Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/47F9B7F1523B5B333E71404DF4D659EB16D1D775.cer
File: 47F9B7F1523B5B333E71404DF4D659EB16D1D775.cer (raw, json)
Hash identifier: FBJkqSzZpq/l8ACil3h0ZsBRU8B2EQWo73HuEI4Yl2A=
Subject key identifier: 47:F9:B7:F1:52:3B:5B:33:3E:71:40:4D:F4:D6:59:EB:16:D1:D7:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 6C5CDB10E7C9E79A1B98B960BB1302CC78B1388C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/47F9B7F1523B5B333E71404DF4D659EB16D1D775.mft
caRepository: rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 22 Apr 2025 22:06:02 +0000
Certificate not after: Tue 21 Apr 2026 22:11:02 +0000
Subordinate resources: AS: 1251
IP: 143.108.0.0/16
IP: 200.18.48.0/20
IP: 200.18.96.0/20
IP: 200.18.240.0/20
IP: 200.19.80.0/20
IP: 200.19.224.0/20
IP: 200.136.0.0/16
IP: 200.144.32.0 -- 200.144.143.255
IP: 2001:12d8::/32
Validation: Failed, certificate revoked on Mon 26 May 2025 12:48:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:5c:db:10:e7:c9:e7:9a:1b:98:b9:60:bb:13:02:cc:78:b1:38:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 22 22:06:02 2025 GMT
Not After : Apr 21 22:11:02 2026 GMT
Subject: CN=47F9B7F1523B5B333E71404DF4D659EB16D1D775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b8:8f:15:bd:b0:9e:89:0c:d8:8a:a5:8a:8b:
d9:f8:56:9a:10:e4:1d:12:99:6b:74:b2:47:5a:2e:
e5:0d:d9:a3:2c:c8:82:21:d3:e8:d8:33:2b:fc:a5:
df:fa:7d:95:c5:81:1f:06:93:b7:ee:ea:d7:2b:2e:
92:0e:70:c1:b5:b8:78:86:15:c5:d7:21:e8:e8:67:
bc:aa:24:95:42:b8:e5:34:b5:50:62:db:a5:5d:80:
d1:26:3d:8a:ec:64:66:eb:02:db:2a:20:02:a7:2c:
31:a5:53:ab:d2:24:38:72:1a:c1:c1:73:9c:a4:32:
45:21:04:4f:af:b8:bd:e9:44:0a:84:b2:a3:26:fc:
7c:57:56:0d:c3:23:4a:30:ae:d7:c1:60:a8:ce:53:
f5:7b:e8:26:23:82:53:cb:39:43:90:f3:31:39:b6:
b0:45:a5:39:a7:0d:70:64:f0:2a:e7:3f:10:f6:14:
7d:8a:93:cc:60:ac:4b:60:c3:9a:cb:eb:e9:4f:0a:
36:a3:ea:a3:b6:53:0c:39:a0:7f:05:04:0a:14:a4:
0e:55:f2:32:01:87:9d:00:68:f6:0a:01:70:4c:ad:
06:93:07:94:2c:7c:64:85:4f:91:97:2e:a3:2b:12:
ad:88:14:8b:1c:d0:55:29:09:a1:e4:84:70:de:d3:
2a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
47:F9:B7:F1:52:3B:5B:33:3E:71:40:4D:F4:D6:59:EB:16:D1:D7:75
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/47F9B7F1523B5B333E71404DF4D659EB16D1D775.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.108.0.0/16
200.18.48.0/20
200.18.96.0/20
200.18.240.0/20
200.19.80.0/20
200.19.224.0/20
200.136.0.0/16
200.144.32.0-200.144.143.255
IPv6:
2001:12d8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1251
Signature Algorithm: sha256WithRSAEncryption
4d:06:36:e2:af:41:7a:e8:57:d1:10:c6:bd:98:50:d1:a5:e3:
75:85:9f:9f:d6:27:f0:75:d6:28:ff:71:21:61:27:e5:49:03:
84:47:f9:87:52:9f:08:4e:7d:9f:39:1d:37:31:09:04:cc:33:
36:67:41:b5:4a:fa:c9:d2:bc:09:50:cd:18:34:69:de:bf:b2:
ae:ec:01:10:22:cf:08:71:3f:43:60:ae:50:b3:7f:09:1f:98:
cf:81:79:eb:d0:54:7b:79:9e:0b:da:0a:3c:f5:0c:88:5b:af:
5b:16:b2:b7:66:77:21:4a:5d:53:da:02:cd:5f:83:27:5a:0d:
b5:1b:e4:79:94:81:0b:cc:b8:3b:6e:ab:95:3f:07:77:15:99:
e5:40:55:c8:7c:f2:e2:76:22:71:1d:6a:97:15:9c:82:4f:1e:
a5:7a:43:93:f5:c3:d4:39:1e:61:26:9a:f8:ba:6a:72:3d:1e:
db:19:4c:de:86:31:09:80:5d:39:12:56:f7:29:53:47:63:b4:
29:58:60:c6:64:56:ee:52:c1:35:c7:fb:95:a4:cd:a2:9c:1f:
66:a3:8f:2f:ce:48:d9:95:f9:15:50:3b:85:4e:39:fb:ee:98:
38:30:f0:d1:bb:76:89:95:6c:db:b2:5e:0a:41:80:13:e0:52:
0e:50:aa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:11:41 2025 by rpki-client