Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer
File: 4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer (raw, json)
Hash identifier: i0LwsgMclkBHuOcl66g0BWrLVGClxBNDGiexorrAozQ=
Subject key identifier: 4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 64CF45C5211F5F5D279AD6FAD1DA6639A5AC4396
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft
caRepository: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 17 Jan 2025 19:33:52 +0000
Certificate not after: Fri 16 Jan 2026 19:38:52 +0000
Subordinate resources: AS: 61862
IP: 138.185.172.0/22
IP: 201.150.120.0/22
IP: 2804:1a7c::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:cf:45:c5:21:1f:5f:5d:27:9a:d6:fa:d1:da:66:39:a5:ac:43:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 17 19:33:52 2025 GMT
Not After : Jan 16 19:38:52 2026 GMT
Subject: CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1e:d5:51:7d:c3:62:67:3b:67:02:b8:f6:45:
8f:2b:1d:b2:e1:ac:e5:2f:d2:7b:50:c7:96:d2:17:
ee:ba:91:6c:be:81:50:7c:b5:40:49:04:ea:32:c0:
71:b4:19:08:91:77:b7:60:07:e1:32:3d:ac:6e:ec:
e1:36:75:ea:ba:44:7f:84:e2:b2:82:44:9b:65:20:
23:d1:b2:3c:0f:f4:07:fb:33:82:aa:65:42:49:33:
af:01:ca:06:e1:f5:ad:aa:79:09:37:3f:4e:bd:27:
30:ec:5d:a9:71:26:1c:02:c6:15:48:bb:4d:13:87:
f3:2b:e5:79:07:8c:1a:36:7f:cf:1b:f5:20:5a:53:
7e:d0:ec:02:23:fa:0f:0b:db:c1:9a:18:ef:46:d5:
20:75:d9:e5:58:9e:25:72:59:e4:b3:ba:56:6c:98:
91:b4:63:47:99:80:3f:6c:b8:67:de:e6:f2:d6:ca:
d6:41:e0:3d:3e:ad:7b:5d:36:a6:d0:95:1e:a9:2c:
2d:b5:ec:a1:b3:dc:93:ca:ca:4c:e0:bf:4d:02:0b:
68:ba:6f:3d:00:64:4f:8f:ae:cb:c7:2b:26:f5:3d:
bc:14:ea:56:5e:5f:c4:74:04:38:db:b9:2c:c1:d9:
bd:b6:a6:81:d9:5f:7c:62:52:54:fa:c1:b3:ba:fd:
4c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.172.0/22
201.150.120.0/22
IPv6:
2804:1a7c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61862
Signature Algorithm: sha256WithRSAEncryption
b9:9d:18:82:d8:56:47:d4:66:28:16:db:59:2a:49:db:89:51:
fd:41:ab:09:17:27:e7:52:68:c0:ef:d6:0a:02:4f:ce:cb:33:
b2:69:cd:28:78:2e:e7:27:17:c6:7f:7b:52:04:0a:c3:a0:56:
23:ef:e4:31:ed:b2:f5:40:3e:59:29:cf:38:ac:a8:0d:ae:4a:
d2:c5:ee:f7:c6:83:92:12:90:d6:a8:9f:5f:ad:69:aa:c5:c0:
63:6e:0e:df:b4:d8:9f:d8:f5:89:6b:4d:0b:c9:ba:12:47:4e:
d8:be:f9:f8:ff:87:ad:c5:06:59:ff:6f:26:40:bc:aa:28:a8:
6c:37:ab:bd:71:9f:1e:bc:63:22:78:35:d5:53:fd:3a:19:01:
77:9e:27:29:b7:b4:20:fe:4d:4f:a7:b9:1d:9f:17:60:b6:d3:
db:f2:a9:6a:7c:78:05:bd:80:91:7c:31:09:64:92:d1:fe:32:
93:f5:0b:69:1d:b2:44:39:7a:a1:6f:3f:b3:d1:52:1e:1e:b7:
0e:ef:f9:74:00:92:c1:ff:58:6e:4f:64:59:7f:44:8f:23:b1:
07:09:c4:f4:2c:a9:ba:4a:fb:a6:03:8f:0a:32:58:20:2c:e9:
af:d5:4b:55:e6:cc:f0:da:eb:e5:d2:bc:58:51:fe:3e:68:1d:
fa:53:eb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:26 2025 by rpki-client