Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F11FD221D01E9493B82F3DE299E6C053910B87C.cer
File: 2F11FD221D01E9493B82F3DE299E6C053910B87C.cer (raw, json)
Hash identifier: dZFAeJZS0hXQi1GnsPM8YjHY1gs3WIi76ezA2XXVZCI=
Subject key identifier: 2F:11:FD:22:1D:01:E9:49:3B:82:F3:DE:29:9E:6C:05:39:10:B8:7C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2012ED67A038EE14DF194405F12226820A20A3ED
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/1/2F11FD221D01E9493B82F3DE299E6C053910B87C.mft
caRepository: rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:59:28 +0000
Certificate not after: Wed 02 Apr 2025 19:04:28 +0000
Subordinate resources: AS: 61732
IP: 131.72.104.0/22
IP: 170.247.16.0/22
IP: 2804:1b84::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:12:ed:67:a0:38:ee:14:df:19:44:05:f1:22:26:82:0a:20:a3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:59:28 2024 GMT
Not After : Apr 2 19:04:28 2025 GMT
Subject: CN=2F11FD221D01E9493B82F3DE299E6C053910B87C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:44:44:7c:ca:60:3f:fb:2d:7f:1b:37:84:fc:
45:dc:de:e4:d6:ee:33:99:87:4d:47:8e:c0:34:49:
79:aa:c2:88:06:e9:08:fe:93:ce:b9:9a:4b:4d:79:
62:d7:ed:15:f0:5f:0f:a2:45:6a:36:4f:91:b8:5c:
7f:b3:5b:94:bf:a2:3b:7c:ad:b8:9c:2e:e2:2e:c4:
c0:b2:68:2f:8b:c7:fc:53:20:53:b7:bf:a2:a8:d2:
e9:22:e6:e0:1c:dd:96:13:d9:4d:97:56:e4:32:e7:
0b:a5:d3:58:5b:93:32:9d:b4:2f:8c:ea:52:85:30:
45:d2:76:5e:a5:c2:d8:7e:a6:81:e2:82:84:f4:3e:
f2:df:33:60:10:cd:cf:06:e5:91:87:ea:7f:ce:d4:
ca:e2:1f:69:c7:11:df:5c:95:fb:e2:52:ac:72:0f:
4a:58:cb:23:d5:b7:ee:af:89:51:18:19:25:5e:18:
00:dd:95:db:ab:ff:ee:0b:92:77:f8:4a:7c:1d:2a:
17:6f:df:d5:90:20:e9:6d:97:63:02:65:e4:df:39:
f9:9d:04:3e:53:6e:b2:60:ed:b5:c3:24:1d:eb:4a:
34:a1:fe:c0:81:69:c2:7e:1d:e6:f7:2a:1f:df:3c:
16:75:49:f8:09:d2:b7:eb:f3:07:0d:10:61:8f:1e:
a0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2F:11:FD:22:1D:01:E9:49:3B:82:F3:DE:29:9E:6C:05:39:10:B8:7C
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/1/2F11FD221D01E9493B82F3DE299E6C053910B87C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.104.0/22
170.247.16.0/22
IPv6:
2804:1b84::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61732
Signature Algorithm: sha256WithRSAEncryption
7d:2a:c9:9f:93:a2:ee:b4:9a:08:3f:69:ad:b0:11:d4:17:8f:
44:81:12:86:36:14:9f:6e:c0:81:a0:ce:5a:10:8f:12:0a:22:
41:f6:30:c0:89:e5:e0:7e:11:47:84:74:39:ad:58:bb:bc:27:
63:14:ef:93:85:10:5a:ca:4d:82:28:13:f6:35:9a:2e:1f:12:
97:fc:90:90:d9:31:e2:21:4b:7f:c9:1a:7d:1a:ef:bb:a8:38:
7d:86:79:1d:e2:15:91:45:96:c8:6a:e6:c8:41:64:04:4b:2e:
27:ab:dd:f5:14:9b:f5:5d:c0:2a:e0:1a:1f:29:a4:b4:f9:2b:
80:ed:24:d7:de:64:e4:fc:9e:70:0d:72:ce:32:50:73:1f:86:
34:6b:27:09:22:30:1a:fd:24:0e:fa:af:49:27:87:ed:13:d5:
fb:fd:ed:aa:1b:6c:ca:f5:4d:07:12:82:df:0c:6b:62:04:1e:
cb:6f:4d:ee:83:7b:95:c9:04:6a:86:3d:8c:85:15:9c:c5:46:
a0:9d:0c:28:46:ee:59:bd:07:91:43:f2:83:5d:c4:64:e4:7b:
a6:e9:fe:94:e3:c2:63:c5:22:01:ce:f0:27:b0:98:21:75:64:
ef:24:b5:e5:89:fe:78:ae:fa:90:4d:a1:eb:69:96:d6:ac:05:
32:61:95:5e
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUIBLtZ6A47hTfGUQF8SImggogo+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxODU5MjhaFw0yNTA0MDIxOTA0MjhaMDMxMTAvBgNV
BAMTKDJGMTFGRDIyMUQwMUU5NDkzQjgyRjNERTI5OUU2QzA1MzkxMEI4N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMRER8ymA/+y1/GzeE/EXc3uTW
7jOZh01HjsA0SXmqwogG6Qj+k865mktNeWLX7RXwXw+iRWo2T5G4XH+zW5S/ojt8
rbicLuIuxMCyaC+Lx/xTIFO3v6Ko0uki5uAc3ZYT2U2XVuQy5wul01hbkzKdtC+M
6lKFMEXSdl6lwth+poHigoT0PvLfM2AQzc8G5ZGH6n/O1MriH2nHEd9clfviUqxy
D0pYyyPVt+6viVEYGSVeGADdldur/+4Lknf4SnwdKhdv39WQIOltl2MCZeTfOfmd
BD5TbrJg7bXDJB3rSjSh/sCBacJ+Heb3Kh/fPBZ1SfgJ0rfr8wcNEGGPHqDXAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvEf0iHQHpSTuC
894pnmwFORC4fDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMldS
Sk1DWHB6bXZGYzl1RGJveTE0czZjUHdLcVFWREhnZ3Jvbk1rblJtMVYvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJX
UkpNQ1hwem12RmM5dURib3kxNHM2Y1B3S3FRVkRIZ2dyb25Na25SbTFWLzEvMkYx
MUZEMjIxRDAxRTk0OTNCODJGM0RFMjk5RTZDMDUzOTEwQjg3Qy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCg0hoAwQCqvcQMA0EAgACMAcDBQAoBBuEMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwDxJDANBgkqhkiG9w0BAQsFAAOCAQEAfSrJn5Oi
7rSaCD9prbAR1BePRIEShjYUn27AgaDOWhCPEgoiQfYwwInl4H4RR4R0Oa1Yu7wn
YxTvk4UQWspNgigT9jWaLh8Sl/yQkNkx4iFLf8kafRrvu6g4fYZ5HeIVkUWWyGrm
yEFkBEsuJ6vd9RSb9V3AKuAaHymktPkrgO0k195k5PyecA1yzjJQcx+GNGsnCSIw
Gv0kDvqvSSeH7RPV+/3tqhtsyvVNBxKC3wxrYgQey29N7oN7lckEaoY9jIUVnMVG
oJ0MKEbuWb0HkUPyg13EZOR7pun+lOPCY8UiAc7wJ7CYIXVk7yS15Yn+eK76kE2h
62mW1qwFMmGVXg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:56 2025 by rpki-client