![](/console.gif)
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5D7DA54D56B64B053E6D80DCB415D9387BAC5542.cer
File: 5D7DA54D56B64B053E6D80DCB415D9387BAC5542.cer (raw, json)
Hash identifier: L9m/9CrC5rkN26mcqrb6pzXrvP5aY/4ke7Hm/kBS3QE=
Subject key identifier: 5D:7D:A5:4D:56:B6:4B:05:3E:6D:80:DC:B4:15:D9:38:7B:AC:55:42
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7455914E6AA325996F47EE03ABBFB483A4845551
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/5D7DA54D56B64B053E6D80DCB415D9387BAC5542.mft
caRepository: rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 13 Dec 2024 00:21:11 +0000
Certificate not after: Fri 12 Dec 2025 00:26:11 +0000
Subordinate resources: AS: 262490
IP: 177.66.80.0/21
IP: 2804:514::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:55:91:4e:6a:a3:25:99:6f:47:ee:03:ab:bf:b4:83:a4:84:55:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 13 00:21:11 2024 GMT
Not After : Dec 12 00:26:11 2025 GMT
Subject: CN=5D7DA54D56B64B053E6D80DCB415D9387BAC5542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:b7:5b:98:fd:6b:21:e8:da:f0:d3:19:ed:
df:7c:cc:de:6c:a2:27:a9:13:e6:e6:ed:36:43:81:
ec:78:53:d8:13:60:8f:b6:5d:d3:0e:b6:61:d7:92:
23:c4:f0:d0:b7:4f:b6:99:d5:60:a4:eb:ea:b6:96:
41:77:87:2f:27:68:20:41:d8:07:ab:b1:8f:35:b9:
ec:17:34:a6:42:a9:1b:5a:e6:8c:6e:09:11:05:d6:
4f:bb:af:60:85:8b:76:da:55:7f:43:d2:51:71:e2:
0c:1e:2c:2b:0a:20:fd:eb:63:29:a6:c3:6c:6a:99:
2b:75:1a:23:5f:9e:dd:b6:9f:7d:5f:eb:a6:0d:18:
d0:42:50:17:a5:72:7e:16:c4:58:cf:bf:ef:d6:87:
2f:00:72:33:27:7f:1c:b9:ae:47:28:e9:07:84:5a:
e6:cb:84:d0:07:6d:58:94:d9:d8:2f:87:73:25:2e:
86:6a:d4:e1:e3:a4:5b:e0:d3:03:b3:e3:53:b2:fb:
cf:17:f1:cd:60:d2:40:47:75:64:fc:83:e9:85:d8:
25:f1:e3:73:20:f9:a8:65:35:4d:18:3e:be:52:bf:
ae:b7:bb:f6:ca:f4:29:79:b3:c8:1b:5f:b7:f2:a4:
ab:55:7f:4e:cd:5e:55:55:e6:2d:9a:38:99:5f:c8:
f2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5D:7D:A5:4D:56:B6:4B:05:3E:6D:80:DC:B4:15:D9:38:7B:AC:55:42
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/5D7DA54D56B64B053E6D80DCB415D9387BAC5542.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.66.80.0/21
IPv6:
2804:514::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262490
Signature Algorithm: sha256WithRSAEncryption
68:98:e2:e9:75:2e:ac:e2:a8:51:30:e2:fc:d4:78:a0:02:d6:
07:f8:36:93:59:a5:ac:49:9d:20:8f:8b:3a:f1:86:eb:a5:5e:
95:9d:0e:ce:8a:bf:21:ea:04:d2:6a:c5:d6:bc:f8:33:82:6e:
68:0f:5b:ed:1e:75:ec:05:25:83:fc:ec:9c:aa:15:f2:fd:5f:
4c:11:00:09:92:40:63:df:f0:86:f3:c0:c0:62:93:b5:fd:a7:
ca:20:89:21:fe:e0:4f:2e:17:07:0c:e2:d5:e5:8f:2d:57:8f:
57:3f:7c:6e:37:37:4c:86:18:09:b2:27:95:08:6a:07:27:8f:
f2:47:65:cb:0d:0b:54:eb:dc:30:1a:3b:c5:3d:4e:3e:da:d5:
d6:b6:3f:01:94:f8:b4:87:22:c2:b9:58:55:ef:6d:bd:c9:a9:
a4:3e:aa:4f:17:a7:cc:5f:bc:6b:ca:50:dc:b8:66:d4:23:89:
5c:18:bb:51:03:9f:3f:e0:c8:72:d8:b1:79:e6:9c:0f:16:fa:
14:b7:31:19:87:98:80:a4:6a:92:e7:e9:13:5d:64:48:e4:2b:
0d:de:22:3b:b7:88:37:d3:c9:95:40:e4:b4:39:ad:79:48:1f:
05:25:00:da:6c:2f:0c:fb:fd:60:de:4e:3c:6a:18:3b:11:74:
47:a0:3c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:05 2025 by rpki-client