
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer
File: 8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer (raw, json)
Hash identifier: UmFV6QHA6CQAb8V2lzFeIzxDo+UpNQnkhP4ZuFQz1UA=
Subject key identifier: 8E:AA:35:4A:58:DA:25:56:3F:A5:0D:71:83:9B:6A:66:10:6F:B7:D8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7D9BD24A81BD850A3BC1B4D6C4BCBCFA0CACCD93
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.mft
caRepository: rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 16:35:20 +0000
Certificate not after: Thu 03 Apr 2025 16:40:20 +0000
Subordinate resources: AS: 271557
IP: 181.233.188.0/22
IP: 2804:7d60::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:9b:d2:4a:81:bd:85:0a:3b:c1:b4:d6:c4:bc:bc:fa:0c:ac:cd:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 16:35:20 2024 GMT
Not After : Apr 3 16:40:20 2025 GMT
Subject: CN=8EAA354A58DA25563FA50D71839B6A66106FB7D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:d0:cc:38:66:f2:c1:5a:7b:75:27:c3:f6:
32:ae:ac:01:1c:a5:23:9b:e4:52:9f:4b:66:fe:0a:
a1:3c:ad:dd:47:6d:5e:16:9f:26:58:97:78:2e:35:
33:98:20:15:dd:d9:90:ec:68:86:d7:f2:2a:ca:70:
53:f9:73:70:dc:d4:b6:a6:51:cc:04:49:a6:e9:41:
a5:af:87:bd:9b:4d:ea:e4:33:7f:d5:99:d9:ff:98:
c1:b6:83:f1:0d:01:62:d2:30:63:56:51:a5:ea:5b:
4f:27:8e:b9:ae:54:3d:0c:b1:1e:8e:f9:81:18:aa:
ff:89:a6:c3:ea:92:13:0d:5f:fc:97:42:50:02:37:
03:fc:79:81:b1:ac:d4:67:e1:1c:69:0c:b5:9a:07:
db:e8:9e:b8:8e:1b:68:b2:9e:9a:5e:fc:de:18:f2:
f0:a8:18:a4:e0:b6:97:40:f0:77:bb:5c:21:4b:6f:
01:16:f7:e0:bc:d4:00:94:ae:9b:aa:65:85:d3:f3:
69:08:b1:c3:a1:47:4a:4a:ff:21:a0:a5:81:71:0e:
0f:59:5e:6b:a9:ae:d1:e5:36:a3:10:a6:cf:16:f8:
37:20:ad:65:3e:37:31:1c:bd:00:f1:8f:ca:9f:b0:
c3:69:ac:ae:f9:ea:ee:ad:b5:1f:21:fb:a2:7e:f8:
21:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8E:AA:35:4A:58:DA:25:56:3F:A5:0D:71:83:9B:6A:66:10:6F:B7:D8
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.233.188.0/22
IPv6:
2804:7d60::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271557
Signature Algorithm: sha256WithRSAEncryption
35:a9:fd:29:96:91:b5:02:a3:5d:31:fc:12:e4:58:3d:88:0e:
b4:1c:bf:7a:d8:bd:5a:7b:a3:53:70:4d:e3:9c:b7:d2:0f:09:
9f:4a:1e:5f:74:e5:d0:b7:e2:70:de:d8:4f:96:3a:b8:08:3a:
fc:05:f7:d1:e4:5c:51:34:a4:8e:8e:a3:14:16:36:4a:36:26:
a0:f2:4e:7c:7a:25:6e:98:64:ac:01:25:3b:6c:4d:b1:fc:a9:
f8:c3:2e:66:17:f4:21:8e:df:56:7a:6f:92:d0:02:25:e2:e6:
2a:cc:09:74:9d:33:a4:b9:10:86:46:dd:67:9c:ac:46:9b:24:
b0:0c:8a:dd:0a:76:0e:06:23:40:17:46:b3:a0:a5:5a:7a:2e:
3a:80:5a:f8:e8:90:43:f0:f9:9a:76:13:c1:41:0a:ce:6b:6d:
76:c5:d8:d6:d0:88:bf:61:23:a9:4a:10:5f:64:66:f4:23:18:
e5:de:91:bb:a0:54:b0:83:68:72:50:e3:b8:0e:cf:91:1e:5c:
1d:31:8d:d6:d5:96:69:32:fd:68:58:f6:1e:13:6d:9a:84:40:
fd:a3:38:a1:a3:74:64:4d:42:4f:9f:3f:fb:78:91:6f:8a:62:
fa:e8:a8:af:29:7a:f6:a2:f8:42:a6:33:36:d4:70:10:d3:22:
09:9d:fc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:52:50 2025 by rpki-client