Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5047F902BACA932C3B81B997C030811D3F845FB9.cer
File: 5047F902BACA932C3B81B997C030811D3F845FB9.cer (raw, json)
Hash identifier: tC6PlOyQYNieEM3YJreBH+7htW4RLTEYfpWpo13SZs8=
Subject key identifier: 50:47:F9:02:BA:CA:93:2C:3B:81:B9:97:C0:30:81:1D:3F:84:5F:B9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 17DF9AA34AFFBA70C60E59F3C7A2A3936CE78CD5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/1/5047F902BACA932C3B81B997C030811D3F845FB9.mft
caRepository: rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 00:17:17 +0000
Certificate not after: Thu 03 Apr 2025 00:22:17 +0000
Subordinate resources: AS: 52567
IP: 177.86.56.0/21
IP: 2804:8e54::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:df:9a:a3:4a:ff:ba:70:c6:0e:59:f3:c7:a2:a3:93:6c:e7:8c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 00:17:17 2024 GMT
Not After : Apr 3 00:22:17 2025 GMT
Subject: CN=5047F902BACA932C3B81B997C030811D3F845FB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:24:5c:dd:f8:a9:fb:19:1d:76:c6:85:c3:0a:
fd:91:62:ef:52:37:ff:a0:57:95:19:43:f3:5f:15:
7b:1f:48:77:39:43:0a:6a:13:01:78:59:0d:63:e9:
f0:3d:06:09:32:7e:cc:b3:42:38:63:bb:d6:1e:49:
be:15:3d:d0:fa:41:ec:85:a0:00:f5:27:c4:cf:5e:
ab:90:e4:3a:47:74:2b:c0:59:b6:71:2e:8e:03:47:
1d:71:b6:d2:3c:57:85:56:e9:27:5a:84:d7:9f:19:
0c:4c:68:10:69:15:17:c2:7d:23:b6:2f:ba:11:cf:
6a:50:e4:f1:fb:9c:89:c6:d6:a7:ec:23:25:ac:79:
34:e4:9b:de:1c:ee:66:4e:88:42:89:b1:8e:fd:90:
82:d8:37:e2:db:cf:40:d0:c6:54:8c:78:ae:fa:76:
68:ba:6b:72:c4:1d:9d:48:0a:ba:9d:e9:ec:b5:76:
bb:4f:cc:68:6b:e8:b0:9d:e7:7e:8c:0c:a8:97:b6:
68:a1:28:05:a3:6e:f0:4d:b9:24:45:c4:ee:b8:24:
a0:ba:a1:a8:7f:e0:fa:3c:fe:48:76:4e:a1:2f:b6:
e2:74:ab:c5:65:98:35:20:1b:32:54:cc:17:33:c2:
ef:ab:16:1e:78:86:cb:47:18:ed:56:34:71:4f:0d:
58:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
50:47:F9:02:BA:CA:93:2C:3B:81:B9:97:C0:30:81:1D:3F:84:5F:B9
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/1/5047F902BACA932C3B81B997C030811D3F845FB9.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.86.56.0/21
IPv6:
2804:8e54::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52567
Signature Algorithm: sha256WithRSAEncryption
53:78:ed:44:3a:bd:a3:f7:de:74:33:1e:de:e0:76:a2:4b:49:
04:16:e2:5a:11:c2:46:c3:5c:e3:68:bc:95:52:75:b6:b7:17:
40:d0:31:52:63:fd:a9:44:3a:56:3b:69:dc:f7:5d:b1:02:1c:
08:56:9f:5a:99:42:30:57:db:3e:40:7a:62:e0:c6:83:7d:81:
c3:dc:5b:41:c8:a1:f0:69:4d:b3:32:67:89:a2:6c:37:3d:6a:
30:9c:c0:fa:df:11:a2:27:75:10:fc:6a:7e:72:d0:3e:bf:21:
c1:24:3a:e1:29:76:37:a5:05:fc:76:ef:ce:c1:36:c1:75:d8:
6d:65:21:d1:31:f6:5a:85:22:54:34:55:02:b3:85:4c:d4:48:
67:6f:61:a1:d6:ea:85:8f:34:ea:3d:08:63:c6:01:15:b4:e5:
48:34:9e:88:c7:3c:9d:79:11:44:2c:45:38:df:77:39:1f:5f:
68:cd:7d:9a:8e:fe:6e:a0:51:4c:77:f4:f1:44:cd:5b:af:49:
6f:43:91:dd:a4:c3:0b:42:25:53:0b:c9:52:97:0d:e6:98:5f:
44:c0:63:98:a3:e6:b5:92:c1:fb:5c:f7:f4:1a:ae:7f:58:35:
1e:6b:7e:c2:c1:f2:43:ff:8c:5a:50:c7:f7:cc:e9:48:3d:37:
7c:64:33:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:46 2025 by rpki-client