Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/66A905B603B8C9653EF28A833598778E6BADFB72.cer
File: 66A905B603B8C9653EF28A833598778E6BADFB72.cer (raw, json)
Hash identifier: u3GxLVKRRJYf1iX4Q8s1VcZhWrpNEdd5ecK18DV1Lgc=
Subject key identifier: 66:A9:05:B6:03:B8:C9:65:3E:F2:8A:83:35:98:77:8E:6B:AD:FB:72
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 45C72D7D855D7920A5CC7A849D3B1841A1F0D066
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/1/66A905B603B8C9653EF28A833598778E6BADFB72.mft
caRepository: rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:54:59 +0000
Certificate not after: Wed 02 Apr 2025 18:59:59 +0000
Subordinate resources: AS: 263980
IP: 45.232.200.0/22
IP: 138.255.244.0/22
IP: 168.227.16.0/22
IP: 170.245.120.0/22
IP: 191.37.7.0/24
IP: 2804:28c8::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:c7:2d:7d:85:5d:79:20:a5:cc:7a:84:9d:3b:18:41:a1:f0:d0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:54:59 2024 GMT
Not After : Apr 2 18:59:59 2025 GMT
Subject: CN=66A905B603B8C9653EF28A833598778E6BADFB72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f9:21:94:47:d3:8a:27:be:a5:f0:27:d4:5a:
ea:00:ed:fa:b6:7b:ce:67:ba:83:d6:8a:53:51:fc:
30:22:b5:95:61:73:76:b0:a0:17:56:86:bb:cc:4f:
dd:f7:c8:fd:86:2f:ba:07:89:6d:84:6a:15:81:d7:
62:45:78:7f:20:7c:ae:93:fa:5f:2d:68:a3:6e:c8:
ae:53:0d:c1:4e:04:2d:8e:7f:bd:fd:ac:b0:c6:06:
24:a1:b8:53:44:ef:59:93:ba:9f:41:df:9f:91:ef:
91:5f:69:9a:7b:81:fa:23:4b:b0:a8:53:79:c3:48:
06:ec:81:81:f8:3d:7a:35:b5:c6:32:bf:3d:04:4e:
94:3d:a2:53:7f:60:ab:00:4d:b9:98:94:74:c5:f7:
bf:1f:fa:8a:8f:bd:16:df:f2:63:7b:48:a3:ea:ee:
e0:48:aa:c7:b3:2c:e0:9b:59:f8:1e:19:a8:31:28:
3f:54:54:ff:e6:64:59:b6:40:61:e7:f8:e4:a1:fe:
5c:dc:34:cf:71:d5:24:dd:3b:8f:ca:0d:46:9b:c8:
30:5c:48:71:31:6b:2e:6f:cb:81:40:f9:6d:21:91:
78:03:0e:bb:28:62:23:53:2b:11:1c:20:32:ab:a1:
0b:0e:97:88:37:01:75:f2:d0:35:ea:6f:de:a4:69:
09:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
66:A9:05:B6:03:B8:C9:65:3E:F2:8A:83:35:98:77:8E:6B:AD:FB:72
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/1/66A905B603B8C9653EF28A833598778E6BADFB72.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.200.0/22
138.255.244.0/22
168.227.16.0/22
170.245.120.0/22
191.37.7.0/24
IPv6:
2804:28c8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263980
Signature Algorithm: sha256WithRSAEncryption
82:78:29:f9:98:45:7d:28:04:14:82:b4:2f:1b:c5:42:1a:c7:
13:2d:1f:a2:93:ca:13:d5:18:f8:e7:e9:99:9c:06:f6:e8:1e:
89:d6:99:1b:5c:39:87:c0:e9:7b:4b:85:75:d7:9b:5e:ad:61:
69:b9:0d:c1:c3:25:47:49:31:3f:d0:0f:da:17:9b:28:c9:98:
a0:cc:ec:1b:02:4d:3b:87:67:bf:de:23:42:df:71:81:54:40:
07:4d:96:4a:fc:ad:69:c7:2e:f1:b0:9b:e1:be:60:ef:c1:ec:
0d:d6:55:73:f0:13:19:99:e3:25:71:0a:a5:f7:5f:51:40:9a:
52:e2:18:37:a4:91:e4:84:dd:93:c0:72:a5:20:a8:09:77:81:
69:5d:1f:28:fa:35:bc:4b:1c:3e:df:ea:d2:8b:eb:77:ec:7e:
ce:a4:7c:95:a7:8f:2b:d4:11:37:df:4b:de:ea:55:44:0a:92:
c0:2d:43:95:de:1e:25:1a:78:c0:fb:be:ba:0a:e5:75:2e:0c:
9c:2d:21:52:fa:6e:d4:54:40:80:2d:ac:f4:53:9b:9f:45:93:
c5:0b:cc:6b:d2:be:47:fa:56:90:02:2f:4b:9b:0f:75:b8:fd:
a4:78:6c:32:e2:86:49:27:cd:ca:09:7e:62:38:06:df:33:6b:
b1:c4:47:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:15:24 2025 by rpki-client