Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.cer
File: 3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.cer (raw, json)
Hash identifier: 22BMDFebrmesZAYyyp8Erjcly1bnhDN6YBED5oFQzyA=
Subject key identifier: 3C:9F:72:B9:D4:E7:CA:7E:EF:4F:D6:EA:F0:70:32:0A:18:60:9E:FF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4CBE33393712FEABE611BE285B28028BCD7EBD2E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.mft
caRepository: rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 14 Feb 2025 17:39:10 +0000
Certificate not after: Fri 13 Feb 2026 17:44:10 +0000
Subordinate resources: AS: 268091
IP: 45.169.24.0/22
IP: 2804:57dc::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:be:33:39:37:12:fe:ab:e6:11:be:28:5b:28:02:8b:cd:7e:bd:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 14 17:39:10 2025 GMT
Not After : Feb 13 17:44:10 2026 GMT
Subject: CN=3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9c:0c:0a:0c:61:8b:ff:85:bd:ed:22:94:46:
a2:78:17:20:51:df:e6:04:68:6b:9c:df:71:f1:0b:
34:22:fa:33:42:e3:c0:4a:f1:93:2e:0d:54:1f:58:
6e:4c:be:9e:62:88:c8:2c:ea:1d:b9:7b:0d:6e:31:
0d:44:88:db:e7:50:b6:7b:d7:9c:54:11:04:50:7a:
96:25:61:f2:fa:16:97:c1:49:5e:72:21:f1:9f:b7:
d3:5c:93:a3:5f:88:78:e1:1c:d9:97:cd:77:49:53:
79:d8:2e:43:3c:f8:e7:40:a4:c8:5f:d8:a8:e6:3b:
7a:2e:e6:4f:11:dd:3a:b9:d9:8a:92:ee:60:56:94:
18:b7:3f:c2:0b:6b:e8:b7:71:fe:ca:83:a2:c8:87:
cb:bc:11:df:53:c5:ca:04:0e:1c:39:fa:cb:21:c2:
1f:7d:6d:83:d9:8d:0c:58:c9:c9:83:37:1d:61:55:
70:fe:ee:ab:0e:77:52:9f:8a:28:14:9b:01:48:c3:
c2:d0:d1:1d:51:60:c3:60:d2:b9:f5:2a:6f:46:4d:
16:23:6f:bc:81:f7:5a:87:58:8e:eb:4a:0a:dd:8d:
1d:34:56:e0:15:1f:ac:0e:99:13:7f:c9:e0:34:61:
e0:cd:1b:b4:b4:27:8b:93:43:4e:fa:60:57:ee:39:
7b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3C:9F:72:B9:D4:E7:CA:7E:EF:4F:D6:EA:F0:70:32:0A:18:60:9E:FF
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.24.0/22
IPv6:
2804:57dc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268091
Signature Algorithm: sha256WithRSAEncryption
8a:2e:1c:1e:7a:1f:c8:2e:0e:00:77:a5:7b:cb:2f:fc:a3:3b:
d8:aa:da:6e:de:a3:74:2a:06:bf:c6:09:78:44:70:b9:53:39:
3f:a0:5c:56:4a:a1:b4:fd:69:40:35:2b:96:e2:cd:36:1f:b1:
f7:c3:22:0e:b5:83:ac:06:6f:cb:e9:48:33:a1:fd:5a:79:3c:
a9:c5:1f:1a:9b:61:f8:7a:da:24:c2:b6:39:fc:d6:5e:ca:a6:
08:b7:d4:e9:db:14:11:bb:51:31:11:65:d8:8a:14:be:72:0b:
93:50:6f:cc:c5:db:f5:04:16:cf:89:04:88:05:4b:c0:53:29:
68:60:da:ee:d1:36:e3:17:52:49:de:df:ed:77:a1:85:a5:59:
cd:69:78:e8:ad:e1:36:23:ed:7f:9d:47:3b:44:89:a3:78:96:
ed:84:fa:ab:e9:ca:c8:52:4b:2f:3b:bc:0e:23:0a:95:0b:0a:
21:7d:39:11:f9:ba:96:a4:1b:fc:1d:b1:13:af:b0:fe:eb:60:
6f:64:96:3e:8d:4b:99:27:0e:03:35:93:2e:3a:01:8c:6f:f0:
63:f5:47:0f:24:f8:24:a2:04:c6:cf:e7:a0:7f:16:10:f9:6a:
40:19:3a:c1:3e:2b:69:21:19:1c:ec:51:45:bb:12:2e:98:e1:
ae:52:4e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:38:28 2025 by rpki-client