Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
File: 8D649BA756DE234532A1E9A858DEBF41843906BD.cer (raw, json)
Hash identifier: 3tyG0Ip9hloEl0O0Xgn4nJRPdnyv9Enfm2FvhlWUJr0=
Subject key identifier: 8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 210AE5A8305B08DD6DA5C8548F811772E54599CC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.mft
caRepository: rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 22 Jul 2025 20:37:11 +0000
Certificate not after: Tue 21 Jul 2026 20:42:11 +0000
Subordinate resources: AS: 263427
IP: 45.162.240.0/22
IP: 170.0.200.0/22
IP: 177.91.44.0/22
IP: 2804:119c::/32
Validation: Failed, certificate revoked on Mon 25 Aug 2025 02:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:0a:e5:a8:30:5b:08:dd:6d:a5:c8:54:8f:81:17:72:e5:45:99:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 22 20:37:11 2025 GMT
Not After : Jul 21 20:42:11 2026 GMT
Subject: CN=8D649BA756DE234532A1E9A858DEBF41843906BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0e:ed:5c:a6:53:75:85:d7:04:9d:f2:e5:70:
ed:ef:76:89:31:7e:23:01:d9:f9:d3:f9:e5:3c:2f:
6f:49:92:6a:33:bc:99:f7:b6:f8:da:bb:78:42:59:
1f:78:4b:59:25:5b:83:a5:c0:98:1d:e7:6c:cc:f0:
be:90:60:f8:f0:6f:f6:56:85:92:f4:97:33:d7:4f:
c1:63:3a:d2:17:85:6f:11:cc:6f:58:90:f8:e1:ae:
cd:59:57:60:ff:e4:88:61:cd:2e:a3:54:6c:e5:77:
d3:fb:94:de:1e:f2:64:cc:06:38:fc:31:45:13:27:
65:61:7c:35:06:a4:9c:49:d3:dc:66:6a:c4:1c:d8:
e4:8d:f9:94:1b:51:4e:a2:de:92:8f:a5:fa:d2:bc:
ba:00:24:c9:7e:fd:64:2b:ce:ab:75:44:bf:46:49:
09:05:76:46:bd:6e:06:80:9a:7b:0a:41:71:32:6f:
94:96:2c:53:04:43:e6:72:01:d3:5c:6e:b7:fb:85:
bc:6c:dd:4f:73:84:47:e7:18:38:3f:d3:5e:be:bb:
93:e3:c8:18:8b:2f:00:08:2d:96:3b:e9:34:3e:ae:
9e:35:01:a3:23:9a:b3:8e:fc:cc:81:18:c4:70:4d:
e0:b2:9e:de:b4:d1:00:bd:ef:c8:2e:89:61:10:a8:
df:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.162.240.0/22
170.0.200.0/22
177.91.44.0/22
IPv6:
2804:119c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263427
Signature Algorithm: sha256WithRSAEncryption
7e:75:4e:34:f6:57:e3:09:7f:5b:7b:86:71:f1:dd:4f:ae:52:
88:74:d9:ac:4c:66:2e:a3:d9:2f:b2:ee:d4:23:00:b0:f2:df:
b3:37:e3:d8:ae:5b:b2:8d:68:a0:a6:ea:ad:21:4d:de:73:c8:
d8:e3:21:bc:4b:95:13:14:42:86:dd:c4:0c:f6:69:8d:2b:93:
59:31:65:87:31:d9:46:ee:de:ba:a8:f7:8e:c0:a9:09:08:ee:
a2:44:94:a9:90:aa:f6:ce:cd:d6:5b:b7:2b:ce:28:a6:e2:3f:
a0:32:de:35:32:d6:5c:37:ab:ce:70:ec:9d:8d:02:f3:a5:d3:
0d:70:ad:94:f7:bb:88:5d:b2:42:21:68:07:94:77:4d:c8:65:
c8:e4:c4:e3:6b:29:4a:96:c6:b9:1c:af:22:8a:50:9a:61:0c:
9c:81:f9:01:2a:5f:ad:14:d4:d6:93:b7:49:25:a9:86:d0:7b:
07:21:63:04:e2:bd:f2:f4:db:47:53:91:b2:f9:66:ae:2a:6e:
d1:ae:32:be:6d:25:4e:d8:29:65:0e:ab:11:4c:66:c9:cf:03:
2e:82:67:bd:b0:8b:03:46:f2:af:63:a5:ef:22:82:62:58:d1:
d3:ed:df:d4:79:28:08:c4:3d:1f:37:98:45:bd:d1:8e:52:7e:
b2:be:33:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 17:43:08 2025 by rpki-client