
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.cer
File: AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.cer (raw, json)
Hash identifier: OxKLWEgqf7K6WPUnwe1d5fKS8Kne0BbFsUZe5J2y6q8=
Subject key identifier: AF:4C:19:7F:36:65:20:5A:2C:9E:DF:8E:68:0E:8A:E5:75:AF:97:D9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 6E5E6FA20AE62DE0FA852A2A7472A3ECF9DD085C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.mft
caRepository: rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 30 Jun 2025 19:36:09 +0000
Certificate not after: Mon 29 Jun 2026 19:41:09 +0000
Subordinate resources: AS: 267188
IP: 45.231.28.0/22
IP: 2804:4984::/32
Validation: Failed, certificate revoked on Mon 21 Jul 2025 16:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:5e:6f:a2:0a:e6:2d:e0:fa:85:2a:2a:74:72:a3:ec:f9:dd:08:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jun 30 19:36:09 2025 GMT
Not After : Jun 29 19:41:09 2026 GMT
Subject: CN=AF4C197F3665205A2C9EDF8E680E8AE575AF97D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b0:da:70:dd:d5:b7:21:d6:9d:b4:a6:aa:65:
84:a8:ec:58:2f:ef:1e:ba:59:b8:0d:e7:f1:f9:ac:
d9:97:08:12:2b:50:9b:26:bf:d1:c0:06:cc:7f:db:
80:95:6e:fc:1e:7b:fb:34:87:46:76:7e:9f:f9:f8:
b7:80:2b:4a:e0:93:7b:5d:da:54:85:34:39:88:c8:
f3:cf:17:34:40:01:f5:bc:fc:df:3e:dc:1b:c7:da:
28:3b:c5:84:5d:e2:8e:eb:ce:59:5b:a3:0a:78:96:
ec:b6:f3:0b:c1:a5:a2:8a:27:5d:b5:52:f7:d1:d6:
fc:8c:6d:92:61:64:43:a5:6b:04:e1:9a:c3:a4:07:
16:38:0c:68:4e:ad:6f:14:20:fa:aa:4b:3b:12:b0:
d5:c1:e2:ed:9a:d0:48:f0:42:d8:da:5a:59:49:3d:
93:f0:4a:d2:ec:1d:c8:e4:a0:d9:c9:c1:95:42:f6:
bd:c0:d0:ad:76:66:5f:88:9d:74:9d:59:91:56:17:
73:a3:44:fd:d9:dd:5a:8e:98:d6:f2:73:e7:5f:79:
08:9d:bd:1e:74:2e:56:51:f5:79:83:b4:6c:43:64:
18:39:8f:9c:74:22:b1:53:4b:8c:32:15:d8:61:96:
49:89:61:6c:b2:7d:fc:e1:83:b8:cf:40:3c:47:6c:
4a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AF:4C:19:7F:36:65:20:5A:2C:9E:DF:8E:68:0E:8A:E5:75:AF:97:D9
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.28.0/22
IPv6:
2804:4984::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267188
Signature Algorithm: sha256WithRSAEncryption
6d:e1:21:40:4c:ab:5b:0d:b3:87:de:b3:cd:9d:49:e8:bf:35:
49:45:f4:e1:8a:7a:d3:ac:3b:7a:e1:48:7f:07:25:0a:76:ee:
10:eb:b0:de:67:c3:27:2d:6e:4d:8b:a1:83:48:2b:c0:52:c0:
22:f1:e8:4e:02:b8:7f:9a:dd:ac:b2:ea:28:4c:e4:7c:ea:59:
7d:4b:61:d2:bf:95:e1:74:35:57:63:13:4b:e3:da:54:47:65:
f2:bd:9b:72:2e:01:8f:1d:eb:19:7b:84:04:ee:1f:24:7d:e0:
0d:ce:3c:e4:0e:dc:82:c5:4d:84:02:af:5e:fe:c7:5c:68:ae:
f0:3b:e1:63:41:38:82:83:54:cf:4b:d3:79:54:7e:50:7d:cd:
2b:43:1b:37:04:8e:97:89:18:02:0a:70:1e:6a:77:b4:6b:c5:
b9:48:b4:fa:22:cc:56:e9:23:60:1b:fb:a5:89:ce:4c:8c:d1:
c1:f9:79:a6:d2:5c:6e:39:79:24:bb:f8:50:24:81:9f:e5:4f:
b1:62:95:b4:d9:53:49:4a:25:06:ca:e5:f7:ea:8f:bf:8b:4b:
b8:77:62:f1:2e:2b:21:2a:63:f9:a3:c8:86:fe:56:31:08:35:
ec:ee:13:22:f0:b2:1b:0d:9e:c1:2a:da:2e:d2:91:40:32:7e:
95:69:5b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:58:28 2025 by rpki-client