Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/29E0C1C6BEF47B9ACA2AF13B8AC8F74FE4D4A258.cer
File: 29E0C1C6BEF47B9ACA2AF13B8AC8F74FE4D4A258.cer (raw, json)
Hash identifier: wJRBAdMOlq1BEOuZdiHnqyW9TRH1n9cj0ROasNc1yY8=
Subject key identifier: 29:E0:C1:C6:BE:F4:7B:9A:CA:2A:F1:3B:8A:C8:F7:4F:E4:D4:A2:58
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 246894DDA4655A667A54C8A172455495897F0408
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/29E0C1C6BEF47B9ACA2AF13B8AC8F74FE4D4A258.mft
caRepository: rsync://rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 16 Aug 2024 15:01:40 +0000
Certificate not after: Fri 15 Aug 2025 15:06:40 +0000
Subordinate resources: AS: 271296
IP: 192.145.220.0/22
IP: 2804:7948::/32
Validation: Failed, certificate revoked on Wed 09 Oct 2024 18:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:68:94:dd:a4:65:5a:66:7a:54:c8:a1:72:45:54:95:89:7f:04:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 16 15:01:40 2024 GMT
Not After : Aug 15 15:06:40 2025 GMT
Subject: CN=29E0C1C6BEF47B9ACA2AF13B8AC8F74FE4D4A258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:31:92:e4:ec:b9:6a:47:1b:76:f2:9b:4e:
16:19:54:97:50:57:11:2f:47:91:9b:18:f3:ee:13:
4f:ad:96:94:b5:62:6f:c7:42:40:95:9f:2f:88:c7:
57:05:2d:19:92:79:e8:8d:9e:ab:c7:ed:2b:be:17:
a5:4c:e5:93:b3:b9:17:c8:86:6b:a1:68:6b:d9:fa:
be:e8:8a:02:9f:e0:57:53:d8:cd:f1:b7:9f:d2:61:
fb:7f:5a:41:22:93:f5:ea:be:a9:c2:e8:c3:6f:63:
01:c6:f2:c3:09:79:99:57:20:9a:9c:d1:8d:5d:a5:
3f:f4:c4:b9:f7:3b:3e:7d:88:9a:f6:18:d6:3d:f5:
4e:b2:d1:fa:08:8f:33:2f:81:7e:63:90:fd:ed:cc:
c4:c8:09:32:e6:d3:60:e5:ad:5f:9f:64:2e:4a:eb:
8f:c8:19:58:71:db:b3:fd:94:4c:df:09:6c:2f:38:
75:38:1e:a7:3e:fb:fe:bb:3d:f9:c1:3f:9d:5d:42:
0a:e0:c9:9e:f7:43:4f:c9:5c:f9:37:04:a9:21:63:
7b:b1:f3:2b:33:1e:2a:cb:49:c8:bd:3e:98:a9:b6:
e1:1f:86:5f:d1:7e:66:8a:16:c2:55:24:67:3f:f2:
32:53:c0:68:e5:32:f1:dc:38:eb:f3:16:8e:7f:a7:
9f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
29:E0:C1:C6:BE:F4:7B:9A:CA:2A:F1:3B:8A:C8:F7:4F:E4:D4:A2:58
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/29E0C1C6BEF47B9ACA2AF13B8AC8F74FE4D4A258.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.220.0/22
IPv6:
2804:7948::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271296
Signature Algorithm: sha256WithRSAEncryption
76:a5:80:8e:f4:1b:b6:60:29:05:b0:27:87:5d:64:51:f1:b5:
13:3a:60:0d:27:b2:5a:cd:23:9e:0d:7e:99:75:4e:0f:ce:78:
58:f2:29:e5:61:ff:cc:b2:75:a2:04:f2:26:ab:3f:7d:8e:a3:
bb:c2:ea:e3:28:a3:3d:7b:43:53:b2:bd:04:89:1b:ef:b8:b9:
35:47:bc:16:25:28:f0:0b:a5:7c:95:70:41:2a:31:b7:25:45:
59:0f:42:9a:28:47:ba:69:7b:93:5a:28:26:98:55:db:77:56:
73:a6:2c:02:33:71:40:d4:5d:d0:f7:54:b5:ba:52:46:42:5c:
79:73:38:ed:e4:50:16:4f:bf:c8:a3:99:bc:4f:3d:48:3c:2b:
f9:8a:49:0f:1a:c4:a4:72:8a:6a:44:dd:4f:63:f0:2a:47:d1:
6c:37:ae:a5:92:01:43:08:ab:91:68:f9:f3:e3:c7:94:4b:b5:
f0:99:44:67:87:c4:93:d5:ff:07:e9:37:ee:c1:b5:59:90:89:
46:77:38:5c:6e:62:7d:fa:69:be:78:d1:29:0d:14:6c:8b:31:
c7:ca:c4:53:35:30:50:c8:2d:11:74:a9:f2:81:92:6d:a3:4b:
7b:8e:2c:92:c7:37:11:53:c5:f0:d1:10:a8:d2:7a:c3:e4:ed:
ab:22:ad:2a
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUJGiU3aRlWmZ6VMihckVUlYl/BAgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA4MTYxNTAxNDBaFw0yNTA4MTUxNTA2NDBaMDMxMTAvBgNV
BAMTKDI5RTBDMUM2QkVGNDdCOUFDQTJBRjEzQjhBQzhGNzRGRTRENEEyNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmqTGS5Oy5akcbdvKbThYZVJdQ
VxEvR5GbGPPuE0+tlpS1Ym/HQkCVny+Ix1cFLRmSeeiNnqvH7Su+F6VM5ZOzuRfI
hmuhaGvZ+r7oigKf4FdT2M3xt5/SYft/WkEik/XqvqnC6MNvYwHG8sMJeZlXIJqc
0Y1dpT/0xLn3Oz59iJr2GNY99U6y0foIjzMvgX5jkP3tzMTICTLm02DlrV+fZC5K
64/IGVhx27P9lEzfCWwvOHU4Hqc++/67PfnBP51dQgrgyZ73Q0/JXPk3BKkhY3ux
8yszHirLSci9PpiptuEfhl/RfmaKFsJVJGc/8jJTwGjlMvHcOOvzFo5/p59dAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQp4MHGvvR7msoq
8TuKyPdP5NSiWDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR3gy
NzZZOHNXa045WkVyWWcxSHRzWm9jbkx3bVZnS3ROa1IxV3EyUzhtOW8vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0d4
Mjc2WThzV2tOOVpFcllnMUh0c1pvY25Md21WZ0t0TmtSMVdxMlM4bTlvLzAvMjlF
MEMxQzZCRUY0N0I5QUNBMkFGMTNCOEFDOEY3NEZFNEQ0QTI1OC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCwJHcMA0EAgACMAcDBQAoBHlIMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQjwDANBgkqhkiG9w0BAQsFAAOCAQEAdqWAjvQbtmApBbAn
h11kUfG1EzpgDSeyWs0jng1+mXVOD854WPIp5WH/zLJ1ogTyJqs/fY6ju8Lq4yij
PXtDU7K9BIkb77i5NUe8FiUo8AulfJVwQSoxtyVFWQ9CmihHuml7k1ooJphV23dW
c6YsAjNxQNRd0PdUtbpSRkJceXM47eRQFk+/yKOZvE89SDwr+YpJDxrEpHKKakTd
T2PwKkfRbDeupZIBQwirkWj58+PHlEu18JlEZ4fEk9X/B+k37sG1WZCJRnc4XG5i
ffppvnjRKQ0UbIsxx8rEUzUwUMgtEXSp8oGSbaNLe44sksc3EVPF8NEQqNJ6w+Tt
qyKtKg==
-----END CERTIFICATE-----
Generated at Wed Oct 9 23:14:47 2024 by rpki-client on console-ams.rpki-client.org