bf:ec:b2:f5:d3:2e:bb:58:4b:96:2b:b9:
         65:b5:6e:6f:b9:d5:ca:86:e4:01:d2:31:76:40:da:5d:2d:27:
         a5:ea:f0:fb:53:b2:40:32:33:2f:0d:4f:a4:f8:f2:0e:5c:6b:
         2e:6b:f9:84:26:64:c5:c2:01:09:4b:96:f3:a0:ed:24:45:95:
         1f:98:b5:3e:8d:d6:2c:63:94:b8:23:f4:06:d9:18:56:d1:93:
         b3:d3:6a:e1:52:08:8c:89:f4:b1:51:9b:b3:c7:c1:ac:40:61:
         a8:5a:34:64:a0:a7:fc:ca:85:91:e0:3a:f8:8e:18:8b:cd:e1:
         15:87:bb:d2:a1:d2:55:08:c8:39:47:95:1a:2a:d0:9d:05:1b:
         36:23:5c:b2:12:ee:67:c9:e4:80:24:78:20:78:a3:c6:4e:5e:
         22:49:b1:d9:78:c3:35:aa:aa:41:bc:9a:5d:e5:58:a9:9a:d3:
         84:74:3b:7e:d4:3e:79:2e:49:b9:db:7e:6a:ac:4c:d7:cd:50:
         85:65:f1:0a:e3:c7:d1:08:20:49:1f:20:cc:b4:2a:67:65:ff:
         e4:c6:00:e3:84:4d:2f:92:71:3e:93:b1:78:7e:8c:57:ab:9d:
         5d:ff:4b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:42 2025 by rpki-client