Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5D91624DEC0E4ED31A3BF790EB1D8D65C43CB2D6.cer
File: 5D91624DEC0E4ED31A3BF790EB1D8D65C43CB2D6.cer (raw, json)
Hash identifier: ULx6pqKXNv4ehhNomM3mbwASZmKK0Ttp4pXnNYfxhTE=
Subject key identifier: 5D:91:62:4D:EC:0E:4E:D3:1A:3B:F7:90:EB:1D:8D:65:C4:3C:B2:D6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 016433851A3E13163F2697D8A7B7C87C5137572A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/5D91624DEC0E4ED31A3BF790EB1D8D65C43CB2D6.mft
caRepository: rsync://rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 28 Apr 2025 13:57:38 +0000
Certificate not after: Mon 27 Apr 2026 14:02:38 +0000
Subordinate resources: AS: 270954
IP: 201.49.240.0/22
IP: 2804:7408::/32
Validation: Failed, certificate revoked on Mon 28 Apr 2025 14:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:64:33:85:1a:3e:13:16:3f:26:97:d8:a7:b7:c8:7c:51:37:57:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 28 13:57:38 2025 GMT
Not After : Apr 27 14:02:38 2026 GMT
Subject: CN=5D91624DEC0E4ED31A3BF790EB1D8D65C43CB2D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:b5:80:7f:bb:c6:62:8d:14:a7:45:32:9f:
ef:36:96:d6:f9:22:f6:df:3f:96:94:dd:6e:d7:fb:
bd:c4:35:94:86:1a:2e:3a:4e:88:96:5f:c9:7c:19:
2d:37:6c:cb:b5:9b:f4:5f:aa:32:4a:1f:de:6f:5e:
85:a3:48:07:ab:fa:46:ee:08:71:7f:49:1c:e7:61:
7f:6e:1b:44:f9:60:24:05:8a:9f:d6:0b:eb:2a:72:
f1:5d:58:e6:cc:ca:fe:6c:bd:99:da:d5:76:0e:da:
c7:1c:2e:31:65:ac:c3:b2:b4:fc:d7:55:3e:ee:86:
14:40:81:70:2c:25:e0:50:7c:3e:cb:9a:62:f6:c7:
7a:1d:5b:5c:1f:72:58:78:46:3f:53:74:ea:fa:50:
69:ae:bc:64:5f:19:a4:6d:26:db:cb:a7:b4:00:73:
25:b8:79:81:ba:ba:2b:07:8c:42:19:4d:ea:3d:30:
61:91:0d:3b:23:e3:b2:56:10:17:7b:50:6c:b9:4a:
41:ab:93:83:80:55:b2:6b:32:70:50:2a:0b:aa:f6:
f1:50:36:0f:7d:11:6d:18:e8:14:33:44:12:37:2f:
e9:c9:9c:00:a2:5d:e7:be:b5:2b:9c:bc:ef:70:a6:
20:dc:13:3e:ff:71:a8:43:bd:80:9d:f1:b9:5c:ef:
91:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5D:91:62:4D:EC:0E:4E:D3:1A:3B:F7:90:EB:1D:8D:65:C4:3C:B2:D6
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/5D91624DEC0E4ED31A3BF790EB1D8D65C43CB2D6.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.240.0/22
IPv6:
2804:7408::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270954
Signature Algorithm: sha256WithRSAEncryption
ca:12:bb:4d:1a:d1:da:f3:21:ca:3f:49:0b:6d:7d:c1:77:68:
6e:32:6e:a3:36:20:a6:0a:c2:f0:ca:34:51:2d:f0:eb:99:7f:
53:55:57:90:d3:61:2b:fc:a7:3f:f5:b6:16:bc:d3:ad:df:a2:
02:48:39:5e:0f:a5:7e:55:ca:7c:bc:0c:37:0c:00:e8:13:2e:
14:c0:a7:33:e9:da:be:a6:5b:37:f5:9e:51:56:27:92:5c:e9:
90:58:d0:1b:7c:ab:f8:7b:b0:2f:df:a4:bf:fc:ca:21:52:35:
c4:74:11:4e:18:f7:10:21:10:9a:59:2e:a5:d9:87:9b:f9:a3:
e2:84:24:07:7c:aa:1a:09:ee:27:fa:1f:3f:f3:80:79:0f:d9:
15:05:98:14:e3:fc:0d:fb:d4:d7:bf:12:7f:86:eb:34:5e:b0:
2c:76:de:d1:ee:5c:cf:69:be:c4:19:02:11:4e:54:22:3f:37:
8e:2b:5c:cc:03:0f:40:80:94:1b:8a:e9:52:86:08:60:c4:65:
d8:77:02:2e:b8:90:7f:a4:58:8c:13:82:dd:31:45:b6:1f:bf:
0c:10:ee:ba:b5:8f:79:d1:4d:4c:30:cb:30:ee:73:89:cc:80:
71:e0:c7:38:50:11:6d:af:5c:9f:0b:a1:63:a2:45:04:6a:88:
d5:3f:c8:8f
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUAWQzhRo+ExY/JpfYp7fIfFE3VyowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA0MjgxMzU3MzhaFw0yNjA0MjcxNDAyMzhaMDMxMTAvBgNV
BAMTKDVEOTE2MjRERUMwRTRFRDMxQTNCRjc5MEVCMUQ4RDY1QzQzQ0IyRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxHLWAf7vGYo0Up0Uyn+82ltb5
IvbfP5aU3W7X+73ENZSGGi46ToiWX8l8GS03bMu1m/RfqjJKH95vXoWjSAer+kbu
CHF/SRznYX9uG0T5YCQFip/WC+sqcvFdWObMyv5svZna1XYO2sccLjFlrMOytPzX
VT7uhhRAgXAsJeBQfD7LmmL2x3odW1wfclh4Rj9TdOr6UGmuvGRfGaRtJtvLp7QA
cyW4eYG6uisHjEIZTeo9MGGRDTsj47JWEBd7UGy5SkGrk4OAVbJrMnBQKguq9vFQ
Ng99EW0Y6BQzRBI3L+nJnACiXee+tSucvO9wpiDcEz7/cahDvYCd8blc75EjAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRdkWJN7A5O0xo7
95DrHY1lxDyy1jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmdF
WTY3dlkydldqRWJLQ243TE1vc0oyTHU2d3pZcWVaMVRNa0Q2MjhyNUMvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jn
RVk2N3ZZMnZXakViS0NuN0xNb3NKMkx1Nnd6WXFlWjFUTWtENjI4cjVDLzAvNUQ5
MTYyNERFQzBFNEVEMzFBM0JGNzkwRUIxRDhENjVDNDNDQjJENi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyTHwMA0EAgACMAcDBQAoBHQIMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQiajANBgkqhkiG9w0BAQsFAAOCAQEAyhK7TRrR2vMhyj9J
C219wXdobjJuozYgpgrC8Mo0US3w65l/U1VXkNNhK/ynP/W2FrzTrd+iAkg5Xg+l
flXKfLwMNwwA6BMuFMCnM+navqZbN/WeUVYnklzpkFjQG3yr+HuwL9+kv/zKIVI1
xHQRThj3ECEQmlkupdmHm/mj4oQkB3yqGgnuJ/ofP/OAeQ/ZFQWYFOP8DfvU178S
f4brNF6wLHbe0e5cz2m+xBkCEU5UIj83jitczAMPQICUG4rpUoYIYMRl2HcCLriQ
f6RYjBOC3TFFth+/DBDuurWPedFNTDDLMO5zicyAceDHOFARba9cnwuhY6JFBGqI
1T/Ijw==
-----END CERTIFICATE-----
Generated at Fri Jun 6 18:17:59 2025 by rpki-client