Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B.cer
File: 3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B.cer (raw, json)
Hash identifier: BN73rWG/XWYXeAE/8oMQxmTN5ciAYFd4wC67hanTPQ4=
Subject key identifier: 3F:AF:66:8A:2A:7B:49:E1:C5:1B:F4:8C:7C:EA:FB:6F:AC:37:57:6B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0D832776E8E19B66F3A1C36CB843282AF9CD6C6B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B.mft
caRepository: rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 18:58:22 +0000
Certificate not after: Thu 03 Apr 2025 19:03:22 +0000
Subordinate resources: AS: 267934
IP: 45.165.252.0/22
IP: 2804:556c::/32
Validation: Failed, certificate revoked on Fri 16 Aug 2024 04:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:83:27:76:e8:e1:9b:66:f3:a1:c3:6c:b8:43:28:2a:f9:cd:6c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 18:58:22 2024 GMT
Not After : Apr 3 19:03:22 2025 GMT
Subject: CN=3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:8f:19:84:60:a5:1d:d6:06:52:1f:cb:33:
23:99:1b:3b:97:1b:4b:06:68:2c:11:7e:e4:f2:b9:
95:b5:95:12:a2:39:03:e2:f4:da:e5:03:9c:98:8b:
87:54:30:ed:64:be:42:46:d3:80:7e:c9:ed:ef:e0:
65:b1:28:50:7f:97:c4:3f:43:98:6f:c9:98:da:8e:
65:13:f8:99:8f:09:7e:dd:c2:ae:d9:3c:03:91:28:
f4:67:62:08:08:42:16:2f:ec:f0:b5:17:f4:34:0c:
df:0b:44:2a:54:01:52:14:d8:46:a0:61:f1:a2:94:
77:90:47:10:b6:cf:2c:4a:76:c5:9a:39:f1:3f:f2:
a0:1f:a9:09:06:5c:44:03:20:30:b6:79:06:e6:ea:
93:d8:70:39:ec:00:40:5a:91:66:63:dc:42:ad:ec:
77:39:43:f5:ac:b0:1d:cb:73:d9:1c:63:3c:1c:67:
85:b1:15:77:b1:7d:4f:00:b0:e7:f3:46:f2:77:be:
dc:1b:84:fd:98:e0:4d:37:f2:8e:6c:5f:93:31:f4:
2f:0c:79:26:5b:52:c8:1c:df:0b:22:77:17:c3:81:
bd:08:2d:cb:71:56:20:7f:cf:52:ab:40:8c:5b:75:
86:ce:05:b7:23:c1:b6:32:c7:e0:0e:d4:d2:5e:08:
16:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3F:AF:66:8A:2A:7B:49:E1:C5:1B:F4:8C:7C:EA:FB:6F:AC:37:57:6B
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.252.0/22
IPv6:
2804:556c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267934
Signature Algorithm: sha256WithRSAEncryption
95:8b:48:fe:81:37:d6:c3:e1:54:0d:0a:4f:49:75:d2:2b:a3:
d5:a0:ae:1e:f7:e4:f6:f9:a8:1c:30:71:33:69:89:b6:e8:ff:
e1:83:b8:6a:02:6c:1d:0d:a3:73:f4:76:e0:f9:0a:f7:b5:df:
3f:5d:ee:aa:72:2b:a6:12:9f:b5:7e:2e:ba:29:b4:8c:cf:59:
cb:90:19:b8:cb:99:e8:98:c4:6b:02:ff:ae:15:b8:72:91:56:
2b:b0:53:00:6a:03:60:de:db:ba:5a:2a:63:28:c5:8b:a0:78:
54:63:4e:5b:05:79:65:30:ed:4d:39:18:56:6a:e5:48:09:b2:
1c:f9:68:68:53:98:f2:d8:e4:7f:04:c3:b4:1b:79:fe:74:71:
1a:0f:e5:a3:30:68:16:1c:c6:71:3f:e6:73:84:32:ee:61:8c:
2a:2c:6e:2b:19:9d:4f:f0:7e:f5:20:24:59:76:ce:ac:f7:2c:
f1:7d:e2:da:df:a7:f0:6d:34:c1:a8:b8:77:ab:49:60:9e:88:
24:f1:3c:c6:99:3a:56:be:f1:76:b7:0a:bf:31:84:9f:e8:ac:
a4:ac:0e:36:b9:4c:75:27:a7:cd:f6:5e:59:73:d4:2c:36:9e:
54:30:22:2f:85:df:5c:c9:25:18:f4:a8:64:e8:bc:6a:3c:a0:
6f:65:0a:b5
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUDYMndujhm2bzocNsuEMoKvnNbGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxODU4MjJaFw0yNTA0MDMxOTAzMjJaMDMxMTAvBgNV
BAMTKDNGQUY2NjhBMkE3QjQ5RTFDNTFCRjQ4QzdDRUFGQjZGQUMzNzU3NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsKI8ZhGClHdYGUh/LMyOZGzuX
G0sGaCwRfuTyuZW1lRKiOQPi9NrlA5yYi4dUMO1kvkJG04B+ye3v4GWxKFB/l8Q/
Q5hvyZjajmUT+JmPCX7dwq7ZPAORKPRnYggIQhYv7PC1F/Q0DN8LRCpUAVIU2Eag
YfGilHeQRxC2zyxKdsWaOfE/8qAfqQkGXEQDIDC2eQbm6pPYcDnsAEBakWZj3EKt
7Hc5Q/WssB3Lc9kcYzwcZ4WxFXexfU8AsOfzRvJ3vtwbhP2Y4E038o5sX5Mx9C8M
eSZbUsgc3wsidxfDgb0ILctxViB/z1KrQIxbdYbOBbcjwbYyx+AO1NJeCBaLAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ/r2aKKntJ4cUb
9Ix86vtvrDdXazAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ2lr
aWVlVkRuM1FCdDNxcTVia1AzakZOYzZqUXlOUTJNOXdvQUpIaThKdjQvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Np
a2llZVZEbjNRQnQzcXE1YmtQM2pGTmM2alF5TlEyTTl3b0FKSGk4SnY0LzEvM0ZB
RjY2OEEyQTdCNDlFMUM1MUJGNDhDN0NFQUZCNkZBQzM3NTc2Qi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLaX8MA0EAgACMAcDBQAoBFVsMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQWnjANBgkqhkiG9w0BAQsFAAOCAQEAlYtI/oE31sPhVA0K
T0l10iuj1aCuHvfk9vmoHDBxM2mJtuj/4YO4agJsHQ2jc/R24PkK97XfP13uqnIr
phKftX4uuim0jM9Zy5AZuMuZ6JjEawL/rhW4cpFWK7BTAGoDYN7buloqYyjFi6B4
VGNOWwV5ZTDtTTkYVmrlSAmyHPloaFOY8tjkfwTDtBt5/nRxGg/lozBoFhzGcT/m
c4Qy7mGMKixuKxmdT/B+9SAkWXbOrPcs8X3i2t+n8G00wai4d6tJYJ6IJPE8xpk6
Vr7xdrcKvzGEn+ispKwONrlMdSenzfZeWXPULDaeVDAiL4XfXMklGPSoZOi8ajyg
b2UKtQ==
-----END CERTIFICATE-----
Generated at Fri Aug 16 06:42:45 2024 by rpki-client on console-fra.rpki-client.org