Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2D18FFD10A63F8AAB66C7DB569F0EE28CED526F3.cer
File: 2D18FFD10A63F8AAB66C7DB569F0EE28CED526F3.cer (raw, json)
Hash identifier: v9yTv4FuGznZcyQ9hc4+KUXdtcaybBvzwvUegLxIUxA=
Subject key identifier: 2D:18:FF:D1:0A:63:F8:AA:B6:6C:7D:B5:69:F0:EE:28:CE:D5:26:F3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3BA737915444A0F92F9236CD58FC13F1C053F2D1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/1/2D18FFD10A63F8AAB66C7DB569F0EE28CED526F3.mft
caRepository: rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 01:38:56 +0000
Certificate not after: Thu 03 Apr 2025 01:43:56 +0000
Subordinate resources: AS: 266044
IP: 45.4.32.0/22
IP: 2804:39b0::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:a7:37:91:54:44:a0:f9:2f:92:36:cd:58:fc:13:f1:c0:53:f2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 01:38:56 2024 GMT
Not After : Apr 3 01:43:56 2025 GMT
Subject: CN=2D18FFD10A63F8AAB66C7DB569F0EE28CED526F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6a:d7:3b:c1:54:88:f8:9d:73:71:9a:5f:18:
e0:28:0c:d9:ad:d2:16:dd:76:e6:ca:22:12:af:49:
ee:8e:43:e6:c4:48:ef:d1:23:4b:8f:ce:af:2b:e7:
0f:1a:01:ba:a2:e9:9f:92:1c:99:7e:71:9f:77:8b:
19:59:9a:29:16:37:6d:67:63:e1:28:02:e2:3c:0f:
b3:bd:fb:6b:f0:4b:0f:cb:3e:59:5a:52:6f:29:cd:
68:98:3c:95:c6:60:98:14:6e:e9:b9:1b:ae:22:20:
27:d9:a2:c7:46:f3:e8:54:9c:0b:78:d5:e1:8b:e0:
41:b6:c0:7f:86:43:48:ee:93:36:b4:2a:06:22:3e:
f9:f9:9b:2b:21:bf:f4:ce:35:72:c2:e5:a9:34:39:
88:88:fe:21:01:da:cd:9b:d0:84:79:fc:37:e7:4a:
ff:38:eb:d3:ff:cf:47:9e:1d:0c:00:c5:06:92:25:
e7:a9:ec:c2:d1:49:a9:22:41:8e:01:86:4e:c6:21:
55:bb:8a:10:89:cd:e6:6d:57:24:1d:06:13:7c:c8:
f9:87:8f:b9:ec:a1:5f:16:1f:ec:99:71:9e:a9:ff:
22:d9:a5:6c:c1:3d:e7:55:8c:d7:ca:90:50:55:2a:
ab:dc:cf:23:44:ce:7b:fb:3d:f0:b2:40:27:08:13:
78:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2D:18:FF:D1:0A:63:F8:AA:B6:6C:7D:B5:69:F0:EE:28:CE:D5:26:F3
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/1/2D18FFD10A63F8AAB66C7DB569F0EE28CED526F3.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.32.0/22
IPv6:
2804:39b0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266044
Signature Algorithm: sha256WithRSAEncryption
65:b9:7d:53:e3:bb:b9:53:12:b6:84:9f:a1:17:8a:3d:91:e1:
cc:5c:e6:99:20:1b:66:ec:7b:f5:88:c1:2a:3a:f2:a3:32:c5:
f1:cd:79:70:56:35:27:f6:be:90:10:62:40:ab:08:ec:66:a4:
d1:e5:31:96:1f:a1:7f:6d:10:e9:c8:fd:ad:fa:e6:01:4e:70:
89:e5:1e:db:00:10:98:3e:77:8e:38:39:c9:ca:ff:19:b3:b3:
38:68:3a:0c:5e:13:79:72:35:5b:b1:fc:22:3e:4d:75:c3:f9:
74:cf:76:d3:c4:5b:bc:82:70:4c:e1:66:2a:17:76:aa:28:b5:
a5:6a:02:d4:aa:ae:b6:cd:13:5c:47:fe:4a:70:52:c9:4f:36:
d9:e4:5f:e8:90:05:a5:5c:b7:73:b3:cc:2c:d3:f2:4a:ac:89:
2d:64:d9:9b:90:58:26:7c:8d:48:f3:a3:ec:25:22:e5:7c:12:
c5:f7:e9:f4:b3:c9:06:c3:3d:d9:b5:c8:d9:ff:d1:2c:df:0a:
f2:c2:a6:bb:dd:a8:c7:07:ff:b5:78:f6:ad:f9:cd:d0:39:2f:
6b:86:2f:98:6c:c6:0b:ca:e2:92:fd:90:3d:c5:b6:7e:e1:d6:
be:f4:1f:35:56:54:ee:af:34:fb:61:8a:43:e5:15:35:88:76:
5c:e4:37:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:22 2025 by rpki-client