Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FB612EE582EA59FB5A22CA0DC75974FACBA53303.cer
File:                     FB612EE582EA59FB5A22CA0DC75974FACBA53303.cer (raw, json)
Hash identifier:          GzVny53Kryl6y/w5ql0zGK5VpKA/TohdZ1lbH2GKX4Y=
Subject key identifier:   FB:61:2E:E5:82:EA:59:FB:5A:22:CA:0D:C7:59:74:FA:CB:A5:33:03
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4414FE496B58652275020E31C13C9602BD3C52B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/FB612EE582EA59FB5A22CA0DC75974FACBA53303.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 15 Jan 2025 15:40:42 +0000
Certificate not after:    Wed 14 Jan 2026 15:45:42 +0000
Subordinate resources:    AS: 269411
                          IP: 45.186.52.0/22
                          IP: 2804:642c::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:14:fe:49:6b:58:65:22:75:02:0e:31:c1:3c:96:02:bd:3c:52:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 15 15:40:42 2025 GMT
            Not After : Jan 14 15:45:42 2026 GMT
        Subject: CN=FB612EE582EA59FB5A22CA0DC75974FACBA53303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4b:39:86:c5:ad:92:87:9c:8d:00:ad:4b:b6:
                    34:ee:45:61:f3:81:5f:42:98:23:a4:5c:ff:e9:9b:
                    62:d1:51:ad:8e:4f:48:b3:b2:50:26:77:0d:2a:5c:
                    91:57:45:7a:a1:8e:6d:19:d9:28:81:8e:b6:bf:2e:
                    c2:86:8c:10:64:2e:67:4d:71:35:a0:96:78:b3:c7:
                    46:1e:6f:04:b1:2c:cf:2c:3e:64:c3:d9:2c:48:bd:
                    02:ae:b8:65:80:b9:a4:af:96:15:7c:b4:23:e6:64:
                    5f:f3:fe:66:68:3f:7b:92:17:eb:21:8a:64:f9:b0:
                    20:01:64:bb:6e:60:22:da:05:a6:5e:2a:70:b5:ed:
                    ff:72:c8:dc:fa:4d:7b:2f:04:b6:7a:f2:66:00:d3:
                    02:cb:fa:dd:75:83:2c:57:7f:76:47:a7:8a:27:8e:
                    c1:f9:4b:af:b4:38:7f:0c:d9:1e:9b:18:5e:8c:1a:
                    43:56:03:b3:8e:fd:f9:20:1a:36:b0:e2:5d:fb:0c:
                    8f:98:36:9d:7c:ab:1c:87:e4:12:ce:df:92:a2:57:
                    1a:7f:7f:3b:5a:d0:6d:e5:f9:bb:66:52:f0:e3:d1:
                    e8:f7:b6:62:59:34:94:11:b6:f2:89:19:88:6b:c3:
                    4b:85:7e:21:33:4f:d1:7a:f9:81:fe:1b:7a:45:cf:
                    46:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:61:2E:E5:82:EA:59:FB:5A:22:CA:0D:C7:59:74:FA:CB:A5:33:03
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/FB612EE582EA59FB5A22CA0DC75974FACBA53303.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.52.0/22
                IPv6:
                  2804:642c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269411

    Signature Algorithm: sha256WithRSAEncryption
         74:5d:49:d0:b6:7c:95:55:b8:b7:5c:26:16:a1:7e:dd:13:f7:
         9a:3d:82:5f:e6:33:93:de:4b:31:de:c7:75:1e:d7:68:45:d4:
         43:80:57:12:3e:fb:6d:3f:17:f5:1c:fd:a3:6f:c3:c5:70:07:
         d4:97:3f:6c:79:b4:16:6e:74:9f:8f:cc:b4:86:6b:9b:a5:c0:
         34:48:9d:82:d2:5c:67:3d:15:cf:51:fb:11:7a:ef:2a:58:e1:
         c9:07:31:6a:8f:8e:5a:a5:35:80:4f:51:32:81:ad:95:78:34:
         45:bf:3a:99:0e:dc:39:5d:97:ca:c7:50:cc:0b:2c:ba:aa:69:
         56:4f:3a:ed:d0:43:6a:dc:60:e7:d5:25:95:2e:c5:c5:13:0d:
         2b:f2:f0:d2:8b:f0:5b:25:28:27:b1:4c:a0:6c:99:8e:15:9e:
         90:09:bc:b2:a6:24:c5:25:ca:7b:51:02:29:40:09:2e:32:2e:
         f7:99:d2:e7:30:78:64:89:db:15:2d:16:b3:4f:60:05:6e:91:
         8c:11:52:25:72:a8:aa:ba:0d:80:0b:98:76:11:77:ee:d2:08:
         78:82:b2:c1:0a:05:f6:12:e9:77:86:0f:81:73:f8:e0:43:93:
         2b:66:1e:a8:e1:eb:85:44:3c:69:ae:22:e5:7d:30:2b:9d:e4:
         2a:82:4a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:46 2025 by rpki-client