Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F1C03889E6A469A5B1527D54A1EA3C1E35D0C3F.cer
File: 2F1C03889E6A469A5B1527D54A1EA3C1E35D0C3F.cer (raw, json)
Hash identifier: aPF2IXz5GhgAYYhVrL1ByuGzUkvZUDxOMMdO/9OFAeE=
Subject key identifier: 2F:1C:03:88:9E:6A:46:9A:5B:15:27:D5:4A:1E:A3:C1:E3:5D:0C:3F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5D82D82FCC9E5529CF066B602457E850F77C88B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/2F1C03889E6A469A5B1527D54A1EA3C1E35D0C3F.mft
caRepository: rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 09 Jul 2025 11:48:22 +0000
Certificate not after: Wed 08 Jul 2026 11:53:22 +0000
Subordinate resources: AS: 263252
IP: 168.197.228.0/22
IP: 189.201.232.0/21
IP: 2804:17cc::/32
Validation: Failed, certificate revoked on Tue 15 Jul 2025 14:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:82:d8:2f:cc:9e:55:29:cf:06:6b:60:24:57:e8:50:f7:7c:88:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 9 11:48:22 2025 GMT
Not After : Jul 8 11:53:22 2026 GMT
Subject: CN=2F1C03889E6A469A5B1527D54A1EA3C1E35D0C3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:bc:4e:fd:96:c6:fc:2f:f9:b6:b8:84:fd:
7d:7f:f6:68:37:39:6b:85:b8:82:fb:6c:f4:7b:80:
85:a4:66:9a:98:02:80:db:73:ee:57:74:47:5b:8d:
4c:b5:15:75:d9:da:13:77:2d:43:87:94:9c:27:4f:
22:90:f1:53:c9:9f:10:46:54:da:12:49:3d:67:10:
ea:1b:ba:5c:2c:ed:71:e3:d9:e0:60:09:3b:10:7c:
5f:07:89:01:84:33:d2:d1:31:74:01:69:f3:59:ea:
45:ae:3b:94:f6:26:bf:e2:1f:9e:1f:fd:d5:07:b5:
db:da:d0:52:ed:92:eb:0a:20:c5:50:18:4a:65:25:
29:17:df:a0:a8:4d:33:54:47:67:c1:4a:5a:70:ff:
bf:c3:5f:3d:48:c6:cf:4d:21:1d:3d:fe:00:70:e8:
e3:64:9f:59:a4:a5:9e:8a:97:72:b9:6b:c8:16:a9:
f9:04:e2:8d:a8:d4:11:c7:b2:c9:2a:11:eb:26:21:
e1:1a:a5:bb:06:ba:a0:a4:19:ed:99:22:54:19:69:
19:86:03:e3:0d:9f:f5:49:3a:6a:06:21:44:52:06:
68:41:09:e4:83:03:58:5c:d6:22:03:a9:74:c0:5d:
19:ea:0f:81:fb:b9:ba:bc:ac:f0:f0:50:31:78:99:
b7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2F:1C:03:88:9E:6A:46:9A:5B:15:27:D5:4A:1E:A3:C1:E3:5D:0C:3F
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/2F1C03889E6A469A5B1527D54A1EA3C1E35D0C3F.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.228.0/22
189.201.232.0/21
IPv6:
2804:17cc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263252
Signature Algorithm: sha256WithRSAEncryption
87:3a:3d:93:f6:d0:a3:8c:a3:64:f2:b2:12:80:b2:97:87:e9:
2c:98:ba:e9:d3:10:ee:b5:a3:50:ce:28:6a:d9:49:78:64:58:
26:71:40:b1:bc:0b:ef:fe:bf:1b:0a:16:5a:aa:16:4c:af:f7:
ef:f6:d1:bb:6b:0a:8f:23:7f:c9:f7:03:2b:80:98:de:8b:f0:
93:32:f6:11:fc:09:a9:e3:4b:78:05:51:66:70:a4:fb:85:c5:
34:c9:b5:0f:ec:00:b0:75:3a:1f:49:84:92:89:87:77:a0:94:
78:9a:d6:c9:48:73:7a:0c:06:36:76:36:cb:92:df:a3:37:24:
54:4a:8f:0d:43:a0:62:71:7c:cc:6f:fa:31:7a:15:22:7e:af:
d2:a9:88:ce:15:83:08:6a:61:5a:d8:0b:37:52:29:a5:d7:d9:
80:b0:96:f5:84:59:32:28:71:ef:f0:0f:8b:1b:43:47:c4:56:
d6:af:d6:10:69:36:53:d4:2f:5d:0c:af:72:b6:02:57:43:44:
ae:d3:00:52:2f:dd:f6:05:13:d3:3b:85:59:a3:fc:d3:0c:8c:
dd:ff:89:56:c0:f6:64:27:ee:e9:94:31:32:cb:85:05:a9:ab:
7e:b8:a4:12:31:48:18:c1:93:42:eb:90:ec:63:cf:bb:d3:ac:
1a:51:38:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:55:52 2025 by rpki-client