Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
File:                     F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer (raw, json)
Hash identifier:          4aPHAGDkrTUTjiK6/BP+PD0Ym4Eo1dgmeleKv9r2Erg=
Subject key identifier:   F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0C04757F1AD75E316F4C12D59D579C9FF9354ACA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Dec 2024 17:29:44 +0000
Certificate not after:    Wed 03 Dec 2025 17:34:44 +0000
Subordinate resources:    AS: 28184
                          IP: 189.89.64.0/20
                          IP: 2804:15bc::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:04:75:7f:1a:d7:5e:31:6f:4c:12:d5:9d:57:9c:9f:f9:35:4a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  4 17:29:44 2024 GMT
            Not After : Dec  3 17:34:44 2025 GMT
        Subject: CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3b:58:08:6c:96:d8:3c:78:18:8f:6f:3e:6a:
                    12:c4:df:26:27:02:7e:e7:a6:52:26:91:26:b5:df:
                    04:5c:07:c6:d1:a5:6c:21:9a:98:6e:cc:d7:67:78:
                    8f:db:2a:ee:97:d5:e8:fb:43:84:e8:7f:a0:2f:78:
                    fc:95:f6:30:60:72:e5:96:ff:53:26:b2:5a:42:e4:
                    09:28:fb:14:de:2d:49:36:8b:89:cd:da:7e:76:9f:
                    cc:9f:b1:c8:ff:6d:d1:58:7b:8f:a4:46:d4:af:0e:
                    ac:66:da:78:2b:2a:0d:6a:26:5a:d4:48:88:01:1a:
                    96:98:39:e0:f8:84:8a:2a:be:62:91:04:08:0d:56:
                    fb:df:d5:25:78:6f:0a:01:87:4b:ca:be:1b:ee:9e:
                    5a:83:c9:6a:09:df:0b:81:b2:1a:62:fb:a9:3a:e3:
                    8b:2a:10:76:b5:6f:cf:3a:de:dc:49:fa:c4:bf:d1:
                    40:e1:8f:4c:a9:b7:9f:06:58:e8:e2:5a:aa:7a:9a:
                    f8:56:bd:1f:b7:17:2a:dc:dd:f7:5a:0e:f3:3c:01:
                    3f:2b:e3:83:9d:70:e5:ed:48:f6:bb:26:f3:bb:51:
                    6d:27:90:5b:2c:6f:5a:d6:06:eb:b5:0b:91:36:e0:
                    f0:0a:45:81:f8:27:20:2a:ab:86:d1:47:56:f2:f3:
                    47:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.64.0/20
                IPv6:
                  2804:15bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28184

    Signature Algorithm: sha256WithRSAEncryption
         40:55:2c:67:12:ea:ab:f3:19:7f:d1:f9:3f:86:48:0c:ca:c2:
         0b:a0:cb:4d:68:de:3b:f5:db:92:e5:02:5d:14:e0:27:92:06:
         f4:b6:40:a9:52:15:ee:a5:d6:76:cb:ba:bd:c7:b0:97:1a:f5:
         2c:79:0a:4e:b2:30:a3:99:85:10:a1:2b:7f:e1:c3:6d:fd:59:
         dc:f5:07:ba:02:0f:81:42:4f:45:53:2a:ad:55:25:72:af:5c:
         67:4b:98:7a:f9:be:d4:3f:0a:6f:d6:4b:cf:1f:4b:75:05:d5:
         13:fa:a0:24:79:0d:e6:1f:d1:a8:4a:7a:30:a2:ee:a3:31:91:
         bd:9a:77:0d:d6:3a:f6:d8:82:3c:10:61:17:4b:5f:46:8a:a0:
         13:af:f4:51:a6:4a:f0:e4:49:18:c2:9b:c5:00:2e:c3:1b:ab:
         f5:73:47:9d:ff:50:66:b0:8a:1b:29:ae:9f:e8:48:b6:17:cc:
         da:48:cf:2c:75:a8:03:95:a2:2a:c2:94:00:e0:8b:4d:0c:8e:
         4f:73:4e:14:35:1c:bf:c5:db:ee:ce:79:6e:fd:22:89:60:85:
         31:3a:fd:f3:03:97:11:55:41:f2:e9:b0:8f:1c:c5:03:51:b7:
         94:66:4f:b0:12:a1:a2:42:6e:c2:b5:a5:36:44:c1:f9:f3:d7:
         93:38:5d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 01:36:20 2025 by rpki-client