Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0D2F1AC4206F6E2CC7926EDCA9F18D2E87516134.cer
File: 0D2F1AC4206F6E2CC7926EDCA9F18D2E87516134.cer (raw, json)
Hash identifier: xvbD7d4c6ny1xZLMbaTEgERxVa4PE7l0CctU91wsPlE=
Subject key identifier: 0D:2F:1A:C4:20:6F:6E:2C:C7:92:6E:DC:A9:F1:8D:2E:87:51:61:34
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5918AD9C4A70EA95B3FE1492D157DF54252F3B15
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/1/0D2F1AC4206F6E2CC7926EDCA9F18D2E87516134.mft
caRepository: rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:25:38 +0000
Certificate not after: Wed 02 Apr 2025 18:30:38 +0000
Subordinate resources: AS: 28576
IP: 187.73.128.0/20
IP: 189.38.16.0/20
IP: 200.220.144.0/20
IP: 2804:3c::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:18:ad:9c:4a:70:ea:95:b3:fe:14:92:d1:57:df:54:25:2f:3b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:25:38 2024 GMT
Not After : Apr 2 18:30:38 2025 GMT
Subject: CN=0D2F1AC4206F6E2CC7926EDCA9F18D2E87516134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:82:bd:75:ed:63:54:bd:82:aa:00:f1:60:65:
ce:da:70:28:58:d5:45:fa:2e:f3:fb:2e:7e:3f:b7:
08:a7:7f:ac:c3:7a:4f:fd:25:51:1a:80:f4:7e:d5:
14:ec:a7:72:c1:e7:7f:5e:bf:4e:f7:01:e4:0f:cf:
12:f0:2a:89:e2:c0:64:a8:8b:a6:28:b7:f4:83:99:
6b:ed:68:0c:b0:09:aa:4b:c2:e1:ef:73:df:a5:86:
0b:03:58:db:69:5a:61:67:f2:cc:32:24:15:d6:7c:
dc:b6:26:24:95:1b:8b:94:ab:4a:5a:7c:32:96:7e:
99:7d:1a:18:96:9a:7d:d2:58:5e:70:d0:4f:10:2e:
bb:4b:29:af:50:6b:30:50:53:45:35:31:27:49:1b:
6f:4b:ec:49:44:87:b1:eb:bb:a3:04:f1:f7:56:92:
88:81:c7:b0:bf:3e:a5:d6:94:55:61:f3:5f:6d:b0:
4b:af:8c:f6:ba:cd:59:9d:99:79:25:d3:d2:38:40:
8d:22:dc:6b:ea:37:74:32:2d:0b:2f:1b:73:52:0f:
5f:f1:f9:99:fb:5a:80:c7:fa:74:2d:67:84:e5:55:
0d:1e:4a:ce:6e:84:7e:9f:f3:77:12:b1:ff:9e:26:
da:92:fd:dd:31:98:0a:2d:45:d9:01:90:f4:c7:0e:
96:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0D:2F:1A:C4:20:6F:6E:2C:C7:92:6E:DC:A9:F1:8D:2E:87:51:61:34
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/1/0D2F1AC4206F6E2CC7926EDCA9F18D2E87516134.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.73.128.0/20
189.38.16.0/20
200.220.144.0/20
IPv6:
2804:3c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28576
Signature Algorithm: sha256WithRSAEncryption
38:d8:e1:ee:15:66:c4:02:be:09:d1:c8:cc:0e:30:77:bd:7e:
c2:40:32:c1:c0:2f:5b:c7:f6:89:9c:5f:0f:9c:99:4a:8c:47:
77:97:b8:a9:78:39:56:e8:6a:81:f2:22:0a:26:c6:4c:fe:9d:
fb:5d:e4:08:9d:4d:b5:42:92:3d:fa:e5:9f:8c:cc:ea:80:41:
ce:8f:b9:87:99:0a:cc:3b:8f:6d:d2:03:be:d2:cc:cc:bc:b9:
1e:7f:86:c7:f8:bd:a1:b3:8c:ed:e4:2c:35:d0:6f:aa:77:cc:
22:9a:a1:4c:29:ac:3a:51:5b:b9:94:79:f1:11:f5:d8:5f:4b:
19:f0:b5:54:59:5b:c8:dd:0f:f2:95:4b:b0:46:e2:9b:9d:a8:
81:d8:3f:20:1c:ad:2d:6a:24:c4:c1:be:dc:7d:74:18:52:7c:
78:81:fb:64:ba:cf:b5:c8:28:1d:f4:c3:14:9b:72:c3:8d:d4:
1b:ad:6e:c8:8c:3b:84:ab:e1:a8:56:7f:af:30:43:a6:10:ad:
11:f1:92:54:88:37:41:9b:4a:22:cd:43:81:03:f6:46:9a:0c:
33:7f:60:81:28:d2:65:fb:07:5a:ea:f8:a8:cc:29:a1:e1:ac:
47:9d:d3:2f:8a:04:43:72:6c:f5:c4:70:19:a1:05:92:b9:5c:
fa:6f:d4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:31 2025 by rpki-client