Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/771DE8CD05B7DC3BA5A329B2F110E4AD8D6C7BE0.cer
File: 771DE8CD05B7DC3BA5A329B2F110E4AD8D6C7BE0.cer (raw, json)
Hash identifier: OOCbqs6fSi0S44bzTsqS2tsQiEDSV85kPnlfbj0QlWE=
Subject key identifier: 77:1D:E8:CD:05:B7:DC:3B:A5:A3:29:B2:F1:10:E4:AD:8D:6C:7B:E0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 044FFBACEF5164E59BC10752504B037072A38C1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/771DE8CD05B7DC3BA5A329B2F110E4AD8D6C7BE0.mft
caRepository: rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 03 Jan 2025 14:16:48 +0000
Certificate not after: Fri 02 Jan 2026 14:21:48 +0000
Subordinate resources: AS: 266095
IP: 45.5.100.0/22
IP: 2804:3a8c::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:4f:fb:ac:ef:51:64:e5:9b:c1:07:52:50:4b:03:70:72:a3:8c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 3 14:16:48 2025 GMT
Not After : Jan 2 14:21:48 2026 GMT
Subject: CN=771DE8CD05B7DC3BA5A329B2F110E4AD8D6C7BE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:19:76:bc:b9:e8:3f:4b:97:36:8f:34:29:
6a:e6:5b:81:50:d0:bc:b6:db:26:0a:9c:60:14:8c:
fb:09:d6:e1:4e:56:94:95:21:6f:66:df:ac:30:79:
fb:b6:32:72:91:e9:f8:d4:c2:12:e3:4d:b3:9a:34:
60:99:e2:d6:a5:1d:5d:be:ea:c3:41:72:71:75:0a:
42:64:14:6c:2e:46:56:2c:a2:85:08:a7:1e:3d:35:
b0:06:a1:c2:11:f2:48:f3:70:c3:c5:be:8d:17:bf:
e4:3d:c3:6c:88:d0:0b:a9:8d:28:bb:48:07:5d:c1:
48:01:88:d1:cb:e5:5f:83:f8:82:92:a2:c0:21:2d:
d8:4d:e6:cd:5f:fe:c5:01:6e:9c:45:9e:de:82:2b:
8d:d6:80:ee:72:9a:88:23:6c:5f:8e:50:8f:11:7a:
0f:a5:ef:8d:ea:bf:b2:46:f1:f8:58:4d:8a:42:67:
6f:20:11:3f:75:28:bf:5d:9b:17:ee:1d:09:26:5a:
2e:41:16:40:34:77:04:0b:d4:f5:ce:ed:3b:ab:67:
36:b3:b3:4f:73:49:cc:66:97:2c:02:86:77:e0:b5:
65:75:81:f4:52:42:91:dc:2b:a3:06:a4:c3:01:99:
46:5f:24:f3:3e:98:31:4f:e8:20:c4:07:6a:d6:ef:
ca:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
77:1D:E8:CD:05:B7:DC:3B:A5:A3:29:B2:F1:10:E4:AD:8D:6C:7B:E0
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/771DE8CD05B7DC3BA5A329B2F110E4AD8D6C7BE0.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.100.0/22
IPv6:
2804:3a8c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266095
Signature Algorithm: sha256WithRSAEncryption
bb:3d:fa:20:4c:38:fa:aa:b2:b5:4a:c0:0b:40:68:2a:18:45:
06:2b:06:77:29:6f:05:f9:46:89:74:c9:46:3e:ef:32:95:a7:
fd:87:f5:72:c3:79:b5:13:d2:25:a5:0a:0a:a8:cd:50:5b:54:
6c:bb:73:5c:5f:65:96:84:cf:c4:43:27:02:cc:bc:88:4b:76:
50:79:e0:63:63:50:92:9b:53:c0:8a:b2:d2:fd:c2:0f:46:fa:
ad:00:c4:b1:53:43:9d:7e:34:e7:cd:4f:7f:de:7f:6f:db:12:
ad:dd:86:26:0f:0d:6b:cf:9d:06:19:27:fb:45:ea:51:84:e4:
1b:d2:b4:a5:f4:ec:22:a8:7e:c3:e9:44:f5:b4:f1:f3:23:3e:
be:6a:f6:59:38:5d:57:6c:2f:2f:c4:89:a7:c4:37:4e:d8:15:
cb:4e:d4:8a:14:6f:5f:bd:c9:8e:3f:ac:aa:3f:19:13:e7:86:
c5:fd:14:a1:5b:3c:5a:fc:f0:44:94:c5:a3:7c:2a:34:7b:b3:
b0:d7:bd:a9:1a:8d:a3:55:5d:a5:a3:28:96:9f:c2:39:5c:52:
c5:93:9c:9c:59:5c:34:17:9e:40:5e:b1:71:cf:dc:36:72:68:
e4:41:42:8a:b1:32:71:2a:b7:07:80:e5:64:4d:5c:23:ed:ae:
4d:30:cc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:23 2025 by rpki-client