Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3FC95E4F5D50BC7A6C95DC417980C745E1DCF24E.cer
File: 3FC95E4F5D50BC7A6C95DC417980C745E1DCF24E.cer (raw, json)
Hash identifier: n2R0aafKK4OrN5r0wCwy6ROiZanOR2AqZ6U/JoTIn5g=
Subject key identifier: 3F:C9:5E:4F:5D:50:BC:7A:6C:95:DC:41:79:80:C7:45:E1:DC:F2:4E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5A065E4DDF7805BBE19117ED4DAD655CFA5E6073
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/1/3FC95E4F5D50BC7A6C95DC417980C745E1DCF24E.mft
caRepository: rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 20:35:38 +0000
Certificate not after: Thu 03 Apr 2025 20:40:38 +0000
Subordinate resources: AS: 28587
IP: 177.128.184.0/21
IP: 2804:da0::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:06:5e:4d:df:78:05:bb:e1:91:17:ed:4d:ad:65:5c:fa:5e:60:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 20:35:38 2024 GMT
Not After : Apr 3 20:40:38 2025 GMT
Subject: CN=3FC95E4F5D50BC7A6C95DC417980C745E1DCF24E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4a:30:ed:d0:db:36:38:15:fe:1b:33:11:c1:
90:40:a3:eb:f9:c3:87:75:01:10:8d:33:35:94:c3:
ab:64:6c:d9:5a:45:ee:4c:d8:50:39:fd:38:54:97:
75:32:43:a0:47:61:08:9c:08:1d:76:bc:bd:6a:a2:
5c:76:6e:46:dc:b0:b3:2a:30:e7:27:83:fb:71:0a:
9f:98:20:28:91:85:4b:89:54:a8:b4:a1:48:84:ec:
1e:b7:f6:cd:fb:de:ac:02:9b:e2:8d:ab:9f:13:ba:
49:f5:79:02:82:54:98:fa:4c:70:3a:8c:f0:b0:40:
8b:8f:11:d9:18:03:ec:76:e9:fd:2f:ae:03:96:00:
6f:c3:28:82:f8:9f:af:3d:45:b5:fb:ce:d3:f2:46:
4c:38:61:a0:dd:13:20:4f:d4:0e:fa:cc:01:85:c1:
d6:e7:df:b5:17:dc:23:74:ff:99:d1:85:88:0d:79:
47:2c:3c:fa:12:8f:46:d3:2e:59:70:de:32:0b:ca:
66:fd:9c:72:04:f6:76:ca:cf:fc:26:cc:60:08:80:
9f:64:f5:70:cd:4f:f9:cd:56:86:bb:c2:f7:9f:76:
d6:4e:b6:57:a3:2f:36:0c:e5:35:74:0d:f6:8b:e7:
97:69:d8:ba:c2:d3:f1:2b:de:5d:57:96:cc:0b:e5:
d4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3F:C9:5E:4F:5D:50:BC:7A:6C:95:DC:41:79:80:C7:45:E1:DC:F2:4E
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/1/3FC95E4F5D50BC7A6C95DC417980C745E1DCF24E.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.128.184.0/21
IPv6:
2804:da0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28587
Signature Algorithm: sha256WithRSAEncryption
59:d1:44:a1:8a:a8:ba:f5:86:ad:9a:84:07:dc:04:29:92:60:
1e:f1:9b:67:37:5d:2b:54:42:99:59:47:bc:75:67:7f:2b:1b:
a7:23:16:76:ac:aa:b5:a0:ff:77:1a:1b:8a:b1:29:4e:6b:f4:
7f:08:eb:a0:63:13:fc:6a:50:3e:fe:48:a0:a7:e4:5e:64:50:
70:18:bd:05:ec:0f:00:33:8c:9b:5a:c1:0a:98:46:35:4a:97:
ab:3e:8e:2e:da:07:0e:69:cb:5f:5c:f0:e2:fd:ba:e3:31:b2:
d6:12:2b:f1:1a:18:25:1d:e3:00:ba:dc:7c:1b:69:35:ef:ec:
79:36:ea:bb:bb:26:df:9d:05:f3:28:9d:6d:71:ec:1b:39:e0:
87:7d:29:85:8b:9c:c6:e0:12:bb:ac:02:66:aa:35:e5:f1:65:
63:50:4a:5b:dd:37:13:7f:2b:7e:05:97:9f:07:6d:bc:25:b6:
09:7d:0f:35:60:d3:61:c0:5c:c3:81:d3:45:54:0d:5c:26:f7:
1a:7a:4b:82:26:d9:9b:bb:b0:1d:15:36:d1:12:0a:0c:7d:73:
f1:20:c5:69:8f:1a:56:f7:31:87:44:c6:a0:cf:08:3d:0b:fc:
3a:fe:4e:7e:f4:57:11:ea:c7:30:84:99:45:fd:97:0c:34:ec:
68:3e:db:d1
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUWgZeTd94BbvhkRftTa1lXPpeYHMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQyMDM1MzhaFw0yNTA0MDMyMDQwMzhaMDMxMTAvBgNV
BAMTKDNGQzk1RTRGNUQ1MEJDN0E2Qzk1REM0MTc5ODBDNzQ1RTFEQ0YyNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaSjDt0Ns2OBX+GzMRwZBAo+v5
w4d1ARCNMzWUw6tkbNlaRe5M2FA5/ThUl3UyQ6BHYQicCB12vL1qolx2bkbcsLMq
MOcng/txCp+YICiRhUuJVKi0oUiE7B639s373qwCm+KNq58Tukn1eQKCVJj6THA6
jPCwQIuPEdkYA+x26f0vrgOWAG/DKIL4n689RbX7ztPyRkw4YaDdEyBP1A76zAGF
wdbn37UX3CN0/5nRhYgNeUcsPPoSj0bTLllw3jILymb9nHIE9nbKz/wmzGAIgJ9k
9XDNT/nNVoa7wvefdtZOtlejLzYM5TV0DfaL55dp2LrC0/Er3l1XlswL5dRDAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ/yV5PXVC8emyV
3EF5gMdF4dzyTjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMnBF
ZUJpM0R4NGZScU5iRmJiUFc0NVNzcUNDQk1TTTdmQmt5R1FOSEN5M3ovMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJw
RWVCaTNEeDRmUnFOYkZiYlBXNDVTc3FDQ0JNU003ZkJreUdRTkhDeTN6LzEvM0ZD
OTVFNEY1RDUwQkM3QTZDOTVEQzQxNzk4MEM3NDVFMURDRjI0RS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQDsYC4MA0EAgACMAcDBQAoBA2gMBkGCCsGAQUFBwEI
AQH/BAowCKAGMAQCAm+rMA0GCSqGSIb3DQEBCwUAA4IBAQBZ0UShiqi69YatmoQH
3AQpkmAe8ZtnN10rVEKZWUe8dWd/KxunIxZ2rKq1oP93GhuKsSlOa/R/COugYxP8
alA+/kigp+ReZFBwGL0F7A8AM4ybWsEKmEY1SperPo4u2gcOactfXPDi/brjMbLW
EivxGhglHeMAutx8G2k17+x5Nuq7uybfnQXzKJ1tcewbOeCHfSmFi5zG4BK7rAJm
qjXl8WVjUEpb3TcTfyt+BZefB228JbYJfQ81YNNhwFzDgdNFVA1cJvcaekuCJtmb
u7AdFTbREgoMfXPxIMVpjxpW9zGHRMagzwg9C/w6/k5+9FcR6scwhJlF/ZcMNOxo
PtvR
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:40 2025 by rpki-client