Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/67BC064D775FEE9A1164DB4278EB591FF8C3F2D9.cer
File:                     67BC064D775FEE9A1164DB4278EB591FF8C3F2D9.cer (raw, json)
Hash identifier:          oILHgBUaPNU407D/+dQYp6JQOj1wMLnYP00jQGKwZrQ=
Subject key identifier:   67:BC:06:4D:77:5F:EE:9A:11:64:DB:42:78:EB:59:1F:F8:C3:F2:D9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       372BB074421AB1CB57F976E3246EFA1A0F71F730
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/67BC064D775FEE9A1164DB4278EB591FF8C3F2D9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Apr 2024 10:43:14 +0000
Certificate not after:    Fri 18 Apr 2025 10:48:14 +0000
Subordinate resources:    AS: 268556
                          IP: 45.163.172.0/22
                          IP: 2804:5300::/32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:2b:b0:74:42:1a:b1:cb:57:f9:76:e3:24:6e:fa:1a:0f:71:f7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 19 10:43:14 2024 GMT
            Not After : Apr 18 10:48:14 2025 GMT
        Subject: CN=67BC064D775FEE9A1164DB4278EB591FF8C3F2D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f0:df:1a:f6:1e:80:9d:a2:aa:71:7c:eb:34:
                    70:9a:cb:e3:7a:e9:33:bd:88:09:7c:35:a4:ef:e8:
                    a2:24:6c:52:34:dd:40:8b:23:35:10:92:ab:cb:ac:
                    6d:98:fa:03:68:c7:3f:bc:0b:59:86:b9:2d:ba:05:
                    d3:8d:a1:f6:aa:40:43:db:40:d5:05:f6:cf:d9:4e:
                    36:0b:2d:c4:b1:9a:f7:69:e3:a5:e2:b4:b4:33:94:
                    f1:52:59:88:43:0f:b8:8e:50:88:08:46:43:a2:b7:
                    d7:0b:50:bf:f6:54:25:f2:88:b9:1e:48:64:0a:9e:
                    04:dc:12:1c:d4:e6:5d:84:69:ba:3f:ac:ae:a7:39:
                    4e:2d:00:3c:31:57:92:55:49:4b:aa:f1:b2:65:ae:
                    26:1e:68:f5:5c:4b:29:38:cb:00:e6:52:7e:0b:3a:
                    ac:f6:ea:a8:8a:7b:5f:88:bd:56:81:ca:85:6a:09:
                    35:aa:e8:01:af:98:4d:c5:67:c0:ab:cb:02:89:94:
                    b7:5d:29:52:bd:91:23:1e:fd:4e:67:a8:8f:86:30:
                    6f:5c:12:dc:ff:59:56:4d:34:80:88:cd:ab:7e:33:
                    61:1b:9e:63:fe:1e:94:5e:3f:cf:2e:4c:48:72:c7:
                    30:6e:09:55:03:33:e0:7a:20:79:73:e9:bd:2d:ee:
                    54:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                67:BC:06:4D:77:5F:EE:9A:11:64:DB:42:78:EB:59:1F:F8:C3:F2:D9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/67BC064D775FEE9A1164DB4278EB591FF8C3F2D9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.172.0/22
                IPv6:
                  2804:5300::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268556

    Signature Algorithm: sha256WithRSAEncryption
         17:61:dd:3c:c7:14:75:ef:31:01:a3:6b:fc:44:2e:24:31:a3:
         70:d5:df:92:7a:68:01:d8:b9:4a:fa:2a:d4:18:f6:07:b6:18:
         5a:64:63:ae:f4:df:31:fd:76:53:da:88:f6:f5:a0:ad:64:c1:
         e7:de:24:ea:b8:51:1d:f3:41:06:a6:4c:f6:5f:34:cb:2b:fc:
         34:c1:73:43:cf:65:0a:b9:76:3a:08:7b:a4:2e:ec:57:65:2d:
         1f:2e:0d:d0:43:5b:d9:99:69:fd:c0:c1:ee:61:83:0a:69:9c:
         83:2c:28:0e:14:38:63:e3:bb:49:e5:1e:e5:bf:5b:7a:b4:70:
         ce:82:7b:72:93:98:81:98:15:0e:59:80:a0:65:a2:5a:1c:e5:
         bb:53:39:ea:7b:c3:53:64:f0:6e:a1:44:f8:e1:b2:3f:7f:d2:
         98:38:2c:24:14:01:cb:eb:a5:49:75:8e:b6:4d:16:cf:9a:9a:
         96:a1:1c:bc:30:ee:af:6f:ad:a9:21:b2:16:78:65:83:a4:0f:
         f0:fc:88:d7:04:bc:f9:32:1c:65:33:ab:1b:4a:b4:5d:bd:36:
         5d:cc:be:d6:b6:2b:bb:6c:e7:0f:cb:cd:30:76:f8:c2:93:fc:
         26:17:41:07:e6:80:cd:cf:0f:04:3b:58:b9:d7:28:4e:49:bd:
         9a:98:18:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:06:48 2025 by rpki-client