Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/95FD3FB0F9F7C3F1651810BB35A5D8A6D2CEFA3D.cer
File: 95FD3FB0F9F7C3F1651810BB35A5D8A6D2CEFA3D.cer (raw, json)
Hash identifier: aQSh9l2CSkIpPM4E0vDr6QHDPWOlvdxCBkY+8rPquso=
Subject key identifier: 95:FD:3F:B0:F9:F7:C3:F1:65:18:10:BB:35:A5:D8:A6:D2:CE:FA:3D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2F5FD36E3947766E35C8F3DFFB68F500C1051E0D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/95FD3FB0F9F7C3F1651810BB35A5D8A6D2CEFA3D.mft
caRepository: rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 27 May 2024 16:21:50 +0000
Certificate not after: Mon 26 May 2025 16:26:50 +0000
Subordinate resources: AS: 61670
IP: 131.100.104.0/22
IP: 2804:1cb4::/32
Validation: Failed, certificate revoked on Tue 15 Oct 2024 01:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:5f:d3:6e:39:47:76:6e:35:c8:f3:df:fb:68:f5:00:c1:05:1e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: May 27 16:21:50 2024 GMT
Not After : May 26 16:26:50 2025 GMT
Subject: CN=95FD3FB0F9F7C3F1651810BB35A5D8A6D2CEFA3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bd:27:fc:31:23:f8:be:0b:5c:08:94:87:63:
00:72:f5:3b:80:03:08:89:d8:23:66:6f:ae:31:76:
dc:4d:65:fc:be:f3:c5:cd:fb:cf:e7:59:84:cd:59:
d9:15:c5:42:1b:f5:6c:a8:54:05:f3:c5:05:37:bb:
3e:40:39:78:52:28:bc:bb:1c:9d:4b:ed:cd:fb:92:
bd:31:bc:b5:63:46:0a:97:21:0e:40:2e:59:c3:89:
68:03:d0:18:06:25:c5:36:13:a0:65:55:e0:6f:6f:
74:95:89:45:10:fc:bd:4f:8a:52:08:e9:57:d0:77:
29:a1:46:35:25:09:6d:23:21:08:51:ca:f1:b1:2a:
ee:5e:8f:72:6c:f9:a3:6f:c9:af:58:77:ea:d6:6f:
1e:5a:67:90:5a:ab:bb:66:30:63:c6:c7:21:25:f8:
be:b5:30:f1:42:7a:f2:89:07:18:81:28:5a:13:98:
ef:b8:8a:82:35:98:7f:d4:24:e4:41:dc:bb:fd:e2:
4e:0c:d2:77:bd:c7:23:7d:3c:8e:e3:84:1a:1c:84:
4c:ae:41:6a:41:fb:2e:1d:6f:90:ba:c4:dd:7a:8e:
ec:5f:50:23:3d:02:84:61:ea:2e:85:c7:7b:1f:20:
a0:63:4a:a4:03:73:94:7f:2f:d4:67:e9:bd:88:80:
05:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
95:FD:3F:B0:F9:F7:C3:F1:65:18:10:BB:35:A5:D8:A6:D2:CE:FA:3D
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/95FD3FB0F9F7C3F1651810BB35A5D8A6D2CEFA3D.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.104.0/22
IPv6:
2804:1cb4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61670
Signature Algorithm: sha256WithRSAEncryption
7d:b2:d6:45:66:ee:32:71:de:c0:b9:fa:3c:80:95:bd:2b:f5:
12:c6:78:76:60:fd:19:88:76:ba:a7:00:e0:98:e2:22:19:49:
6e:24:c0:01:d0:81:be:d8:44:3e:4d:ef:c4:2c:ba:98:3f:07:
7e:e8:79:7d:2e:31:b3:b5:22:e2:10:83:0f:04:28:45:90:69:
61:ab:74:31:d5:46:d3:27:90:37:6e:b1:cf:79:f5:db:83:36:
de:f2:37:f0:3a:e4:10:61:6f:94:91:b5:2e:9c:2c:9a:73:b8:
3a:80:b6:d4:cc:14:d4:53:8f:ad:b6:ad:dd:d5:52:2b:15:b9:
d3:ed:98:52:ec:f2:f6:42:eb:94:ad:e2:0c:f7:00:3d:06:74:
46:e3:ae:c8:c5:f6:cc:0c:d9:75:99:8f:c6:28:d8:83:96:01:
d8:fd:7a:53:bc:29:6b:69:ca:71:7a:dc:48:19:b6:e6:2c:15:
12:25:37:af:b7:25:8f:b5:5b:75:24:ee:0b:af:5b:d8:76:06:
fc:dd:e5:f7:d5:8f:b2:ae:81:39:4e:72:bf:fc:66:ba:7e:23:
be:d2:ea:97:bb:b8:06:49:36:57:98:8e:9e:a5:74:2f:b5:dd:
6b:68:26:40:c6:01:13:ab:85:73:1b:cd:1a:7d:20:70:c5:0a:
ad:3b:ba:10
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUL1/TbjlHdm41yPPf+2j1AMEFHg0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA1MjcxNjIxNTBaFw0yNTA1MjYxNjI2NTBaMDMxMTAvBgNV
BAMTKDk1RkQzRkIwRjlGN0MzRjE2NTE4MTBCQjM1QTVEOEE2RDJDRUZBM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdvSf8MSP4vgtcCJSHYwBy9TuA
AwiJ2CNmb64xdtxNZfy+88XN+8/nWYTNWdkVxUIb9WyoVAXzxQU3uz5AOXhSKLy7
HJ1L7c37kr0xvLVjRgqXIQ5ALlnDiWgD0BgGJcU2E6BlVeBvb3SViUUQ/L1PilII
6VfQdymhRjUlCW0jIQhRyvGxKu5ej3Js+aNvya9Yd+rWbx5aZ5Baq7tmMGPGxyEl
+L61MPFCevKJBxiBKFoTmO+4ioI1mH/UJORB3Lv94k4M0ne9xyN9PI7jhBochEyu
QWpB+y4db5C6xN16juxfUCM9AoRh6i6Fx3sfIKBjSqQDc5R/L9Rn6b2IgAW3AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSV/T+w+ffD8WUY
ELs1pdim0s76PTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSFVo
Tm1DZnBWVUJBQ21qTUw4bXc5R2hVOHNaTlJXbnpiQnRCaVNKRFlkcVovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hV
aE5tQ2ZwVlVCQUNtak1MOG13OUdoVThzWk5SV256YkJ0QmlTSkRZZHFaLzAvOTVG
RDNGQjBGOUY3QzNGMTY1MTgxMEJCMzVBNUQ4QTZEMkNFRkEzRC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCg2RoMA0EAgACMAcDBQAoBBy0MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwDw5jANBgkqhkiG9w0BAQsFAAOCAQEAfbLWRWbuMnHewLn6
PICVvSv1EsZ4dmD9GYh2uqcA4JjiIhlJbiTAAdCBvthEPk3vxCy6mD8Hfuh5fS4x
s7Ui4hCDDwQoRZBpYat0MdVG0yeQN26xz3n124M23vI38DrkEGFvlJG1LpwsmnO4
OoC21MwU1FOPrbat3dVSKxW50+2YUuzy9kLrlK3iDPcAPQZ0RuOuyMX2zAzZdZmP
xijYg5YB2P16U7wpa2nKcXrcSBm25iwVEiU3r7clj7VbdSTuC69b2HYG/N3l99WP
sq6BOU5yv/xmun4jvtLql7u4Bkk2V5iOnqV0L7Xda2gmQMYBE6uFcxvNGn0gcMUK
rTu6EA==
-----END CERTIFICATE-----
Generated at Tue Oct 15 04:23:46 2024 by rpki-client on console-ams.rpki-client.org