Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.cer
File: 435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.cer (raw, json)
Hash identifier: LxU2CUA+XVr3U0HfCNbl8zEw+6J+K3JWTM/EswVu6G4=
Subject key identifier: 43:5F:4B:40:AD:49:CD:DD:2B:95:80:A9:F5:EE:3C:C2:59:BF:9A:30
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5A3E5DAEC416EFCCE7F8F61A132C6C1150975369
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.mft
caRepository: rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 02 Sep 2024 18:21:23 +0000
Certificate not after: Mon 01 Sep 2025 18:26:23 +0000
Subordinate resources: AS: 268307
IP: 45.237.240.0/22
IP: 2804:4f24::/32
Validation: Failed, certificate revoked on Tue 21 Jan 2025 19:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:3e:5d:ae:c4:16:ef:cc:e7:f8:f6:1a:13:2c:6c:11:50:97:53:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 2 18:21:23 2024 GMT
Not After : Sep 1 18:26:23 2025 GMT
Subject: CN=435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5a:df:92:01:21:00:ed:83:d1:39:7f:49:20:
71:f0:df:85:9f:e0:c1:68:5b:dc:02:03:7f:a4:a0:
7a:d0:ca:23:e2:6c:3f:fe:cf:ad:aa:9e:1c:bb:cb:
ac:34:6f:45:2a:3e:93:44:8d:64:a1:62:2b:36:f0:
e2:42:80:1a:ea:36:d8:89:27:5e:b3:7a:dc:2b:6f:
6d:40:53:6f:94:26:5f:48:ff:bb:f5:a3:de:b2:9e:
ac:53:c6:18:1a:dd:20:c2:85:21:35:f2:08:87:58:
4c:3b:a3:9d:e6:cb:76:e5:fb:bc:f4:f8:26:b1:f2:
bc:7c:ac:e9:28:49:b7:03:cc:1f:bb:18:c3:17:3a:
cf:ea:fb:86:ff:d2:62:d6:13:23:dd:d2:8c:68:0b:
00:d5:5e:53:a2:a9:75:3f:77:76:88:90:c7:16:54:
32:ef:2d:86:16:ac:89:6a:fa:4d:91:91:d5:5d:51:
df:bb:97:0b:fc:24:ad:46:23:bb:b2:21:40:1a:fe:
36:cc:48:f5:73:97:f3:b8:2b:f4:7f:e4:93:c4:c5:
9a:9b:f5:d2:81:fb:60:7d:db:93:89:f7:db:ab:cb:
18:88:b0:43:f7:65:da:0c:df:a1:14:ea:f8:18:a8:
b5:38:79:06:a1:a1:cc:67:3a:e8:55:3b:80:ef:60:
ed:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
43:5F:4B:40:AD:49:CD:DD:2B:95:80:A9:F5:EE:3C:C2:59:BF:9A:30
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.240.0/22
IPv6:
2804:4f24::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268307
Signature Algorithm: sha256WithRSAEncryption
4b:9d:44:8e:9e:8d:e4:e6:87:2b:a8:6e:63:95:17:5f:72:80:
22:b9:aa:3a:3c:06:33:ac:91:6d:85:3d:63:86:61:72:76:84:
0f:48:fd:d5:f7:29:55:fc:f3:ac:02:38:0f:58:29:95:47:d5:
87:cf:3d:1b:31:2a:ae:9d:4e:56:bf:d6:14:ca:5e:31:80:9b:
cc:d1:6b:97:0e:fd:4e:be:af:1e:1d:39:cb:8f:31:ad:16:ce:
33:9d:7a:f9:e2:77:14:49:b6:c1:aa:f7:01:e2:64:0e:42:75:
e4:d0:7f:8f:95:38:b9:24:88:c2:de:ca:99:61:3d:2a:f9:46:
72:1e:6e:2b:85:4f:45:8c:7b:e6:04:6e:44:75:38:e2:a7:1f:
c3:41:72:34:74:98:14:2e:6b:08:22:ba:f6:d1:23:6c:ed:62:
a4:39:fb:37:c5:b6:82:26:67:e1:7c:52:81:21:cf:73:af:45:
c2:1e:43:d7:d7:44:55:8e:2d:83:37:6a:bf:f8:3f:75:69:7f:
68:e7:17:a9:ad:67:43:80:ab:d9:d3:11:2f:92:6c:c2:4d:13:
a1:a7:7c:c6:e0:75:55:ce:27:db:56:16:f7:b6:40:eb:1f:a3:
67:49:a6:28:62:9b:8c:02:1c:f4:e2:60:e6:94:6e:5b:b3:8f:
76:d7:ab:35
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIUWj5drsQW78zn+PYaEyxsEVCXU2kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MDIxODIxMjNaFw0yNTA5MDExODI2MjNaMDMxMTAvBgNV
BAMTKDQzNUY0QjQwQUQ0OUNEREQyQjk1ODBBOUY1RUUzQ0MyNTlCRjlBMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjWt+SASEA7YPROX9JIHHw34Wf
4MFoW9wCA3+koHrQyiPibD/+z62qnhy7y6w0b0UqPpNEjWShYis28OJCgBrqNtiJ
J16zetwrb21AU2+UJl9I/7v1o96ynqxTxhga3SDChSE18giHWEw7o53my3bl+7z0
+Cax8rx8rOkoSbcDzB+7GMMXOs/q+4b/0mLWEyPd0oxoCwDVXlOiqXU/d3aIkMcW
VDLvLYYWrIlq+k2RkdVdUd+7lwv8JK1GI7uyIUAa/jbMSPVzl/O4K/R/5JPExZqb
9dKB+2B925OJ99uryxiIsEP3ZdoM36EU6vgYqLU4eQahocxnOuhVO4DvYO2pAgMB
AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRDX0tArUnN3SuV
gKn17jzCWb+aMDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXBX
VGVENzRLM2o2NzFMVTZ0dXJDeFlGWmhIaTZxUHpLTEhLOWcyRTF6YS8wLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXBX
VGVENzRLM2o2NzFMVTZ0dXJDeFlGWmhIaTZxUHpLTEhLOWcyRTF6YS8wLzQzNUY0
QjQwQUQ0OUNEREQyQjk1ODBBOUY1RUUzQ0MyNTlCRjlBMzAubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB
/wQfMB0wDAQCAAEwBgMEAi3t8DANBAIAAjAHAwUAKARPJDAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEGBMwDQYJKoZIhvcNAQELBQADggEBAEudRI6ejeTmhyuobmOV
F19ygCK5qjo8BjOskW2FPWOGYXJ2hA9I/dX3KVX886wCOA9YKZVH1YfPPRsxKq6d
Tla/1hTKXjGAm8zRa5cO/U6+rx4dOcuPMa0WzjOdevnidxRJtsGq9wHiZA5CdeTQ
f4+VOLkkiMLeyplhPSr5RnIebiuFT0WMe+YEbkR1OOKnH8NBcjR0mBQuawgiuvbR
I2ztYqQ5+zfFtoImZ+F8UoEhz3OvRcIeQ9fXRFWOLYM3ar/4P3Vpf2jnF6mtZ0OA
q9nTES+SbMJNE6GnfMbgdVXOJ9tWFve2QOsfo2dJpihim4wCHPTiYOaUbluzj3bX
qzU=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:03 2025 by rpki-client