Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.cer
File: 1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.cer (raw, json)
Hash identifier: r238CCwjOTFekCL/xqgii1V8ljau6dkcU9qVyjnMZ5E=
Subject key identifier: 1F:32:93:CF:E3:82:AB:CE:81:F3:DC:5E:9B:FE:E1:8E:F0:B4:00:7E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2A01783D06F051E7E62D23C53D0508BACEFC331C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.mft
caRepository: rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 29 Jan 2025 13:11:42 +0000
Certificate not after: Wed 28 Jan 2026 13:16:42 +0000
Subordinate resources: AS: 61632
IP: 131.100.124.0/22
IP: 138.121.236.0/22
IP: 168.232.184.0/22
IP: 2804:1bfc::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:01:78:3d:06:f0:51:e7:e6:2d:23:c5:3d:05:08:ba:ce:fc:33:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 29 13:11:42 2025 GMT
Not After : Jan 28 13:16:42 2026 GMT
Subject: CN=1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9d:f0:63:1d:90:5c:e5:26:35:fc:c4:a8:25:
55:76:99:2c:40:f1:fd:ff:32:76:3f:18:6b:d7:ab:
b8:18:7e:8b:58:27:ca:8b:2c:bf:d8:3c:d6:c6:47:
72:28:0c:47:f4:2c:33:5f:e1:a4:0d:4e:f6:04:38:
2d:98:9f:46:9d:55:a9:42:79:7f:62:f2:c9:48:bb:
68:c8:92:e7:52:30:15:87:b0:cc:86:e4:58:5f:53:
0c:a5:9b:de:d7:6b:8a:a7:9b:03:b2:94:e3:0d:bf:
b0:97:97:ff:d3:c1:93:8a:84:e4:68:cb:d4:7c:39:
e2:02:c8:37:bf:11:e0:35:62:8a:1f:70:7c:9e:e4:
37:85:33:6f:c3:84:03:e6:95:1a:73:bb:ab:00:96:
f7:86:0e:98:f4:29:4f:c0:ac:ae:be:91:e8:2f:a1:
5a:e1:67:cf:ac:26:65:ae:91:dd:28:fe:5d:36:5d:
b2:39:de:76:23:32:46:ec:85:ed:09:93:8f:61:a7:
01:c9:83:2b:af:07:15:99:5a:d9:65:47:9f:33:9f:
cd:15:19:4d:b0:8e:68:17:04:fa:45:0f:e4:5c:98:
68:c5:5c:ff:37:8e:93:4d:4b:f2:d3:22:b5:6e:68:
e5:7a:b0:0b:10:c6:48:38:87:ea:7d:84:19:56:52:
b5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1F:32:93:CF:E3:82:AB:CE:81:F3:DC:5E:9B:FE:E1:8E:F0:B4:00:7E
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.124.0/22
138.121.236.0/22
168.232.184.0/22
IPv6:
2804:1bfc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61632
Signature Algorithm: sha256WithRSAEncryption
bf:af:33:1b:f8:6d:c4:20:90:ce:87:25:cc:61:2b:9e:50:62:
f0:a5:f2:7c:69:2b:7f:11:ab:8e:96:4a:dc:11:03:97:56:53:
48:70:2c:bb:90:08:dd:ab:6c:ba:0d:ae:fc:48:5f:bb:7a:92:
50:bd:5f:ac:d0:a8:41:e5:9b:39:bd:c5:aa:03:e0:ea:d1:a0:
04:4a:5a:5c:ae:89:84:79:de:de:f3:6e:6b:37:c7:8e:2f:ee:
ba:aa:c6:79:62:22:ff:71:c6:b6:97:7a:7d:03:6a:ff:a6:9c:
55:cc:c0:44:40:8d:6b:32:38:b0:61:a8:47:54:74:99:6f:dc:
f3:1a:12:f6:0c:31:79:00:2c:17:d6:7a:7a:a7:63:61:b2:6a:
84:ad:54:b8:08:ab:2b:39:bb:10:d9:fc:58:20:b6:51:77:0b:
c1:aa:ed:7f:a1:fb:fb:0f:24:7c:69:4a:1b:33:41:33:d4:26:
07:32:dd:3b:6d:58:06:fb:a8:4a:2c:c2:c3:45:33:ab:f8:66:
6a:e4:73:3a:47:a6:62:b5:4d:bb:29:32:aa:85:b4:a3:8f:04:
a5:86:9e:35:bf:be:25:ef:38:4b:9b:7d:0b:10:2c:e8:17:e0:
c3:44:07:94:2e:32:42:5d:60:0f:b1:6e:73:9a:44:d2:4a:a0:
9f:ea:59:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:19 2025 by rpki-client