Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7DC5BFF6988E9D9A24F06792B0B71CBDB53685CC.cer
File: 7DC5BFF6988E9D9A24F06792B0B71CBDB53685CC.cer (raw, json)
Hash identifier: TSPspj6iom/D5+2RLmt8i1qe4pECDxK4UGSlsqQGDPs=
Subject key identifier: 7D:C5:BF:F6:98:8E:9D:9A:24:F0:67:92:B0:B7:1C:BD:B5:36:85:CC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1109B802FDEB95AC0ADD0DA8A7E670F5707B1303
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/7DC5BFF6988E9D9A24F06792B0B71CBDB53685CC.mft
caRepository: rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 13:16:43 +0000
Certificate not after: Thu 03 Apr 2025 13:21:43 +0000
Subordinate resources: AS: 262458
IP: 177.53.48.0/21
IP: 200.9.220.0/22
IP: 2804:4ac::/32
Validation: Failed, certificate revoked on Sun 25 Aug 2024 10:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:09:b8:02:fd:eb:95:ac:0a:dd:0d:a8:a7:e6:70:f5:70:7b:13:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 13:16:43 2024 GMT
Not After : Apr 3 13:21:43 2025 GMT
Subject: CN=7DC5BFF6988E9D9A24F06792B0B71CBDB53685CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:2e:fa:32:fd:b6:b0:64:5c:9e:a7:b9:f7:
59:42:06:67:fd:5b:61:40:75:b9:ba:cc:b2:1a:9e:
af:7c:a1:a8:50:58:4c:50:5f:4f:00:a4:b8:e5:6b:
b1:9f:9b:d0:92:85:d0:07:52:dd:62:32:bf:7f:f3:
98:e0:a7:cb:e5:65:17:31:37:df:86:4c:45:5b:cb:
e7:0d:48:8e:d9:ff:2a:9f:58:75:9b:1a:55:a4:d0:
9a:d9:ba:82:31:ee:af:f9:86:11:98:62:f8:22:51:
b4:49:86:e2:21:2c:98:79:0f:a4:d6:de:80:2c:4f:
ac:58:94:c7:ee:09:48:ec:1a:a4:e2:a9:2e:5e:a5:
42:27:42:32:83:f4:56:5b:f2:3d:3f:65:61:67:55:
dc:e8:34:0d:db:5e:60:70:6f:b0:bf:04:46:2b:0c:
24:fd:1a:57:17:da:a0:fe:17:b2:6d:93:15:18:93:
06:88:72:31:e7:38:aa:d5:09:2f:3a:6b:93:67:a0:
7e:66:02:fd:86:3f:ba:99:1f:c2:75:1e:4a:2c:cc:
0c:af:0b:b8:c2:a8:70:9d:60:3b:64:53:ab:75:63:
19:51:1f:be:0c:bf:0b:d0:a8:5f:e6:a6:d2:18:75:
43:9b:89:2d:82:9f:63:58:82:3d:d0:b9:10:e9:7c:
e4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
7D:C5:BF:F6:98:8E:9D:9A:24:F0:67:92:B0:B7:1C:BD:B5:36:85:CC
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/7DC5BFF6988E9D9A24F06792B0B71CBDB53685CC.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.53.48.0/21
200.9.220.0/22
IPv6:
2804:4ac::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262458
Signature Algorithm: sha256WithRSAEncryption
68:5d:ff:a1:6e:cf:e9:b9:de:05:04:22:c1:80:1d:5c:0f:84:
c9:24:69:39:70:e4:58:24:73:f4:48:80:14:dd:22:73:1f:0f:
46:fd:02:c5:68:57:94:4c:13:77:f2:64:2c:24:8d:0c:bb:23:
41:56:b9:38:ff:69:aa:68:8c:05:30:7b:f4:d3:8c:59:ee:d8:
56:0b:82:27:9f:da:2e:ab:40:59:67:3e:0b:df:ed:60:71:54:
67:a6:10:fb:43:2f:ea:2f:43:1f:71:b0:b8:bc:94:06:24:44:
11:f5:99:05:fb:e2:b9:1f:56:90:2d:4e:7f:51:9b:66:3f:50:
1b:b3:20:2e:59:fd:30:36:72:6c:ea:71:0a:17:2d:c9:8b:9e:
0c:8a:c0:e3:21:7e:31:cb:68:0b:99:2b:ae:66:2a:0e:d8:a9:
f3:42:99:b7:61:d3:18:fa:31:24:d8:00:59:d6:12:84:64:92:
65:cf:ba:3c:ce:f7:01:04:82:24:83:01:61:34:a9:1f:fb:4a:
3f:51:15:88:80:e1:e0:f5:31:9a:b4:2b:75:db:7e:7e:d3:ac:
a4:8a:08:f3:8a:df:40:ba:a3:c4:0c:59:1a:c1:5c:e9:eb:31:
5f:1b:9f:43:33:4f:33:1c:eb:1b:77:18:c6:35:80:72:bd:2c:
7c:62:e9:b2
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUEQm4Av3rlawK3Q2op+Zw9XB7EwMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxMzE2NDNaFw0yNTA0MDMxMzIxNDNaMDMxMTAvBgNV
BAMTKDdEQzVCRkY2OTg4RTlEOUEyNEYwNjc5MkIwQjcxQ0JEQjUzNjg1Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5YS76Mv22sGRcnqe591lCBmf9
W2FAdbm6zLIanq98oahQWExQX08ApLjla7Gfm9CShdAHUt1iMr9/85jgp8vlZRcx
N9+GTEVby+cNSI7Z/yqfWHWbGlWk0JrZuoIx7q/5hhGYYvgiUbRJhuIhLJh5D6TW
3oAsT6xYlMfuCUjsGqTiqS5epUInQjKD9FZb8j0/ZWFnVdzoNA3bXmBwb7C/BEYr
DCT9GlcX2qD+F7JtkxUYkwaIcjHnOKrVCS86a5NnoH5mAv2GP7qZH8J1HkoszAyv
C7jCqHCdYDtkU6t1YxlRH74MvwvQqF/mptIYdUObiS2Cn2NYgj3QuRDpfOQXAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR9xb/2mI6dmiTw
Z5Kwtxy9tTaFzDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWpy
a0ozd1dSMko3ZXRlN0U3VjV2NTQ0eXVkR3h0U3U0VTNDS3J1QXJ2UHUvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Fq
cmtKM3dXUjJKN2V0ZTdFN1Y1djU0NHl1ZEd4dFN1NFUzQ0tydUFydlB1LzAvN0RD
NUJGRjY5ODhFOUQ5QTI0RjA2NzkyQjBCNzFDQkRCNTM2ODVDQy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQDsTUwAwQCyAncMA0EAgACMAcDBQAoBASsMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQBOjANBgkqhkiG9w0BAQsFAAOCAQEAaF3/oW7P
6bneBQQiwYAdXA+EySRpOXDkWCRz9EiAFN0icx8PRv0CxWhXlEwTd/JkLCSNDLsj
QVa5OP9pqmiMBTB79NOMWe7YVguCJ5/aLqtAWWc+C9/tYHFUZ6YQ+0Mv6i9DH3Gw
uLyUBiREEfWZBfviuR9WkC1Of1GbZj9QG7MgLln9MDZybOpxChctyYueDIrA4yF+
MctoC5krrmYqDtip80KZt2HTGPoxJNgAWdYShGSSZc+6PM73AQSCJIMBYTSpH/tK
P1EViIDh4PUxmrQrddt+ftOspIoI84rfQLqjxAxZGsFc6esxXxufQzNPMxzrG3cY
xjWAcr0sfGLpsg==
-----END CERTIFICATE-----
Generated at Sun Aug 25 13:03:13 2024 by rpki-client on console-fra.rpki-client.org