![](/console.gif)
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/78AE3DD85CE8B1906EC69C301D8A2B0D52E94F96.cer
File: 78AE3DD85CE8B1906EC69C301D8A2B0D52E94F96.cer (raw, json)
Hash identifier: DuIEhHahvQpomryzl8HpNq3WvXlFpM4iavCINXbPDWw=
Subject key identifier: 78:AE:3D:D8:5C:E8:B1:90:6E:C6:9C:30:1D:8A:2B:0D:52:E9:4F:96
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0AED4A1C8E1CD17E329F3BB33C21BCD3D12BF003
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/78AE3DD85CE8B1906EC69C301D8A2B0D52E94F96.mft
caRepository: rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 14 Nov 2024 23:59:27 +0000
Certificate not after: Fri 14 Nov 2025 00:04:27 +0000
Subordinate resources: AS: 267216
IP: 45.231.172.0/22
IP: 2804:4a10::/32
Validation: Failed, certificate revoked on Sun 02 Feb 2025 14:59:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ed:4a:1c:8e:1c:d1:7e:32:9f:3b:b3:3c:21:bc:d3:d1:2b:f0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 14 23:59:27 2024 GMT
Not After : Nov 14 00:04:27 2025 GMT
Subject: CN=78AE3DD85CE8B1906EC69C301D8A2B0D52E94F96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:40:4f:ce:04:df:58:6b:88:2c:b8:bb:82:
79:b0:83:f1:f5:62:ef:55:49:c5:a4:bf:49:15:13:
d7:7e:59:77:14:3e:79:36:01:a9:f6:7a:fb:ed:30:
b7:88:2d:07:32:35:d0:da:99:fc:6c:2a:ca:01:77:
d5:0c:82:c4:dd:fa:ff:74:96:af:dc:cf:68:ca:be:
b0:a9:46:45:9e:a0:4f:ac:54:24:f5:a9:66:b4:94:
e6:1b:e6:1d:4b:f7:61:17:17:bb:e6:82:12:bc:07:
a3:3b:b7:1b:0b:d7:a2:09:c7:f8:82:74:d4:4b:cf:
ed:a9:bb:d5:9d:93:a1:29:e0:bf:36:c6:3c:f8:a2:
4c:23:07:55:2c:78:d7:b4:c8:2d:7f:1b:53:b1:8f:
02:2c:05:16:07:93:4d:4a:0f:ff:81:e0:c4:a3:15:
16:c3:47:4f:70:f6:49:93:cb:df:c3:06:60:23:c5:
c3:2c:15:54:14:da:19:1f:cb:d0:67:45:89:f9:85:
a3:70:6d:11:15:7f:55:97:ca:5b:de:50:9d:76:8e:
35:34:c0:ef:6c:5e:8d:04:cb:97:85:9d:43:cd:9a:
a9:f8:fe:75:60:60:8e:b7:66:40:73:b2:19:fc:4c:
8b:11:bb:b8:86:4b:4e:3b:f3:d9:8f:ff:b5:77:87:
e0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
78:AE:3D:D8:5C:E8:B1:90:6E:C6:9C:30:1D:8A:2B:0D:52:E9:4F:96
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/78AE3DD85CE8B1906EC69C301D8A2B0D52E94F96.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.172.0/22
IPv6:
2804:4a10::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267216
Signature Algorithm: sha256WithRSAEncryption
80:b7:4f:8b:ee:85:85:8a:d9:df:6d:65:1b:1f:1d:9c:1b:29:
db:e8:6d:f6:d6:26:0b:4b:09:ba:5c:ee:ee:d5:1c:e8:8c:6e:
47:b4:2d:0d:de:00:eb:8e:df:b2:74:85:aa:03:cf:b0:73:3d:
c1:3e:f6:51:3e:ff:1d:0a:74:08:4c:70:e5:be:29:ef:13:68:
0e:14:29:b7:35:1a:d4:99:99:cf:bc:cb:8a:ff:48:23:c2:71:
4d:71:d4:bb:2d:59:4d:fa:72:60:0b:7c:b1:9e:d5:36:0f:14:
9d:ba:8b:f2:01:5b:e4:e1:1e:fc:4a:27:98:b5:ff:cd:cf:b3:
13:66:ad:ba:71:71:69:2e:5e:49:0b:35:52:2d:78:af:e0:b8:
34:4f:99:c1:f1:41:79:69:43:dd:d6:62:7d:28:4d:33:a4:55:
48:87:a4:7c:17:6f:e5:0d:fd:3d:ce:5e:c5:27:5f:53:bb:4d:
66:b0:6b:e0:a6:4a:00:f1:6f:2e:bc:47:84:91:26:ad:a2:7c:
e5:cf:65:3c:e1:1a:2b:33:86:c4:40:bd:0a:87:ba:2e:26:c6:
79:68:ad:77:a8:4b:43:f3:6c:fd:ac:0c:af:cd:1c:9c:b2:78:
b1:6a:92:5d:d7:50:4f:ee:57:43:0a:34:58:5f:d8:59:6a:b8:
a5:85:0f:20
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUCu1KHI4c0X4ynzuzPCG809Er8AMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMTQyMzU5MjdaFw0yNTExMTQwMDA0MjdaMDMxMTAvBgNV
BAMTKDc4QUUzREQ4NUNFOEIxOTA2RUM2OUMzMDFEOEEyQjBENTJFOTRGOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp/UBPzgTfWGuILLi7gnmwg/H1
Yu9VScWkv0kVE9d+WXcUPnk2Aan2evvtMLeILQcyNdDamfxsKsoBd9UMgsTd+v90
lq/cz2jKvrCpRkWeoE+sVCT1qWa0lOYb5h1L92EXF7vmghK8B6M7txsL16IJx/iC
dNRLz+2pu9Wdk6Ep4L82xjz4okwjB1UseNe0yC1/G1OxjwIsBRYHk01KD/+B4MSj
FRbDR09w9kmTy9/DBmAjxcMsFVQU2hkfy9BnRYn5haNwbREVf1WXylveUJ12jjU0
wO9sXo0Ey5eFnUPNmqn4/nVgYI63ZkBzshn8TIsRu7iGS04789mP/7V3h+DpAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR4rj3YXOixkG7G
nDAdiisNUulPljAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNjVi
UDFTMkZmc2I3Nk5lbnR6S0g5czVXczZzd0pWaGM3ajlvNHVMUHhVVnUvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzY1
YlAxUzJGZnNiNzZOZW50ektIOXM1V3M2c3dKVmhjN2o5bzR1TFB4VVZ1LzAvNzhB
RTNERDg1Q0U4QjE5MDZFQzY5QzMwMUQ4QTJCMEQ1MkU5NEY5Ni5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLeesMA0EAgACMAcDBQAoBEoQMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQT0DANBgkqhkiG9w0BAQsFAAOCAQEAgLdPi+6FhYrZ321l
Gx8dnBsp2+ht9tYmC0sJulzu7tUc6IxuR7QtDd4A647fsnSFqgPPsHM9wT72UT7/
HQp0CExw5b4p7xNoDhQptzUa1JmZz7zLiv9II8JxTXHUuy1ZTfpyYAt8sZ7VNg8U
nbqL8gFb5OEe/EonmLX/zc+zE2atunFxaS5eSQs1Ui14r+C4NE+ZwfFBeWlD3dZi
fShNM6RVSIekfBdv5Q39Pc5exSdfU7tNZrBr4KZKAPFvLrxHhJEmraJ85c9lPOEa
KzOGxEC9Coe6LibGeWitd6hLQ/Ns/awMr80cnLJ4sWqSXddQT+5XQwo0WF/YWWq4
pYUPIA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:17 2025 by rpki-client