Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/21C1A2C79322DAEB4CC37E39C80CAD449C5CD678.cer
File: 21C1A2C79322DAEB4CC37E39C80CAD449C5CD678.cer (raw, json)
Hash identifier: 9iCTRf/I99aL4KUFe5Rkx3rZ6m9SUamIzdgLfJlqeqA=
Subject key identifier: 21:C1:A2:C7:93:22:DA:EB:4C:C3:7E:39:C8:0C:AD:44:9C:5C:D6:78
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0F969D945B7C31CDA36A4E040E3B753194744E27
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/21C1A2C79322DAEB4CC37E39C80CAD449C5CD678.mft
caRepository: rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 08 Jul 2024 00:59:56 +0000
Certificate not after: Mon 07 Jul 2025 01:04:56 +0000
Subordinate resources: AS: 264485
IP: 131.255.144.0/22
IP: 189.91.144.0/20
IP: 2804:2050::/32
Validation: Failed, certificate revoked on Tue 24 Sep 2024 03:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:96:9d:94:5b:7c:31:cd:a3:6a:4e:04:0e:3b:75:31:94:74:4e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 8 00:59:56 2024 GMT
Not After : Jul 7 01:04:56 2025 GMT
Subject: CN=21C1A2C79322DAEB4CC37E39C80CAD449C5CD678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:04:e1:e0:dd:39:2e:b9:11:84:ae:16:e3:
b5:54:0d:7b:a8:06:0b:21:2b:33:87:cd:8d:04:05:
12:1b:b6:c8:fc:6a:09:db:8d:b0:5f:c1:eb:d9:34:
8f:14:11:92:95:d0:eb:a9:49:f1:53:1d:aa:41:61:
51:ca:fa:5b:50:33:ef:21:14:d7:6e:72:28:d4:51:
10:a0:e4:ba:f7:3b:b5:b0:9c:c4:67:87:46:fe:58:
99:d1:34:cb:e3:bc:27:4b:dc:a3:1a:fa:44:51:5d:
f6:2c:c3:d7:85:f5:4c:f5:61:1e:bd:81:72:ce:b5:
42:a3:59:35:a2:4a:13:eb:b7:7d:b8:56:a6:32:e9:
d1:82:87:4d:fa:d6:f5:26:59:6a:dd:13:84:a4:e5:
d1:30:98:28:e3:bb:99:3a:eb:a2:00:c7:02:2d:eb:
c3:c9:50:f4:c0:fd:8e:0d:a8:59:79:ab:91:08:bd:
c7:ac:4f:10:ae:17:3f:3b:f3:18:41:b1:0d:87:29:
88:af:b6:9e:e6:1b:2c:d4:bf:c5:c2:27:a2:1c:d4:
b1:3d:6d:cd:2b:7d:37:d3:eb:29:f7:24:97:e4:9f:
e4:13:4a:7c:b7:6d:c7:df:e3:4f:48:66:6f:97:c0:
ee:85:1c:9f:b1:e3:35:f2:dd:9e:bb:22:c0:da:4b:
12:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
21:C1:A2:C7:93:22:DA:EB:4C:C3:7E:39:C8:0C:AD:44:9C:5C:D6:78
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/21C1A2C79322DAEB4CC37E39C80CAD449C5CD678.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.144.0/22
189.91.144.0/20
IPv6:
2804:2050::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264485
Signature Algorithm: sha256WithRSAEncryption
9c:52:7b:d2:2e:c8:e6:c3:c1:32:1a:9c:f8:8e:b6:6b:52:41:
b8:0e:03:a6:cb:71:50:28:b2:c9:55:b4:72:03:59:67:a8:df:
dc:91:75:e8:32:c2:5f:3a:e5:19:64:5d:7f:71:0a:a5:aa:e4:
08:4b:e4:f7:ba:f1:09:0a:49:57:e5:69:2e:a8:5e:7d:28:46:
f0:e5:f0:f9:80:63:28:6b:e0:36:04:a7:4f:1e:64:98:49:54:
a5:0d:32:ec:16:2d:c4:99:01:b4:f0:33:e0:59:a1:ce:7d:e0:
65:71:66:03:49:3d:3d:56:4d:95:23:e0:78:ef:f7:fa:a4:07:
e3:06:4f:ee:e1:90:9b:53:a0:ea:13:c8:4f:d2:75:3e:7b:f3:
6d:c3:2c:ab:7b:d6:33:95:71:63:dd:7d:01:62:07:32:cd:04:
4a:72:46:56:b2:ef:f5:64:45:cb:5f:8c:8b:1d:eb:82:dd:83:
71:f9:4f:ec:ac:d0:7a:98:e9:68:ea:53:ee:7d:0b:3a:48:9e:
08:39:05:2a:41:f0:c6:17:61:e3:06:41:1a:87:ed:81:db:e6:
a6:80:98:d5:a9:37:06:1e:27:48:fd:48:de:5d:40:ff:c2:6b:
54:fe:00:a6:e3:32:6b:cc:33:a8:87:25:a1:b1:59:06:0a:ba:
b9:5d:bb:57
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUD5adlFt8Mc2jak4EDjt1MZR0TicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MDgwMDU5NTZaFw0yNTA3MDcwMTA0NTZaMDMxMTAvBgNV
BAMTKDIxQzFBMkM3OTMyMkRBRUI0Q0MzN0UzOUM4MENBRDQ0OUM1Q0Q2NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyKQTh4N05LrkRhK4W47VUDXuo
BgshKzOHzY0EBRIbtsj8agnbjbBfwevZNI8UEZKV0OupSfFTHapBYVHK+ltQM+8h
FNducijUURCg5Lr3O7WwnMRnh0b+WJnRNMvjvCdL3KMa+kRRXfYsw9eF9Uz1YR69
gXLOtUKjWTWiShPrt324VqYy6dGCh0361vUmWWrdE4Sk5dEwmCjju5k666IAxwIt
68PJUPTA/Y4NqFl5q5EIvcesTxCuFz878xhBsQ2HKYivtp7mGyzUv8XCJ6Ic1LE9
bc0rfTfT6yn3JJfkn+QTSny3bcff409IZm+XwO6FHJ+x4zXy3Z67IsDaSxIPAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQhwaLHkyLa60zD
fjnIDK1EnFzWeDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRG5q
QmdOZHN1WGVlYkhNbmUzZWJmbVhhdG9tRnQ0aGhyNjE3cG8xeFZFSjYvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ru
akJnTmRzdVhlZWJITW5lM2ViZm1YYXRvbUZ0NGhocjYxN3BvMXhWRUo2LzAvMjFD
MUEyQzc5MzIyREFFQjRDQzM3RTM5QzgwQ0FENDQ5QzVDRDY3OC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCg/+QAwQEvVuQMA0EAgACMAcDBQAoBCBQMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQJJTANBgkqhkiG9w0BAQsFAAOCAQEAnFJ70i7I
5sPBMhqc+I62a1JBuA4DpstxUCiyyVW0cgNZZ6jf3JF16DLCXzrlGWRdf3EKpark
CEvk97rxCQpJV+VpLqhefShG8OXw+YBjKGvgNgSnTx5kmElUpQ0y7BYtxJkBtPAz
4Fmhzn3gZXFmA0k9PVZNlSPgeO/3+qQH4wZP7uGQm1Og6hPIT9J1PnvzbcMsq3vW
M5VxY919AWIHMs0ESnJGVrLv9WRFy1+Mix3rgt2DcflP7KzQepjpaOpT7n0LOkie
CDkFKkHwxhdh4wZBGoftgdvmpoCY1ak3Bh4nSP1I3l1A/8JrVP4ApuMya8wzqIcl
obFZBgq6uV27Vw==
-----END CERTIFICATE-----
Generated at Tue Sep 24 04:39:27 2024 by rpki-client on console-fra.rpki-client.org