Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/436CDA1F9370BE6E582FE8897E382D5816B0AE61.cer
File: 436CDA1F9370BE6E582FE8897E382D5816B0AE61.cer (raw, json)
Hash identifier: y9ps5Mrn7nri0F7KewNI5SxTVS3WgNT2MmSPl8Pafk4=
Subject key identifier: 43:6C:DA:1F:93:70:BE:6E:58:2F:E8:89:7E:38:2D:58:16:B0:AE:61
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 577806C65EBC5A8214B2E5127F7CDB5BDE89A6AF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/1/436CDA1F9370BE6E582FE8897E382D5816B0AE61.mft
caRepository: rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 20:45:35 +0000
Certificate not after: Thu 03 Apr 2025 20:50:35 +0000
Subordinate resources: AS: 266310
IP: 170.79.196.0/22
IP: 2804:35d8::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:78:06:c6:5e:bc:5a:82:14:b2:e5:12:7f:7c:db:5b:de:89:a6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 20:45:35 2024 GMT
Not After : Apr 3 20:50:35 2025 GMT
Subject: CN=436CDA1F9370BE6E582FE8897E382D5816B0AE61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e7:da:50:5b:0b:c8:98:26:57:ba:e1:9b:86:
72:0a:52:d5:d9:dd:3c:91:4f:b8:fc:e5:f7:2a:b0:
e6:ce:2f:c3:1b:37:c5:81:9a:f5:e1:24:0b:c3:5f:
df:41:7a:05:98:09:93:b8:a0:2e:5e:95:85:d9:44:
cf:f8:d0:58:60:6e:3f:04:2e:a6:a5:7f:2e:46:9a:
57:e9:bc:d1:6c:e7:ce:30:45:5e:03:61:09:48:a8:
cf:bc:3f:86:6e:cd:d3:c2:8b:3c:4e:c3:e4:82:ff:
35:4c:3f:c9:80:b1:9f:9e:05:2f:ad:d5:da:1f:8e:
1d:d2:07:2a:54:be:f1:bc:4a:b2:66:bb:b8:71:2c:
f6:cf:eb:66:52:f0:e2:f1:b5:67:bf:74:f9:1b:bd:
6c:bb:d2:81:6f:3c:95:36:7b:e7:a8:0a:f2:a9:cc:
00:12:8a:c1:7b:b0:43:f6:ca:87:62:23:ac:4e:8b:
55:76:41:f2:a7:f1:bc:83:f5:3b:85:98:6f:c5:bc:
96:40:c1:6d:f9:cd:88:53:92:a1:8e:c4:30:32:ef:
82:43:79:85:a7:7f:ac:7e:46:16:9f:93:da:6e:ea:
c3:86:cc:ec:d0:e5:ff:66:95:22:b4:ca:9b:bc:e6:
0f:16:7e:10:72:cb:92:09:13:29:37:b4:b4:18:08:
6a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
43:6C:DA:1F:93:70:BE:6E:58:2F:E8:89:7E:38:2D:58:16:B0:AE:61
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/1/436CDA1F9370BE6E582FE8897E382D5816B0AE61.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.196.0/22
IPv6:
2804:35d8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266310
Signature Algorithm: sha256WithRSAEncryption
cc:4b:2e:a0:31:d6:e2:98:bd:45:4d:dd:a6:ff:8a:49:78:4d:
13:06:e3:2b:ca:77:98:a1:da:a1:a6:7c:7e:64:01:40:d5:0c:
4d:3d:14:9c:79:b2:1b:dd:03:22:20:82:68:8f:fc:6e:d8:74:
b8:1f:21:95:f7:df:08:6d:a5:dd:0f:c8:65:50:5c:05:2f:bd:
3d:36:e0:77:0c:fd:d2:04:64:10:d7:a6:c8:a2:03:04:9e:44:
3e:bb:eb:18:b2:56:af:93:44:c4:a9:38:59:bc:59:b1:7c:18:
85:2d:4d:59:46:ba:b6:50:51:d4:51:8b:e2:ec:98:bb:1c:22:
85:70:a6:5b:bf:2e:2a:92:26:5e:a5:12:40:a9:a2:a4:a3:64:
30:31:0a:92:bc:2d:36:3a:c3:0f:96:58:96:05:1b:74:07:3f:
cf:51:4f:b1:b2:c9:e8:18:14:64:2b:a5:01:84:83:cb:87:06:
91:cc:5c:9c:e1:ea:62:c0:d7:07:5c:f4:fd:1d:49:26:27:43:
01:f9:50:18:8c:47:e8:67:7b:56:d8:15:67:8b:00:9e:52:a8:
37:14:58:a0:fc:a7:14:e5:9e:18:8d:b2:bf:58:0b:9d:fa:4e:
ee:cd:78:94:44:63:fd:f9:7a:1d:8a:8e:cd:da:04:43:d2:81:
f4:7f:34:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:32 2025 by rpki-client