Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FD8C18E1D2945514AA3C8ACB1428F1EBBF805633.cer
File:                     FD8C18E1D2945514AA3C8ACB1428F1EBBF805633.cer (raw, json)
Hash identifier:          kejouHZpBzZ7huHnxrhz0Y228b+X0/ZgLpBljCB8Y+g=
Subject key identifier:   FD:8C:18:E1:D2:94:55:14:AA:3C:8A:CB:14:28:F1:EB:BF:80:56:33
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       248F85B170EF9D8474657C1DDFE343184678C479
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/FD8C18E1D2945514AA3C8ACB1428F1EBBF805633.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 Jan 2025 14:57:21 +0000
Certificate not after:    Fri 09 Jan 2026 15:02:21 +0000
Subordinate resources:    AS: 270739
                          IP: 179.109.104.0/22
                          IP: 2804:70a4::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:8f:85:b1:70:ef:9d:84:74:65:7c:1d:df:e3:43:18:46:78:c4:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 10 14:57:21 2025 GMT
            Not After : Jan  9 15:02:21 2026 GMT
        Subject: CN=FD8C18E1D2945514AA3C8ACB1428F1EBBF805633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:52:59:f0:8f:73:c0:5c:e4:59:c3:82:d9:d6:
                    e4:e7:f5:77:c5:94:0e:1f:4c:a4:36:f0:38:65:62:
                    77:1e:ef:0a:5f:0e:5d:31:bb:3a:2e:e0:ec:37:45:
                    df:51:93:41:9f:55:1f:ce:52:82:d4:65:ff:08:4a:
                    2f:65:e7:46:e9:9a:9b:da:ce:b3:7e:97:ce:4a:e7:
                    ca:77:a5:00:ea:9d:cf:74:fb:a3:dc:dc:20:39:ef:
                    36:75:29:94:ca:3e:f5:1d:db:d6:5d:fe:1a:bb:eb:
                    3f:73:d2:3c:1a:c3:67:c4:e1:6b:e7:97:50:ee:79:
                    2d:23:c5:80:38:0b:11:dc:ca:5e:f2:77:7b:c4:70:
                    79:02:77:72:ca:39:f3:bb:88:ec:4f:e9:31:30:9c:
                    b7:5e:d4:b1:e9:56:d5:8f:dc:c9:83:16:8a:42:1d:
                    ac:82:6b:f5:0c:4e:1b:1f:55:3a:8e:f3:f6:c1:c9:
                    bb:f4:25:f0:ed:f9:b8:a0:40:06:cb:ed:53:05:01:
                    c3:67:f1:09:1e:dc:83:6c:23:d8:ed:ec:29:77:a6:
                    e4:73:a5:e2:58:94:11:fd:9d:f5:59:94:d3:73:37:
                    b4:f7:5d:73:67:5b:fb:24:67:c4:ac:60:f0:ce:11:
                    34:94:94:d2:23:e9:07:47:29:1e:d5:9d:37:8e:11:
                    f7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:8C:18:E1:D2:94:55:14:AA:3C:8A:CB:14:28:F1:EB:BF:80:56:33
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/FD8C18E1D2945514AA3C8ACB1428F1EBBF805633.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.104.0/22
                IPv6:
                  2804:70a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270739

    Signature Algorithm: sha256WithRSAEncryption
         20:ed:44:ee:bd:ef:66:c1:20:51:8c:f2:68:2e:98:ad:e1:cc:
         74:78:92:2d:da:96:9d:4f:76:60:3d:60:af:60:c2:3e:e6:23:
         36:5f:5b:ef:f0:df:7c:01:fd:dc:0e:a2:45:76:6f:d2:d4:5a:
         f5:77:60:5a:93:58:b6:89:14:31:ce:3c:b2:c6:6c:f8:b6:48:
         0e:50:89:0f:56:e7:e1:f5:f3:6b:ae:eb:81:3a:2f:7f:d4:c4:
         08:93:97:72:34:63:89:02:f2:35:88:99:65:fe:50:8f:45:2e:
         15:b8:44:e6:d1:dd:86:31:12:cf:36:19:c5:a4:4e:bb:2c:50:
         52:2d:83:53:65:8b:86:a2:64:c0:fa:f5:4f:06:17:56:08:28:
         ab:25:fd:9a:2d:01:3a:b6:a3:fa:c3:a9:02:de:c9:df:61:e8:
         48:37:5f:a3:20:5a:e4:74:5e:9f:b5:13:51:70:d1:5b:e9:ea:
         c1:92:e4:58:82:1c:a3:79:fb:fd:95:cc:4b:b8:39:28:82:65:
         f4:da:fc:ec:3d:e4:ca:44:44:77:3e:d1:aa:73:7b:50:d1:bb:
         7b:fb:14:ef:67:91:e8:e2:a6:6a:48:c2:10:1f:38:f8:ae:28:
         d2:02:db:90:5a:18:0b:6c:21:f0:af:26:d0:dc:92:6b:d0:fa:
         71:ce:df:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:34:15 2025 by rpki-client