Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
File: 45D8EABBB8344E57C69E3416BF523D78A65C0103.cer (raw, json)
Hash identifier: oyZAKTK0iArptlzEkUXL4t8WQwOrF0syKycDVpes3S8=
Subject key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 242CAFD8E39F5E5F4CB41D2FF3646CD484DF5968
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.mft
caRepository: rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 12 Feb 2025 14:25:39 +0000
Certificate not after: Wed 11 Feb 2026 14:30:39 +0000
Subordinate resources: AS: 61592
IP: 45.224.216.0/22
IP: 45.232.188.0/22
IP: 45.234.100.0/22
IP: 2804:4c34::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:2c:af:d8:e3:9f:5e:5f:4c:b4:1d:2f:f3:64:6c:d4:84:df:59:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 12 14:25:39 2025 GMT
Not After : Feb 11 14:30:39 2026 GMT
Subject: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:79:fa:97:a8:64:a5:cf:ca:51:79:7e:b2:77:
3a:03:3e:32:00:37:8c:07:d4:fe:0d:3e:1f:65:e3:
6a:34:06:17:58:d8:83:9e:5b:e8:ee:07:0f:72:7b:
aa:18:bb:d7:8e:0b:9a:cb:ef:38:22:97:9d:2d:3d:
91:50:80:61:f1:c8:00:b1:f9:d2:b3:47:3b:e5:c0:
2c:ad:7c:ac:85:24:e3:d3:b5:ab:1e:bc:4d:6a:2b:
46:1c:ee:96:f6:9e:99:d4:52:b0:a2:81:29:44:3c:
d8:f1:3f:c4:5d:a3:d0:fc:0a:ff:ba:89:c3:68:fd:
e1:62:eb:23:ef:6b:f0:c4:ea:00:cc:4e:1f:2a:5e:
fa:e0:89:d2:06:2a:6d:00:ce:e3:0d:11:75:ff:5b:
f3:d0:0f:eb:9d:fa:d6:22:65:a9:b8:54:6c:1e:b7:
ad:58:f3:d2:a5:30:8a:07:fe:9d:8d:0a:2c:9f:81:
b6:65:e2:e4:7f:96:10:32:0f:e4:1c:5f:a6:35:e5:
29:64:b7:62:2b:7f:17:8f:05:a4:1a:32:3d:bc:20:
b0:cc:f9:ba:03:37:dc:29:8b:b8:46:32:76:42:a6:
73:d4:8c:2f:80:e5:bf:d7:65:37:7c:7e:cf:be:c8:
22:b6:5e:e0:1d:65:fa:cf:41:28:fe:20:12:11:9d:
9c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.216.0/22
45.232.188.0/22
45.234.100.0/22
IPv6:
2804:4c34::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61592
Signature Algorithm: sha256WithRSAEncryption
64:50:c7:b3:ec:a8:db:d2:5f:29:37:a3:27:8a:c9:6f:1a:cd:
5f:54:ce:74:bc:bd:32:ba:fe:9c:5a:9f:1b:2a:de:f5:75:05:
40:1e:38:39:c2:bc:57:d6:85:e7:18:0e:e3:e4:87:dd:15:6d:
25:aa:1b:03:4a:28:be:72:56:fd:6e:5e:50:03:28:c0:21:d4:
fc:be:aa:11:d8:5a:a4:a6:49:cf:f1:2f:62:d6:ce:c8:c7:dd:
37:3a:b1:62:fd:ab:c6:f5:8b:fc:67:02:4c:ec:3a:73:0b:f0:
8c:b3:e1:a7:78:9c:75:74:80:67:5f:b5:af:1c:7b:a3:ea:39:
13:56:69:41:aa:d2:f6:6f:ad:ac:b0:b7:d6:f3:40:3c:a8:15:
e1:1e:31:f8:67:b7:71:66:76:fd:3e:36:c8:b6:41:60:99:be:
b1:cc:82:3c:cf:7f:2f:59:b0:40:a2:0c:2d:dc:b1:46:d1:ce:
d8:86:d2:a7:68:da:0d:aa:98:a5:47:b5:d6:35:fc:8f:38:a7:
3c:11:39:01:12:e1:14:b4:43:38:73:ad:db:18:1a:4e:ec:2d:
62:70:b6:d0:cd:7a:f8:d8:49:f3:04:67:1e:11:11:f1:c7:2f:
3e:b2:ef:db:d3:b4:2d:d5:ae:aa:64:8e:3e:6a:98:a3:43:eb:
d1:ef:9b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:10 2025 by rpki-client