Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer
File: 44D7F23D5E330CBCE5452DA8159460000FACF7DF.cer (raw, json)
Hash identifier: q9oHMczzG+NJukhLtDnl2IfZbCAL68dHcOHHk1qp0+0=
Subject key identifier: 44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 58BBEE21957BD114ABC22F1C8CA3F0D41CC109BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.mft
caRepository: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 20 Jan 2025 11:42:42 +0000
Certificate not after: Mon 19 Jan 2026 11:47:42 +0000
Subordinate resources: AS: 263970
IP: 138.255.64.0/22
IP: 2804:289c::/32
Validation: Failed, certificate revoked on Wed 29 Jan 2025 04:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:bb:ee:21:95:7b:d1:14:ab:c2:2f:1c:8c:a3:f0:d4:1c:c1:09:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 20 11:42:42 2025 GMT
Not After : Jan 19 11:47:42 2026 GMT
Subject: CN=44D7F23D5E330CBCE5452DA8159460000FACF7DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5b:8e:85:46:2e:fc:5f:87:a3:ac:b4:8e:b9:
7c:05:e3:09:e2:0f:de:c9:9f:cd:b0:55:c9:4f:2c:
da:ff:62:8b:02:f9:5d:23:4a:5b:db:b1:5a:ef:ce:
ad:08:ea:7b:52:17:57:0c:65:24:eb:c9:73:96:56:
f4:3a:99:22:3b:3e:dc:48:08:cf:9d:62:90:3f:9b:
4a:66:a0:33:c1:fa:92:b9:73:97:79:72:64:fb:c0:
30:af:8c:25:e3:f4:11:32:b2:e1:8b:01:ab:07:c3:
2d:c3:ea:fa:d6:de:98:75:c1:0d:d1:3c:63:0b:f2:
0a:e4:36:89:96:17:7a:6e:b5:c0:f6:ad:a8:ca:2b:
08:a5:ee:2f:01:0a:4b:db:79:de:18:2e:3f:3c:81:
7f:bf:52:18:81:07:33:62:3b:e4:66:19:7b:87:3b:
0c:42:af:b0:93:74:8c:9a:29:e8:4c:b3:cd:ea:d9:
74:b7:53:ee:af:c6:d7:07:b9:7a:fb:8c:b5:07:f1:
ad:5c:7d:88:2c:48:fe:77:1b:5f:61:bc:a4:64:0b:
11:42:2c:82:65:5f:63:6f:6a:c2:eb:d8:8c:c2:5e:
4e:83:ef:1b:28:c8:ea:6a:8b:a2:99:10:39:4e:7a:
18:a4:15:21:fb:3d:99:ee:47:f6:46:fd:5d:21:62:
bc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
44:D7:F2:3D:5E:33:0C:BC:E5:45:2D:A8:15:94:60:00:0F:AC:F7:DF
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/44D7F23D5E330CBCE5452DA8159460000FACF7DF.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.64.0/22
IPv6:
2804:289c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263970
Signature Algorithm: sha256WithRSAEncryption
a5:58:db:14:0e:d5:85:59:1c:57:6a:5b:87:91:8d:a7:95:36:
d3:dc:e4:7c:2a:4b:c5:41:da:a0:d1:40:b0:30:4f:14:92:ae:
34:d6:8a:72:8f:a2:30:fe:67:c5:70:28:e3:48:90:61:e5:9c:
5d:8d:95:24:af:d3:c1:4c:d0:82:91:12:85:3c:f7:8e:78:98:
3b:df:2d:30:5b:27:d9:51:64:10:5c:3f:97:de:74:b0:70:69:
4b:05:3c:ea:81:04:7b:7c:51:1f:96:96:45:64:cc:02:8e:bd:
18:c9:0b:dd:90:d1:bf:08:46:72:1e:ca:92:49:6b:f8:7e:fa:
07:21:be:8a:cb:8f:0c:22:e6:10:f4:a5:c1:56:f4:9d:b2:3e:
d0:88:60:c7:a0:51:48:dc:87:3a:4b:fe:9b:7d:29:01:0b:c9:
b8:c4:9d:6a:b0:80:e2:6d:3d:ef:c1:b0:c3:78:29:5e:c9:b5:
fe:36:5e:14:05:49:c3:7c:34:e0:2d:09:7c:a4:f4:50:cd:b4:
e9:ed:c7:bb:67:ef:c2:cf:7b:3a:49:22:82:f5:d7:4c:2d:43:
97:4b:3f:01:67:e3:c0:39:df:0e:5c:70:ec:fc:a9:ad:ab:17:
90:fe:24:c0:ac:37:8d:98:bd:2b:f8:12:97:4d:9f:c2:04:72:
7a:3a:17:9d
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUWLvuIZV70RSrwi8cjKPw1BzBCb4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMjAxMTQyNDJaFw0yNjAxMTkxMTQ3NDJaMDMxMTAvBgNV
BAMTKDQ0RDdGMjNENUUzMzBDQkNFNTQ1MkRBODE1OTQ2MDAwMEZBQ0Y3REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEW46FRi78X4ejrLSOuXwF4wni
D97Jn82wVclPLNr/YosC+V0jSlvbsVrvzq0I6ntSF1cMZSTryXOWVvQ6mSI7PtxI
CM+dYpA/m0pmoDPB+pK5c5d5cmT7wDCvjCXj9BEysuGLAasHwy3D6vrW3ph1wQ3R
PGML8grkNomWF3putcD2rajKKwil7i8BCkvbed4YLj88gX+/UhiBBzNiO+RmGXuH
OwxCr7CTdIyaKehMs83q2XS3U+6vxtcHuXr7jLUH8a1cfYgsSP53G19hvKRkCxFC
LIJlX2NvasLr2IzCXk6D7xsoyOpqi6KZEDlOehikFSH7PZnuR/ZG/V0hYrxzAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRE1/I9XjMMvOVF
LagVlGAAD6z33zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOWZM
cVYyWURyMnJTazEyOHVOaEJLejh2MlJiMUFYbnZKY0VLM2pyVTNnbWUvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlm
THFWMllEcjJyU2sxMjh1TmhCS3o4djJSYjFBWG52SmNFSzNqclUzZ21lLzAvNDRE
N0YyM0Q1RTMzMENCQ0U1NDUyREE4MTU5NDYwMDAwRkFDRjdERi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCiv9AMA0EAgACMAcDBQAoBCicMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQHIjANBgkqhkiG9w0BAQsFAAOCAQEApVjbFA7VhVkcV2pb
h5GNp5U209zkfCpLxUHaoNFAsDBPFJKuNNaKco+iMP5nxXAo40iQYeWcXY2VJK/T
wUzQgpEShTz3jniYO98tMFsn2VFkEFw/l950sHBpSwU86oEEe3xRH5aWRWTMAo69
GMkL3ZDRvwhGch7Kkklr+H76ByG+isuPDCLmEPSlwVb0nbI+0Ihgx6BRSNyHOkv+
m30pAQvJuMSdarCA4m0978Gww3gpXsm1/jZeFAVJw3w04C0JfKT0UM206e3Hu2fv
ws97OkkigvXXTC1Dl0s/AWfjwDnfDlxw7PyprasXkP4kwKw3jZi9K/gSl02fwgRy
ejoXnQ==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:20 2025 by rpki-client