Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/309943EC91951A9ADF4A2C846825824B6F268881.cer
File: 309943EC91951A9ADF4A2C846825824B6F268881.cer (raw, json)
Hash identifier: BBNqaDisiYRDw1N1Rggo1HwnywSVPedOzbK7YktBl5U=
Subject key identifier: 30:99:43:EC:91:95:1A:9A:DF:4A:2C:84:68:25:82:4B:6F:26:88:81
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 38001C7BFDB9138A4E32F7F1B6325F35ADCBE7BD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/309943EC91951A9ADF4A2C846825824B6F268881.mft
caRepository: rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 21 Feb 2025 12:26:45 +0000
Certificate not after: Fri 20 Feb 2026 12:31:45 +0000
Subordinate resources: AS: 264288
IP: 138.121.32.0/22
IP: 2804:2590::/32
Validation: Failed, certificate revoked on Wed 02 Apr 2025 18:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:00:1c:7b:fd:b9:13:8a:4e:32:f7:f1:b6:32:5f:35:ad:cb:e7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 21 12:26:45 2025 GMT
Not After : Feb 20 12:31:45 2026 GMT
Subject: CN=309943EC91951A9ADF4A2C846825824B6F268881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:fd:e0:70:27:1a:37:64:d5:63:8d:1c:00:
70:87:10:1c:65:51:01:cf:e5:c1:d4:67:62:42:49:
f8:c4:2f:fa:13:9e:b2:e6:4f:7b:21:f9:f2:8b:55:
31:de:24:ce:1b:98:24:68:81:f8:67:bc:0f:78:37:
f8:2c:20:d6:ae:66:14:a6:b3:b0:59:6d:6e:8d:55:
2f:df:3e:fc:17:78:e8:60:88:12:7f:26:53:cc:bc:
68:d4:3d:f6:f6:96:6a:6d:3c:d9:65:9d:3c:83:f7:
87:62:45:35:ce:54:44:2e:70:9a:3f:c1:aa:ee:77:
a3:75:c6:eb:57:02:9d:bc:e6:56:6f:c9:ee:6f:34:
55:24:2f:98:dd:75:de:8d:0e:9a:6a:f9:4c:34:b6:
cf:a3:82:4d:e5:2c:78:a9:b9:f3:03:a6:cf:89:7b:
d4:60:b5:d2:5d:a8:fb:7a:ba:f8:93:52:ee:1b:dc:
14:91:89:b4:18:1d:92:11:84:d8:d9:25:04:46:54:
8e:b4:9d:d2:c6:c3:ce:90:63:6d:dc:d6:da:54:06:
1d:af:80:79:a7:2f:74:b6:5e:c4:ca:b3:3a:de:f8:
c7:e1:78:a5:a4:e2:92:92:e5:84:f4:91:f5:da:11:
07:d3:6d:d0:8e:36:ca:7b:74:83:21:15:b7:d7:d6:
80:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
30:99:43:EC:91:95:1A:9A:DF:4A:2C:84:68:25:82:4B:6F:26:88:81
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/309943EC91951A9ADF4A2C846825824B6F268881.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.32.0/22
IPv6:
2804:2590::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264288
Signature Algorithm: sha256WithRSAEncryption
cc:2d:a8:e9:f0:69:8e:e3:58:d6:ce:34:ee:68:7c:86:06:f9:
ec:7f:c4:af:27:42:64:77:b8:38:c3:59:dc:a8:4a:6d:0e:6d:
25:bc:e5:b3:48:c6:bb:17:19:09:54:2f:b0:2d:5e:52:1c:67:
05:01:c9:61:48:4f:40:c9:ed:81:e7:de:bd:5c:af:34:37:62:
23:11:92:5f:09:e8:ed:ab:f1:79:22:72:9d:02:c6:5a:c1:59:
21:1a:c8:bf:d9:0a:39:72:ed:34:b8:12:a6:df:41:e8:ab:38:
8c:88:df:60:c8:de:73:49:26:f8:f9:fc:95:f4:0e:c9:89:41:
69:bd:ef:a6:75:ed:7b:22:24:6a:49:0e:22:ba:3b:e1:d4:66:
e4:6f:e6:29:88:1e:19:18:24:18:9e:d3:2a:e0:ef:6e:02:00:
44:f1:86:be:62:6b:1b:17:27:6d:69:b0:f3:00:9b:a0:fe:8f:
46:2c:90:4f:9c:e5:c4:00:c0:72:af:d7:5b:2c:b7:44:71:97:
cf:80:7f:f8:c6:a0:81:39:26:bc:9b:d2:a6:dc:02:14:27:8c:
e7:d8:bb:da:ff:a8:74:3a:7b:45:c9:35:e3:88:2e:c0:e8:d5:
1d:9a:f7:f2:ea:2e:e4:cd:e9:9a:64:e3:43:c5:fa:b1:9b:78:
88:d3:88:5a
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUOAAce/25E4pOMvfxtjJfNa3L570wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAyMjExMjI2NDVaFw0yNjAyMjAxMjMxNDVaMDMxMTAvBgNV
BAMTKDMwOTk0M0VDOTE5NTFBOUFERjRBMkM4NDY4MjU4MjRCNkYyNjg4ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChwv3gcCcaN2TVY40cAHCHEBxl
UQHP5cHUZ2JCSfjEL/oTnrLmT3sh+fKLVTHeJM4bmCRogfhnvA94N/gsINauZhSm
s7BZbW6NVS/fPvwXeOhgiBJ/JlPMvGjUPfb2lmptPNllnTyD94diRTXOVEQucJo/
warud6N1xutXAp285lZvye5vNFUkL5jddd6NDppq+Uw0ts+jgk3lLHipufMDps+J
e9RgtdJdqPt6uviTUu4b3BSRibQYHZIRhNjZJQRGVI60ndLGw86QY23c1tpUBh2v
gHmnL3S2XsTKszre+MfheKWk4pKS5YT0kfXaEQfTbdCONsp7dIMhFbfX1oATAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQwmUPskZUamt9K
LIRoJYJLbyaIgTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR1k0
eUxtTnZaS3BORnlzRXVnd2ZXYnlIMzJ0Nlh2ZmFNRExvUEtVYllHMVUvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dZ
NHlMbU52WktwTkZ5c0V1Z3dmV2J5SDMydDZYdmZhTURMb1BLVWJZRzFVLzAvMzA5
OTQzRUM5MTk1MUE5QURGNEEyQzg0NjgyNTgyNEI2RjI2ODg4MS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCinkgMA0EAgACMAcDBQAoBCWQMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQIYDANBgkqhkiG9w0BAQsFAAOCAQEAzC2o6fBpjuNY1s40
7mh8hgb57H/ErydCZHe4OMNZ3KhKbQ5tJbzls0jGuxcZCVQvsC1eUhxnBQHJYUhP
QMntgefevVyvNDdiIxGSXwno7avxeSJynQLGWsFZIRrIv9kKOXLtNLgSpt9B6Ks4
jIjfYMjec0km+Pn8lfQOyYlBab3vpnXteyIkakkOIro74dRm5G/mKYgeGRgkGJ7T
KuDvbgIARPGGvmJrGxcnbWmw8wCboP6PRiyQT5zlxADAcq/XWyy3RHGXz4B/+Mag
gTkmvJvSptwCFCeM59i72v+odDp7Rck144guwOjVHZr38uou5M3pmmTjQ8X6sZt4
iNOIWg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:59:46 2025 by rpki-client