Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/972E69522EA7E06655376241FB13ED39AF30B19D.cer
File: 972E69522EA7E06655376241FB13ED39AF30B19D.cer (raw, json)
Hash identifier: X13maavFfATVnTdieCgncOSPMAywvIgi4lSC87rd3NQ=
Subject key identifier: 97:2E:69:52:2E:A7:E0:66:55:37:62:41:FB:13:ED:39:AF:30:B1:9D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0BCDF7E245F4DCF700006F6296EF0BFBD48928E6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/972E69522EA7E06655376241FB13ED39AF30B19D.mft
caRepository: rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 28 Jan 2025 18:13:42 +0000
Certificate not after: Tue 27 Jan 2026 18:18:42 +0000
Subordinate resources: AS: 270440
IP: 200.13.84.0/22
IP: 2804:6c04::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:cd:f7:e2:45:f4:dc:f7:00:00:6f:62:96:ef:0b:fb:d4:89:28:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 28 18:13:42 2025 GMT
Not After : Jan 27 18:18:42 2026 GMT
Subject: CN=972E69522EA7E06655376241FB13ED39AF30B19D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c7:fa:25:ed:41:28:fa:c4:4e:63:7c:01:ea:
fd:f3:d2:47:bf:48:68:79:e7:4e:a0:2c:9e:bd:a7:
5c:5e:cd:32:3f:f4:9a:b7:9f:a2:78:90:86:ba:9f:
40:af:25:42:2b:a0:59:27:f8:60:50:0d:1d:a4:4a:
f5:da:6f:04:3f:da:9f:16:c1:a7:02:bb:11:1f:88:
76:6e:0a:4b:26:d2:7f:70:a0:f1:b0:03:07:5f:f5:
06:ed:79:54:3e:d3:dc:24:e2:af:5e:f1:b6:5e:36:
42:c5:49:bc:3a:41:45:c5:f8:06:26:da:ee:21:24:
52:8a:7b:27:e9:5a:39:a1:13:76:78:1f:43:a7:86:
0f:f7:cc:83:1d:f7:d5:ce:e9:e6:7d:58:15:36:3c:
0f:48:62:2b:b2:e1:2b:ce:ab:d6:71:ec:c5:b5:9b:
4e:71:16:b2:f5:00:a2:a3:fd:bc:27:26:ab:73:40:
bf:71:34:5e:99:f2:0f:88:62:8a:64:be:62:93:ac:
03:f7:3e:5e:e1:36:14:0e:50:0c:89:8a:7c:fb:bb:
cd:43:da:4d:e3:84:96:1b:94:12:51:d5:ce:aa:06:
a5:a1:70:5e:84:b6:2c:11:c2:1e:b9:ce:9e:a6:c6:
7d:67:f6:a2:bf:4e:9c:23:e0:ab:4c:b4:d5:94:10:
90:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
97:2E:69:52:2E:A7:E0:66:55:37:62:41:FB:13:ED:39:AF:30:B1:9D
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/972E69522EA7E06655376241FB13ED39AF30B19D.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.13.84.0/22
IPv6:
2804:6c04::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270440
Signature Algorithm: sha256WithRSAEncryption
c4:d8:94:17:25:5b:0e:e4:2f:ae:43:6e:df:4a:fe:45:64:c0:
18:1d:06:23:c4:74:a4:31:85:19:bc:e0:9a:4e:39:0b:9b:de:
1d:8a:55:ab:0c:16:d9:0c:48:de:0c:5c:6e:1f:87:80:3e:5e:
d9:f4:d7:0c:80:fb:5e:c4:16:ac:c1:9a:54:b7:4e:32:ac:22:
c4:22:40:af:a1:b6:b7:e5:13:67:fd:4c:e6:36:ad:f3:63:b7:
9b:52:9f:a8:c4:34:27:e8:7b:b0:31:d5:d1:96:45:19:33:b9:
97:f7:53:c3:2e:87:f1:ab:d6:e3:40:d7:e3:e6:57:8c:bc:a2:
0e:4f:83:26:ea:28:55:af:11:9a:39:f5:a3:ff:e7:aa:ff:f2:
f5:53:72:9b:51:3c:c0:6c:d2:e4:d9:50:30:f7:9f:64:95:b7:
bc:e2:dd:af:b9:a3:b1:36:9c:10:c5:62:03:02:ea:a5:45:d8:
35:6c:1d:a7:6f:1c:72:03:0b:11:ac:3d:d6:2c:f1:25:b0:15:
2f:fa:fa:1c:66:bb:41:c1:db:2e:47:16:ef:dc:33:00:94:9e:
91:a6:d4:28:9d:28:f5:1b:8b:c6:79:3e:c1:49:36:3c:4e:4e:
96:4f:b9:5d:cd:8e:7e:26:a6:c2:06:fa:16:81:88:f2:c4:1f:
57:fb:a1:48
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUC8334kX03PcAAG9ilu8L+9SJKOYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMjgxODEzNDJaFw0yNjAxMjcxODE4NDJaMDMxMTAvBgNV
BAMTKDk3MkU2OTUyMkVBN0UwNjY1NTM3NjI0MUZCMTNFRDM5QUYzMEIxOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqx/ol7UEo+sROY3wB6v3z0ke/
SGh5506gLJ69p1xezTI/9Jq3n6J4kIa6n0CvJUIroFkn+GBQDR2kSvXabwQ/2p8W
wacCuxEfiHZuCksm0n9woPGwAwdf9QbteVQ+09wk4q9e8bZeNkLFSbw6QUXF+AYm
2u4hJFKKeyfpWjmhE3Z4H0Onhg/3zIMd99XO6eZ9WBU2PA9IYiuy4SvOq9Zx7MW1
m05xFrL1AKKj/bwnJqtzQL9xNF6Z8g+IYopkvmKTrAP3Pl7hNhQOUAyJinz7u81D
2k3jhJYblBJR1c6qBqWhcF6EtiwRwh65zp6mxn1n9qK/Tpwj4KtMtNWUEJC3AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSXLmlSLqfgZlU3
YkH7E+05rzCxnTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2dF
NGZXb2pOQlhhaW1jTFdWTFJxdjRqNTlodmdjOTg2NlB0b1RQdEdrSjIvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dn
RTRmV29qTkJYYWltY0xXVkxScXY0ajU5aHZnYzk4NjZQdG9UUHRHa0oyLzAvOTcy
RTY5NTIyRUE3RTA2NjU1Mzc2MjQxRkIxM0VEMzlBRjMwQjE5RC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyA1UMA0EAgACMAcDBQAoBGwEMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQgaDANBgkqhkiG9w0BAQsFAAOCAQEAxNiUFyVbDuQvrkNu
30r+RWTAGB0GI8R0pDGFGbzgmk45C5veHYpVqwwW2QxI3gxcbh+HgD5e2fTXDID7
XsQWrMGaVLdOMqwixCJAr6G2t+UTZ/1M5jat82O3m1KfqMQ0J+h7sDHV0ZZFGTO5
l/dTwy6H8avW40DX4+ZXjLyiDk+DJuooVa8Rmjn1o//nqv/y9VNym1E8wGzS5NlQ
MPefZJW3vOLdr7mjsTacEMViAwLqpUXYNWwdp28ccgMLEaw91izxJbAVL/r6HGa7
QcHbLkcW79wzAJSekabUKJ0o9RuLxnk+wUk2PE5Olk+5Xc2Ofiamwgb6FoGI8sQf
V/uhSA==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:57 2025 by rpki-client