Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2424063D980D1824DE6EFE6E89927FC7550A458F.cer
File: 2424063D980D1824DE6EFE6E89927FC7550A458F.cer (raw, json)
Hash identifier: wj4rscqODvN8kT70BwV6SgdNdHEq6OVOCPGpwBZ9wDE=
Subject key identifier: 24:24:06:3D:98:0D:18:24:DE:6E:FE:6E:89:92:7F:C7:55:0A:45:8F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0B69098068AC8D2BDA49392F687ADC193C59B45B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/2424063D980D1824DE6EFE6E89927FC7550A458F.mft
caRepository: rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 20 Dec 2024 13:52:55 +0000
Certificate not after: Fri 19 Dec 2025 13:57:55 +0000
Subordinate resources: AS: 262669
IP: 138.94.224.0/22
IP: 143.202.148.0/22
IP: 170.78.68.0/22
IP: 177.22.224.0/20
IP: 187.73.240.0/20
IP: 189.39.192.0/20
IP: 2804:13d8::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:69:09:80:68:ac:8d:2b:da:49:39:2f:68:7a:dc:19:3c:59:b4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 20 13:52:55 2024 GMT
Not After : Dec 19 13:57:55 2025 GMT
Subject: CN=2424063D980D1824DE6EFE6E89927FC7550A458F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:5f:2b:68:1f:31:95:81:35:d9:a6:dc:4f:58:
ed:40:b2:9e:cd:b5:10:cb:e5:7b:58:7f:7b:6c:87:
2b:c8:c2:d9:7f:3c:e8:10:98:3c:40:b1:62:ba:59:
c2:4c:ac:16:ad:4e:4d:91:ed:b9:67:c4:87:00:fd:
6d:43:da:0e:ca:84:90:84:df:e4:62:0a:bb:e3:df:
5b:5f:77:76:2f:7a:9e:b2:85:35:74:43:aa:f8:9b:
27:e3:94:71:44:78:09:eb:5b:4e:b7:f0:88:08:54:
ef:cb:0e:86:02:30:69:a5:66:ad:5a:d0:49:46:40:
e6:5c:a2:f3:a8:2d:28:d0:d8:a3:e4:32:ec:45:3e:
56:ef:5d:b8:de:25:d8:95:80:19:74:79:e7:05:7b:
4f:8e:da:14:81:64:ab:3d:19:4e:3d:f1:19:00:71:
4e:ea:4b:30:fc:17:f2:28:40:bf:b0:76:ea:21:dc:
73:57:29:dd:30:45:bc:bd:cd:70:a9:42:07:6b:f7:
85:ec:c8:6d:a4:aa:b5:32:45:9f:7b:ef:c8:33:3a:
31:cd:f2:70:65:33:cf:9a:e1:b1:cc:48:b2:22:af:
5b:ff:38:20:e0:96:67:6e:7d:3f:a2:29:07:c1:23:
2e:3e:70:a2:69:a0:d3:fe:cf:6b:9f:46:a5:21:d6:
97:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
24:24:06:3D:98:0D:18:24:DE:6E:FE:6E:89:92:7F:C7:55:0A:45:8F
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/2424063D980D1824DE6EFE6E89927FC7550A458F.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.94.224.0/22
143.202.148.0/22
170.78.68.0/22
177.22.224.0/20
187.73.240.0/20
189.39.192.0/20
IPv6:
2804:13d8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262669
Signature Algorithm: sha256WithRSAEncryption
23:1c:71:28:70:4e:66:f8:7c:8d:f1:a3:3f:04:64:91:76:d8:
24:0a:d8:e4:63:32:6c:cf:ad:2a:fe:8f:0a:e7:40:00:f8:4c:
06:67:f6:e8:e1:69:a9:b2:c0:2c:6f:27:4c:fb:8a:fa:f0:aa:
dd:59:fe:b1:67:50:65:f1:2b:0d:d7:35:07:39:89:a7:c6:f7:
09:59:07:72:10:00:3c:04:f2:4f:27:d1:27:81:23:17:61:2a:
5f:fb:ad:81:99:a4:55:2f:c0:88:27:84:a8:58:c1:19:99:e6:
09:71:cb:5a:85:27:2b:d0:18:db:25:a8:e3:ba:59:af:aa:d4:
1d:3e:a1:90:1a:a2:19:6e:40:47:ae:4e:f1:07:f8:0f:fd:22:
24:fa:5c:44:b1:15:19:6a:87:00:40:21:3d:a7:6f:6f:39:2a:
b1:df:29:64:49:8a:38:7e:b3:95:9f:a6:e6:b3:2a:38:bd:e0:
31:3e:5f:68:c1:5d:fb:10:e7:03:72:da:82:eb:9d:f6:2d:5f:
a8:f8:4f:e8:17:9e:5b:c7:44:c8:b3:bf:87:8d:fe:a0:1f:21:
f0:20:d9:22:d6:8c:43:cb:0d:f5:e6:62:d3:bc:39:c0:15:9e:
62:38:40:71:96:4c:8d:e3:bf:92:1a:43:97:f4:2a:a0:96:71:
df:ce:dc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:53 2025 by rpki-client