Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/40B70D15347B5919306775141D8E2EDACEC6B310.cer
File: 40B70D15347B5919306775141D8E2EDACEC6B310.cer (raw, json)
Hash identifier: UFiQxiMPcjMbqH1jZlfM8vXs76Fh0NzdINO4zz72868=
Subject key identifier: 40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7DEA36B0D3825E71D1D3C59D313689D42E731DF8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/40B70D15347B5919306775141D8E2EDACEC6B310.mft
caRepository: rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 21 Jan 2025 20:38:24 +0000
Certificate not after: Tue 20 Jan 2026 20:43:24 +0000
Subordinate resources: AS: 271504
IP: 200.53.64.0/22
IP: 2804:7c90::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ea:36:b0:d3:82:5e:71:d1:d3:c5:9d:31:36:89:d4:2e:73:1d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 21 20:38:24 2025 GMT
Not After : Jan 20 20:43:24 2026 GMT
Subject: CN=40B70D15347B5919306775141D8E2EDACEC6B310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cf:b4:66:52:08:dd:ba:aa:f7:ab:9a:f9:01:
0a:c5:ae:af:55:30:d0:72:64:a6:f5:6e:95:54:b6:
7e:a6:65:2f:70:91:4d:96:b3:67:8b:01:41:7b:a4:
8f:ce:45:07:f2:07:a9:30:c8:4d:2a:a0:14:d8:ec:
36:2e:cf:01:86:36:8f:5d:ca:36:44:99:7b:22:21:
4a:95:aa:a6:da:30:8f:a7:c4:81:cd:42:5f:30:a3:
50:e4:55:15:5c:e8:67:7c:3f:eb:b4:92:f3:ef:b4:
01:d3:00:cf:93:4e:29:fa:df:21:e6:3b:2d:86:51:
ea:f0:4e:ad:75:34:91:13:fd:cc:cf:2b:50:d1:8c:
44:58:c2:bb:e7:a9:9b:2d:ad:99:2c:8c:6e:50:86:
24:f6:fa:dc:f4:e4:fa:52:97:5a:0b:75:2a:a1:5b:
91:3e:84:9d:46:86:00:19:e8:5f:f7:50:45:f3:05:
9a:7f:2d:cd:5a:3a:42:66:09:d2:b1:e8:6b:15:a7:
9e:e9:d9:5a:b3:f6:8e:e7:aa:e2:f0:ff:3e:11:b7:
1e:e0:e8:31:ec:e6:e8:3a:5e:ea:a1:f1:1c:75:df:
24:d8:ec:b7:07:59:80:06:43:4b:d9:bd:b1:64:ef:
4b:fb:fd:89:96:49:a7:b0:77:6a:13:bf:18:4e:6f:
c7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/40B70D15347B5919306775141D8E2EDACEC6B310.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.53.64.0/22
IPv6:
2804:7c90::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271504
Signature Algorithm: sha256WithRSAEncryption
37:51:e1:b7:e0:0f:b1:29:2c:f4:8a:0c:7d:8c:d2:a0:68:37:
9d:5f:2e:05:08:5b:76:9f:ef:78:3a:4d:19:f8:ec:c0:11:6d:
8a:18:0b:0d:45:20:d0:40:8c:25:3c:3c:cc:81:41:8b:33:de:
83:c4:96:7d:2d:db:8b:7f:fe:44:d3:e4:52:fa:62:00:89:4e:
1c:f8:85:0c:fa:18:19:f1:0e:c1:f8:67:56:e3:94:61:63:c7:
d3:59:4e:1a:b8:ff:f7:b5:bf:17:27:6f:ad:60:a1:02:0b:18:
94:4e:80:e3:00:87:da:1e:33:c8:e7:12:5e:1b:8a:4c:22:82:
a2:d6:52:37:cd:16:2e:5c:d3:d3:f0:33:0c:60:21:81:65:d2:
e0:ef:49:50:ea:77:91:a4:49:6e:05:37:3f:b3:1b:6c:5a:67:
c1:84:56:09:e9:ef:1d:78:22:5f:5f:e3:5d:26:62:62:4d:25:
47:04:f5:fd:b7:30:f0:d5:83:37:0f:5e:a3:55:cd:17:9e:15:
75:68:c6:01:82:dc:80:5e:14:98:62:9f:27:f5:01:b7:8f:c8:
28:06:1e:10:a5:de:45:c0:a1:23:64:9b:c2:ab:5e:01:4e:89:
52:21:a1:55:56:23:7e:9b:e1:60:d0:41:c1:24:45:72:d1:05:
42:86:f7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:20 2025 by rpki-client