Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7B82A2A1CC9CDE4A7FFE900F6C1F204C40AE019A.cer
File: 7B82A2A1CC9CDE4A7FFE900F6C1F204C40AE019A.cer (raw, json)
Hash identifier: goa3RGfzBpzoiW11atUjuSYRqLJ0m/HHmaIYpyUd0Jg=
Subject key identifier: 7B:82:A2:A1:CC:9C:DE:4A:7F:FE:90:0F:6C:1F:20:4C:40:AE:01:9A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5DCA859694E7D8017DC15A6EECCEE180D31D7A4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/7B82A2A1CC9CDE4A7FFE900F6C1F204C40AE019A.mft
caRepository: rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 29 Jan 2025 19:01:50 +0000
Certificate not after: Wed 28 Jan 2026 19:06:50 +0000
Subordinate resources: AS: 267388
IP: 45.4.156.0/22
IP: 45.7.0.0/22
IP: 45.174.208.0/22
IP: 45.234.248.0/22
IP: 131.196.40.0/22
IP: 132.255.44.0/22
IP: 2804:4cbc::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ca:85:96:94:e7:d8:01:7d:c1:5a:6e:ec:ce:e1:80:d3:1d:7a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 29 19:01:50 2025 GMT
Not After : Jan 28 19:06:50 2026 GMT
Subject: CN=7B82A2A1CC9CDE4A7FFE900F6C1F204C40AE019A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:43:de:4b:78:7c:de:35:95:31:32:2e:e5:
e6:6c:88:67:6b:70:90:34:7d:9a:cb:89:3d:7c:09:
b2:0a:a3:d6:b1:2b:16:23:cd:12:4a:2c:71:f9:6b:
79:22:08:f3:59:b0:47:93:00:bd:f1:47:01:c9:8b:
35:5b:26:92:0b:1c:3a:af:f8:b5:ae:5a:eb:a1:0d:
c3:b0:5b:99:13:85:5c:fe:50:5a:f3:83:ba:44:f1:
78:72:be:fd:d8:3b:9b:d7:e4:5f:b3:23:80:31:49:
b9:a0:ad:08:ff:14:98:36:52:55:e6:76:4d:c5:34:
25:82:47:c3:55:19:e1:4b:a1:9a:88:3a:22:6f:60:
84:12:b2:aa:00:04:8d:cd:64:16:15:da:11:36:34:
d7:61:4a:16:fd:c5:17:95:48:a5:a9:ac:ec:6b:24:
77:54:cf:9a:55:98:ec:87:d1:fa:ce:9f:39:db:cd:
70:a2:b5:7b:76:86:6d:94:44:f3:a5:71:d2:5c:98:
03:57:bb:e9:4f:e5:50:ab:3c:f2:51:85:2c:54:74:
dd:17:c1:ae:eb:9e:ae:e7:f9:75:8c:7b:cb:e6:9a:
26:d0:ec:26:9c:1d:30:47:52:10:6e:91:d5:00:8a:
af:97:30:de:dd:2d:e3:46:21:cd:d8:21:47:53:47:
89:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
7B:82:A2:A1:CC:9C:DE:4A:7F:FE:90:0F:6C:1F:20:4C:40:AE:01:9A
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/7B82A2A1CC9CDE4A7FFE900F6C1F204C40AE019A.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.156.0/22
45.7.0.0/22
45.174.208.0/22
45.234.248.0/22
131.196.40.0/22
132.255.44.0/22
IPv6:
2804:4cbc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267388
Signature Algorithm: sha256WithRSAEncryption
88:51:de:52:67:4d:5c:66:db:6d:21:92:2a:03:2f:7c:8d:f0:
6e:49:15:d5:f1:5f:55:9f:4f:89:fa:de:3b:5a:ac:79:f3:37:
28:14:43:79:5f:3d:4a:77:d6:7a:37:cd:bf:fb:d5:69:7e:40:
3f:f9:e9:7d:71:32:e6:f4:d8:53:84:e4:a1:28:09:4b:15:07:
d3:57:6a:7c:88:6a:17:ae:ed:f8:14:e6:83:a8:11:79:f5:ff:
75:a5:0d:6b:38:39:38:6e:bc:29:08:60:d9:b2:ec:78:b6:09:
1d:f9:50:5d:97:f2:5a:35:71:9f:1e:37:46:43:77:8a:17:d7:
b8:82:09:07:90:c9:16:ee:50:e4:3b:d0:b3:08:fd:39:83:c9:
65:58:31:2a:8e:8f:a7:38:2b:08:68:7b:87:c0:64:6f:1d:ad:
ea:77:64:38:5e:82:4a:93:ec:d1:d4:78:37:2f:e6:8a:70:91:
5b:f0:1e:43:5a:a6:f1:67:e2:21:ff:6b:fd:d6:52:72:a3:5c:
a1:a6:9b:d6:8b:c4:c0:51:e2:cf:7b:b9:19:0e:2e:09:fb:58:
59:a0:a5:94:5d:e5:0d:0b:02:71:2c:57:8f:41:e5:f0:93:ac:
53:e1:d0:ab:0c:62:64:fe:75:a7:f4:35:11:14:30:e6:9a:09:
0d:3c:ec:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:17 2025 by rpki-client