Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2A31E3D706C94AA2BEB3D749A72D01793F5D2AAD.cer
File: 2A31E3D706C94AA2BEB3D749A72D01793F5D2AAD.cer (raw, json)
Hash identifier: sDHFwJYDDpj+fw23ZyGnds2cAZuNvJlEmQRkbnQKyng=
Subject key identifier: 2A:31:E3:D7:06:C9:4A:A2:BE:B3:D7:49:A7:2D:01:79:3F:5D:2A:AD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4F33B917F07943DF9BF206C235B91C6829432B14
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/2/2A31E3D706C94AA2BEB3D749A72D01793F5D2AAD.mft
caRepository: rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/2/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 23 Jul 2024 11:37:53 +0000
Certificate not after: Tue 22 Jul 2025 11:42:53 +0000
Subordinate resources: AS: 265079
IP: 170.233.136.0/22
IP: 2804:3274::/32
Validation: Failed, certificate revoked on Thu 31 Oct 2024 14:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:33:b9:17:f0:79:43:df:9b:f2:06:c2:35:b9:1c:68:29:43:2b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 23 11:37:53 2024 GMT
Not After : Jul 22 11:42:53 2025 GMT
Subject: CN=2A31E3D706C94AA2BEB3D749A72D01793F5D2AAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:43:63:3b:6b:75:eb:7e:fb:15:24:93:10:f0:
2d:04:1f:75:8f:5c:31:00:bf:7b:c4:5c:92:b1:69:
55:b3:11:fe:73:4d:ca:9b:76:0d:05:d7:b6:d6:c1:
fb:98:26:82:22:57:f1:35:a1:f3:fe:2b:8c:27:35:
c2:85:da:d7:85:21:99:cc:bf:88:6a:8f:d0:cc:e8:
30:88:5e:03:44:cb:f8:9e:fa:5f:48:98:73:cb:25:
b3:f7:8f:46:79:be:51:75:67:5b:ef:5a:79:c5:01:
95:ef:75:fd:dd:7a:4d:b6:47:a7:2e:a8:2f:b5:13:
4c:d3:1f:8a:78:0e:dd:e5:6a:ba:9a:11:88:0e:df:
36:17:b6:98:16:fb:0e:dc:74:a2:55:67:85:69:38:
5e:d6:bc:75:9f:d5:16:35:45:ab:d6:86:db:42:37:
b9:01:ad:a4:8a:11:da:2c:90:17:51:15:d1:7a:3f:
09:fe:d6:bc:76:52:0f:4d:47:51:60:25:5e:52:6f:
c2:b1:54:10:4d:3d:ea:53:f2:aa:a5:c9:09:1d:fa:
51:a2:c5:4d:1d:1e:b6:7a:50:b2:3c:a9:0f:44:b7:
39:99:4a:52:ba:f0:f1:57:eb:73:0f:84:43:fb:fb:
2f:b9:25:f0:12:b0:88:2d:ea:f2:50:11:65:4d:80:
74:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2A:31:E3:D7:06:C9:4A:A2:BE:B3:D7:49:A7:2D:01:79:3F:5D:2A:AD
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/2/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/2/2A31E3D706C94AA2BEB3D749A72D01793F5D2AAD.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.136.0/22
IPv6:
2804:3274::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265079
Signature Algorithm: sha256WithRSAEncryption
68:4c:ef:6d:c6:03:72:ae:6a:9c:98:14:76:38:31:d3:e0:04:
86:3c:e1:76:c5:1e:48:9c:66:39:92:c8:ed:cd:a3:c6:c8:76:
3f:e6:cb:37:80:35:9e:23:bc:33:66:bc:cc:90:60:ce:1e:5d:
e8:10:00:cf:95:4b:65:d5:d4:65:9b:87:9a:56:0b:73:65:cf:
d2:a7:49:fe:69:5f:6f:09:92:71:fc:2a:5a:31:c8:04:d6:de:
d5:da:b6:12:82:71:55:7a:e5:0c:63:c6:fa:bc:f4:ce:20:e9:
23:04:ac:68:7e:5d:2d:31:2c:bd:19:b5:02:75:71:3f:56:7a:
51:ec:c4:ce:c0:63:82:70:63:00:ca:b9:2b:f6:d8:80:0d:ee:
04:16:7b:cd:7c:fa:75:68:ae:7d:3e:cd:66:2b:7e:b3:90:70:
88:17:87:cf:7e:db:19:5b:04:50:c1:f4:e3:df:45:0a:cc:87:
f0:ed:6e:11:81:fe:7a:b4:0e:fa:72:d6:4b:e7:b5:0f:10:cd:
68:ca:c6:da:fd:a8:1f:08:e5:0a:6c:df:60:cf:32:66:4c:ff:
9f:17:77:64:8f:f3:e2:38:a6:11:ee:10:b5:ba:f0:f9:71:71:
29:31:ea:5a:bc:34:32:21:5a:13:9a:98:f6:c8:74:1b:a2:9d:
e6:8d:f5:da
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUTzO5F/B5Q9+b8gbCNbkcaClDKxQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MjMxMTM3NTNaFw0yNTA3MjIxMTQyNTNaMDMxMTAvBgNV
BAMTKDJBMzFFM0Q3MDZDOTRBQTJCRUIzRDc0OUE3MkQwMTc5M0Y1RDJBQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAQ2M7a3XrfvsVJJMQ8C0EH3WP
XDEAv3vEXJKxaVWzEf5zTcqbdg0F17bWwfuYJoIiV/E1ofP+K4wnNcKF2teFIZnM
v4hqj9DM6DCIXgNEy/ie+l9ImHPLJbP3j0Z5vlF1Z1vvWnnFAZXvdf3dek22R6cu
qC+1E0zTH4p4Dt3larqaEYgO3zYXtpgW+w7cdKJVZ4VpOF7WvHWf1RY1RavWhttC
N7kBraSKEdoskBdRFdF6Pwn+1rx2Ug9NR1FgJV5Sb8KxVBBNPepT8qqlyQkd+lGi
xU0dHrZ6ULI8qQ9EtzmZSlK68PFX63MPhEP7+y+5JfASsIgt6vJQEWVNgHSFAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQqMePXBslKor6z
10mnLQF5P10qrTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOW5V
YTZoVldMdm5kM1l5WHhXNllNZVBBTEI3VHVtYmc0M0JlUEZKbWFkZDUvMi8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlu
VWE2aFZXTHZuZDNZeVh4VzZZTWVQQUxCN1R1bWJnNDNCZVBGSm1hZGQ1LzIvMkEz
MUUzRDcwNkM5NEFBMkJFQjNENzQ5QTcyRDAxNzkzRjVEMkFBRC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqumIMA0EAgACMAcDBQAoBDJ0MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQLdzANBgkqhkiG9w0BAQsFAAOCAQEAaEzvbcYDcq5qnJgU
djgx0+AEhjzhdsUeSJxmOZLI7c2jxsh2P+bLN4A1niO8M2a8zJBgzh5d6BAAz5VL
ZdXUZZuHmlYLc2XP0qdJ/mlfbwmScfwqWjHIBNbe1dq2EoJxVXrlDGPG+rz0ziDp
IwSsaH5dLTEsvRm1AnVxP1Z6UezEzsBjgnBjAMq5K/bYgA3uBBZ7zXz6dWiufT7N
Zit+s5BwiBeHz37bGVsEUMH0499FCsyH8O1uEYH+erQO+nLWS+e1DxDNaMrG2v2o
HwjlCmzfYM8yZkz/nxd3ZI/z4jimEe4Qtbrw+XFxKTHqWrw0MiFaE5qY9sh0G6Kd
5o312g==
-----END CERTIFICATE-----
Generated at Thu Oct 31 17:47:12 2024 by rpki-client on console-fra.rpki-client.org