Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6BB5D47779C998D7924924980F54C2E604962CE9.cer
File: 6BB5D47779C998D7924924980F54C2E604962CE9.cer (raw, json)
Hash identifier: 5oCRR3vmvfXxoNjdTKXOfZwkKakjwE2SrUPZa/7QzhI=
Subject key identifier: 6B:B5:D4:77:79:C9:98:D7:92:49:24:98:0F:54:C2:E6:04:96:2C:E9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3F9C49E6FF4E12FEEFAA87FF42EE9D8C4D971CF3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/6BB5D47779C998D7924924980F54C2E604962CE9.mft
caRepository: rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 22 Jan 2025 19:54:41 +0000
Certificate not after: Wed 21 Jan 2026 19:59:41 +0000
Subordinate resources: AS: 265033
AS: 268378
IP: 45.239.248.0/22
IP: 170.150.124.0/22
IP: 2804:31b8::/32
IP: 2804:5044::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:9c:49:e6:ff:4e:12:fe:ef:aa:87:ff:42:ee:9d:8c:4d:97:1c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 22 19:54:41 2025 GMT
Not After : Jan 21 19:59:41 2026 GMT
Subject: CN=6BB5D47779C998D7924924980F54C2E604962CE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:f9:74:e7:ab:c3:6b:7b:17:82:29:65:37:
62:75:4b:cd:32:44:05:5a:12:92:c8:b7:2e:e6:e0:
80:66:6c:b3:c0:53:20:c2:9b:e5:8d:cc:2d:fd:d4:
27:3c:36:3c:c3:9e:34:48:9d:cc:e8:d5:e0:1f:03:
f7:b6:1f:bd:06:60:77:85:e6:d5:b1:8c:08:93:0d:
ff:f6:74:3c:ad:ca:00:7f:f1:ba:6f:bc:a3:58:f8:
e8:5d:0a:63:49:03:f5:d5:62:f3:69:9a:e9:3c:78:
f0:c4:71:1e:c8:3b:b8:13:3b:04:4e:5b:9f:b8:51:
09:de:4e:3f:67:58:c8:68:96:71:d6:b2:f5:a9:53:
5e:33:78:ef:f4:fa:9d:55:20:7a:ae:80:28:2d:8c:
f9:ba:04:0a:89:a9:9c:52:83:d0:f6:c5:63:b7:1b:
c9:9a:4c:fd:65:9f:bc:ec:b9:45:13:ea:41:ee:d2:
66:0d:df:92:8c:5a:6e:9c:e9:df:14:3e:78:67:cc:
96:10:e3:73:bc:e0:fc:1e:d3:8d:71:be:fd:1a:e1:
da:9e:1e:36:71:ed:e7:07:05:ed:ce:c9:b8:c7:79:
ae:c0:e3:e9:1c:fc:d1:e1:93:34:58:90:d4:4d:d9:
0e:f4:82:8e:3a:4e:57:dd:12:39:35:a1:56:c1:bc:
07:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6B:B5:D4:77:79:C9:98:D7:92:49:24:98:0F:54:C2:E6:04:96:2C:E9
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/6BB5D47779C998D7924924980F54C2E604962CE9.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.248.0/22
170.150.124.0/22
IPv6:
2804:31b8::/32
2804:5044::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265033
268378
Signature Algorithm: sha256WithRSAEncryption
92:f3:90:16:05:10:e6:be:a2:da:3c:90:b3:e9:7d:45:1d:46:
fc:19:ed:15:de:c6:16:f8:71:00:f0:f1:80:91:a5:c5:72:d4:
97:39:e0:78:fe:46:de:6a:55:cf:2c:cf:33:38:81:d4:3f:86:
d2:89:d1:76:34:a2:ff:2a:df:a9:0f:e0:89:dc:35:bb:1d:15:
0e:80:7e:60:3b:8e:9f:d9:36:0d:34:69:24:d7:3d:4c:aa:86:
eb:dc:04:4d:9b:c2:9f:76:ea:88:4e:fb:97:9d:d9:d2:af:1b:
7e:92:d0:38:ff:4a:af:26:f2:51:ff:48:b7:26:17:0a:ad:f5:
2f:1d:5c:7c:fc:68:a7:9b:7c:e1:83:b4:0e:74:a9:97:15:d0:
51:c2:31:ac:b8:cd:88:8e:c4:cd:ff:f1:a5:96:6f:79:d7:a0:
5c:c4:b5:06:ae:c2:7a:fd:e2:ba:c6:a9:a5:56:c2:21:ac:d0:
64:1b:c3:b6:81:9e:a2:b3:22:f9:be:f7:12:93:16:cc:71:99:
ab:5d:ba:0d:48:0d:10:0c:ee:46:9d:33:fa:2b:d2:55:23:31:
5d:f2:78:b9:81:f8:b3:5c:7e:8b:6f:03:56:fa:2a:31:42:a7:
e5:3b:69:cd:22:87:1c:89:ea:aa:b9:82:d1:b7:44:db:90:45:
94:6d:e4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:51:50 2025 by rpki-client