Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/29D189B9A7639658160A27FD17B6D238AB9BFD4A.cer
File: 29D189B9A7639658160A27FD17B6D238AB9BFD4A.cer (raw, json)
Hash identifier: 08LM5lS/FzMlgIM5B7xtu7FaUs88nxvNsix+XjOPj/A=
Subject key identifier: 29:D1:89:B9:A7:63:96:58:16:0A:27:FD:17:B6:D2:38:AB:9B:FD:4A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1240614D3520CFF021839B752CFB59867D33D420
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/1/29D189B9A7639658160A27FD17B6D238AB9BFD4A.mft
caRepository: rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/1
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:26:26 +0000
Certificate not after: Wed 02 Apr 2025 18:31:26 +0000
Subordinate resources: AS: 267290
IP: 45.233.28.0/22
IP: 2804:4b34::/32
Validation: Failed, certificate revoked on Tue 28 May 2024 15:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:40:61:4d:35:20:cf:f0:21:83:9b:75:2c:fb:59:86:7d:33:d4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:26:26 2024 GMT
Not After : Apr 2 18:31:26 2025 GMT
Subject: CN=29D189B9A7639658160A27FD17B6D238AB9BFD4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8b:54:b9:35:5d:f0:01:06:e9:54:2d:90:c4:
57:45:5a:86:a7:6c:90:33:07:d0:8f:86:ad:d6:e9:
8a:e6:ca:5e:27:e7:1e:98:51:fc:e4:9b:e1:80:f8:
12:2e:e2:c8:f7:2a:b0:8b:d9:2a:3f:4e:9a:d7:a7:
b2:21:52:ae:fb:05:0c:42:ad:4e:23:8b:12:9e:96:
1f:cb:3d:02:2f:ec:a2:73:e2:b9:2b:02:45:d2:01:
4a:27:3c:3f:ee:fe:ee:3b:4a:ea:19:1e:08:ec:c9:
1b:d9:09:02:c8:dd:9e:56:88:49:b3:34:6c:71:31:
ef:59:b7:e0:28:35:c8:7b:88:0e:df:3c:cc:c0:9e:
77:c2:ac:ee:43:e3:56:77:dd:40:99:75:da:ba:74:
49:5c:9a:ab:e4:a2:a4:4b:94:0b:f2:e1:d4:0f:8d:
6e:a5:82:d1:36:1e:f2:17:1c:1f:45:70:82:eb:5e:
ff:4d:23:ad:02:7f:42:79:a8:d2:03:d6:90:4d:18:
21:0c:61:32:bb:30:b8:e4:35:44:e4:b3:a6:66:a7:
a8:68:8a:f0:d8:5f:19:7f:b1:f9:65:e1:93:e5:b3:
f4:a0:b8:59:0d:6e:12:18:59:dc:0e:d6:90:5f:79:
74:fe:8c:01:1e:a9:cc:d9:4a:b1:6a:73:e8:14:70:
64:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
29:D1:89:B9:A7:63:96:58:16:0A:27:FD:17:B6:D2:38:AB:9B:FD:4A
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/1/29D189B9A7639658160A27FD17B6D238AB9BFD4A.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.233.28.0/22
IPv6:
2804:4b34::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267290
Signature Algorithm: sha256WithRSAEncryption
a0:73:38:76:46:44:93:27:23:7b:de:9f:d7:f6:25:23:4c:2d:
17:37:74:89:92:4e:c8:a5:c3:42:3d:cd:5e:95:e0:c1:dc:dd:
97:c0:2a:06:9d:eb:b3:38:d0:eb:85:8b:7b:9a:9e:6d:5f:5e:
f1:2c:82:44:20:bf:15:ce:1c:0c:34:4a:be:05:d3:e8:68:7e:
8a:eb:97:87:45:73:9c:5e:47:64:0e:60:8e:a1:79:8d:9d:53:
6e:d2:34:00:d8:f2:47:68:13:97:1f:d3:72:d2:4e:8a:17:32:
5b:d5:85:24:12:88:f1:1f:78:1b:0c:18:a1:c8:50:d7:86:3c:
0a:dc:0c:70:65:89:e0:16:8f:04:02:0c:96:45:20:0e:0c:7e:
86:e7:e3:69:a6:f1:c6:1d:a8:4e:2a:88:26:84:62:d5:c8:6f:
24:41:5a:72:09:5b:6c:0f:c6:f2:af:45:a1:ac:23:a7:83:b3:
da:bc:52:e9:89:3d:f6:3b:ac:62:d5:d3:f5:6e:68:25:90:3d:
f4:5c:31:f8:1e:16:de:4a:bc:ea:8e:36:85:52:5e:40:d1:50:
23:b1:ac:66:f1:cd:78:dc:86:6b:76:c6:3a:9a:43:c3:ee:47:
71:e8:59:05:a9:27:ea:41:65:0e:71:80:61:fd:80:e8:6e:7c:
4c:2f:09:54
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUEkBhTTUgz/Ahg5t1LPtZhn0z1CAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxODI2MjZaFw0yNTA0MDIxODMxMjZaMDMxMTAvBgNV
BAMTKDI5RDE4OUI5QTc2Mzk2NTgxNjBBMjdGRDE3QjZEMjM4QUI5QkZENEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYi1S5NV3wAQbpVC2QxFdFWoan
bJAzB9CPhq3W6Yrmyl4n5x6YUfzkm+GA+BIu4sj3KrCL2So/TprXp7IhUq77BQxC
rU4jixKelh/LPQIv7KJz4rkrAkXSAUonPD/u/u47SuoZHgjsyRvZCQLI3Z5WiEmz
NGxxMe9Zt+AoNch7iA7fPMzAnnfCrO5D41Z33UCZddq6dElcmqvkoqRLlAvy4dQP
jW6lgtE2HvIXHB9FcILrXv9NI60Cf0J5qNID1pBNGCEMYTK7MLjkNUTks6Zmp6ho
ivDYXxl/sfll4ZPls/SguFkNbhIYWdwO1pBfeXT+jAEeqczZSrFqc+gUcGSLAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQp0Ym5p2OWWBYK
J/0XttI4q5v9SjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ003
dEJSQU5hOWE5WktKdDJCM0RUd3hneDk2MmhGOWZ0VUp3dWtnMjlYUlkvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ003
dEJSQU5hOWE5WktKdDJCM0RUd3hneDk2MmhGOWZ0VUp3dWtnMjlYUlkvMS8yOUQx
ODlCOUE3NjM5NjU4MTYwQTI3RkQxN0I2RDIzOEFCOUJGRDRBLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAIt6RwwDQQCAAIwBwMFACgESzQwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBBQaMA0GCSqGSIb3DQEBCwUAA4IBAQCgczh2RkSTJyN73p/X
9iUjTC0XN3SJkk7IpcNCPc1eleDB3N2XwCoGneuzONDrhYt7mp5tX17xLIJEIL8V
zhwMNEq+BdPoaH6K65eHRXOcXkdkDmCOoXmNnVNu0jQA2PJHaBOXH9Ny0k6KFzJb
1YUkEojxH3gbDBihyFDXhjwK3AxwZYngFo8EAgyWRSAODH6G5+NppvHGHahOKogm
hGLVyG8kQVpyCVtsD8byr0WhrCOng7PavFLpiT32O6xi1dP1bmglkD30XDH4Hhbe
SrzqjjaFUl5A0VAjsaxm8c143IZrdsY6mkPD7kdx6FkFqSfqQWUOcYBh/YDobnxM
LwlU
-----END CERTIFICATE-----
Generated at Tue May 28 19:13:10 2024 by rpki-client on console-fra.rpki-client.org