Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CB86DF132BCADA003B576CB18D2E79540ADFB4D8.cer
File: CB86DF132BCADA003B576CB18D2E79540ADFB4D8.cer (raw, json)
Hash identifier: P5RLd2bRV3UivPoOD6Kmo1kNaXo4VV+8ha+Uu6mAjTc=
Subject key identifier: CB:86:DF:13:2B:CA:DA:00:3B:57:6C:B1:8D:2E:79:54:0A:DF:B4:D8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 05BD17C9598F1D5BDE3D5DFC54486AC521686624
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/1/CB86DF132BCADA003B576CB18D2E79540ADFB4D8.mft
caRepository: rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 16 Jul 2025 15:04:00 +0000
Certificate not after: Wed 15 Jul 2026 15:09:00 +0000
Subordinate resources: AS: 28299
IP: 177.12.160.0/20
IP: 177.185.192.0/20
IP: 187.1.128.0/20
IP: 189.38.80.0/20
IP: 191.6.192.0/19
IP: 2804:10::/32
Validation: Failed, certificate revoked on Thu 17 Jul 2025 15:49:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:bd:17:c9:59:8f:1d:5b:de:3d:5d:fc:54:48:6a:c5:21:68:66:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 16 15:04:00 2025 GMT
Not After : Jul 15 15:09:00 2026 GMT
Subject: CN=CB86DF132BCADA003B576CB18D2E79540ADFB4D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:76:c2:a8:9a:bc:55:89:2e:0f:62:86:6b:f4:
0b:b3:58:76:ca:d9:ff:01:1a:9b:5a:09:c1:6f:46:
66:71:9c:df:fe:11:06:e0:54:c5:57:37:96:fa:29:
86:cc:bb:2d:2d:16:e0:6d:05:03:ff:05:82:56:6b:
77:cc:fd:5d:f5:84:53:85:ee:7f:d4:79:0f:04:54:
04:04:ae:3a:ec:83:36:6a:1d:b2:46:2e:37:11:4a:
f4:05:aa:a9:3d:15:8f:07:73:3d:d3:30:b0:b0:ba:
c9:f2:87:8b:93:97:c3:34:2a:b0:bd:2b:b7:4e:16:
62:3e:86:1a:11:10:2e:5d:4c:a1:8b:a5:c1:c1:dc:
72:ad:9d:70:d0:bd:db:75:ed:e1:97:cf:46:1e:b7:
79:a1:e1:4f:82:f8:c7:3b:bb:11:53:ee:c6:36:13:
1c:f2:bc:80:9f:a4:ef:a8:ea:52:c6:0e:5c:16:69:
88:99:b1:a2:4d:e3:f1:7b:94:73:bc:a9:0a:94:e8:
02:17:87:19:70:1c:ca:ac:80:52:b6:7b:63:c7:ec:
52:be:bc:f0:43:94:ea:82:05:c0:85:82:d0:39:2b:
86:dd:43:9b:a5:bf:26:e8:5e:fa:ce:77:3f:95:88:
21:62:7c:74:ec:f5:e3:71:54:65:f8:c8:fe:e0:5b:
bc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CB:86:DF:13:2B:CA:DA:00:3B:57:6C:B1:8D:2E:79:54:0A:DF:B4:D8
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/1/CB86DF132BCADA003B576CB18D2E79540ADFB4D8.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.12.160.0/20
177.185.192.0/20
187.1.128.0/20
189.38.80.0/20
191.6.192.0/19
IPv6:
2804:10::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28299
Signature Algorithm: sha256WithRSAEncryption
5f:43:23:91:a9:42:e3:bf:4a:ba:be:d6:5e:41:66:77:63:a8:
a4:64:03:94:ce:03:4e:0a:3b:73:ca:32:0e:22:ab:a0:94:71:
7c:5e:2d:45:0e:26:95:d0:c2:79:0d:76:ff:f3:d2:81:c3:8b:
9f:18:87:a0:56:c8:74:c1:91:1f:49:9d:a8:29:f4:6e:e4:7c:
3e:b5:a0:cb:59:ae:71:c9:6c:08:32:b1:3a:40:6e:cf:67:07:
46:90:e9:b1:14:6a:4e:18:82:1b:25:4a:6c:32:93:ee:26:28:
d1:a8:0c:a1:67:02:90:91:0c:9a:85:68:d1:84:45:85:b3:2e:
dd:83:41:82:8b:55:44:31:ad:9d:7c:df:15:45:3d:aa:c5:ce:
0f:35:7d:36:d4:e6:b4:fd:34:bf:ac:f8:15:9b:d2:0b:aa:ed:
a0:43:a3:4c:e4:34:25:97:39:24:52:46:e8:ea:91:2a:4f:7a:
1f:6e:a6:26:e8:8e:fb:d4:35:61:d5:4e:e8:16:74:4b:08:6d:
b9:bd:dd:8b:30:6c:2b:e2:4b:d9:31:4d:48:a1:fe:fa:50:50:
75:12:f0:53:9a:27:a2:3a:63:69:7e:b2:82:f8:3c:10:6d:c1:
8f:71:30:b0:3a:5d:d4:b8:39:da:7d:c1:2d:32:c5:f2:28:70:
d0:68:e4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:24:54 2025 by rpki-client