Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9BAE48B608C127AF7D05ED6CEBDB68E70461DADD.cer
File: 9BAE48B608C127AF7D05ED6CEBDB68E70461DADD.cer (raw, json)
Hash identifier: WUB+P9fGJpB1udvEZ+MM/2Qt3ajvx60dxScoQVaXKOY=
Subject key identifier: 9B:AE:48:B6:08:C1:27:AF:7D:05:ED:6C:EB:DB:68:E7:04:61:DA:DD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 46D0B0C3726779B6C1384CC7C374662509A89A1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/2/9BAE48B608C127AF7D05ED6CEBDB68E70461DADD.mft
caRepository: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/2/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 22 Jul 2024 17:45:48 +0000
Certificate not after: Mon 21 Jul 2025 17:50:48 +0000
Subordinate resources: AS: 22706
IP: 200.152.80.0/20
Validation: Failed, certificate revoked on Mon 11 Nov 2024 08:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:d0:b0:c3:72:67:79:b6:c1:38:4c:c7:c3:74:66:25:09:a8:9a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 22 17:45:48 2024 GMT
Not After : Jul 21 17:50:48 2025 GMT
Subject: CN=9BAE48B608C127AF7D05ED6CEBDB68E70461DADD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7e:c3:7f:9e:9e:35:27:be:ae:c2:17:5f:0a:
ff:98:26:47:f4:03:09:20:41:6e:48:f4:54:c3:29:
59:b9:aa:6f:65:e4:bc:16:3c:0e:02:83:f5:f9:cb:
5a:7e:a8:21:28:e8:68:3a:f7:15:4f:24:ea:4f:c3:
fb:72:42:ed:20:2a:89:ad:45:18:67:0e:e8:85:64:
09:18:c2:28:07:c0:89:ee:11:3d:d9:a0:14:23:91:
d1:95:3b:d6:56:47:53:3a:22:a9:29:67:c5:02:e7:
f4:e8:3b:41:42:11:33:52:bd:2e:33:a7:9c:85:a2:
ab:58:55:ff:c9:86:86:15:79:2f:da:df:d5:67:ff:
46:35:f6:63:5c:b6:6c:2c:0c:81:4e:da:2c:14:86:
0a:1f:c9:be:0a:d7:49:81:80:69:d1:37:40:6d:aa:
6f:eb:7f:89:bc:e0:44:cd:97:41:a9:41:a6:96:dd:
b8:b5:77:dd:05:dd:bf:da:98:50:62:6e:e1:c6:ec:
fa:2c:6b:1e:cc:f3:4c:6d:da:4e:af:e8:46:e3:c0:
e8:64:60:b9:ec:d1:0c:e4:46:39:dc:23:06:e2:33:
10:04:52:81:1c:44:84:41:22:ff:da:24:f3:c9:b9:
b7:d4:03:3d:15:b1:22:f9:c4:71:52:db:5c:ef:60:
9c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9B:AE:48:B6:08:C1:27:AF:7D:05:ED:6C:EB:DB:68:E7:04:61:DA:DD
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/2/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/2/9BAE48B608C127AF7D05ED6CEBDB68E70461DADD.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.152.80.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
22706
Signature Algorithm: sha256WithRSAEncryption
1c:80:18:e8:ad:ad:01:09:d9:81:73:2a:4d:43:61:f8:30:85:
87:ce:8d:31:47:ef:db:46:b9:53:b8:dd:eb:fc:51:1f:cd:42:
04:fb:bb:f3:6b:9c:44:f4:7f:c7:b2:fb:99:72:f0:7b:38:3e:
46:5b:a5:38:f1:d2:5a:3b:0a:16:b7:7d:43:c0:fa:d0:cc:0c:
4a:5c:6c:9e:5d:79:b9:36:73:4a:a3:c0:a0:a5:94:0d:fe:bd:
7a:60:82:ab:72:3b:a7:61:52:87:bc:69:a8:c7:d9:77:5d:5c:
79:ff:b8:3b:d4:49:16:cf:a5:81:0b:e1:17:23:84:9b:21:d9:
5a:ec:c6:96:ee:c9:03:b2:47:0c:b8:7b:3e:5c:14:54:ac:99:
ec:9b:60:27:2e:1c:01:42:b9:82:24:02:cf:37:cf:67:ae:7b:
8b:a9:9c:96:f1:55:a3:85:41:1e:e6:c1:51:7e:47:8f:1f:6f:
12:f9:16:a0:af:bf:8b:51:36:62:53:4e:1a:c8:d9:2a:95:85:
53:e0:49:78:de:f8:55:51:f9:83:ef:75:ee:e5:4f:ee:00:3f:
fe:b7:34:0e:b4:35:3f:15:a1:0c:f8:28:6b:cc:66:e7:b3:6b:
14:c4:b3:a6:ed:21:bd:6d:b6:65:a8:da:a6:4b:f8:5b:1b:b3:
92:6b:b2:a1
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIURtCww3JnebbBOEzHw3RmJQmomhswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MjIxNzQ1NDhaFw0yNTA3MjExNzUwNDhaMDMxMTAvBgNV
BAMTKDlCQUU0OEI2MDhDMTI3QUY3RDA1RUQ2Q0VCREI2OEU3MDQ2MURBREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8fsN/np41J76uwhdfCv+YJkf0
AwkgQW5I9FTDKVm5qm9l5LwWPA4Cg/X5y1p+qCEo6Gg69xVPJOpPw/tyQu0gKomt
RRhnDuiFZAkYwigHwInuET3ZoBQjkdGVO9ZWR1M6IqkpZ8UC5/ToO0FCETNSvS4z
p5yFoqtYVf/JhoYVeS/a39Vn/0Y19mNctmwsDIFO2iwUhgofyb4K10mBgGnRN0Bt
qm/rf4m84ETNl0GpQaaW3bi1d90F3b/amFBibuHG7Posax7M80xt2k6v6EbjwOhk
YLns0QzkRjncIwbiMxAEUoEcRIRBIv/aJPPJubfUAz0VsSL5xHFS21zvYJw3AgMB
AAGjggMqMIIDJjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSbrki2CMEnr30F
7Wzr22jnBGHa3TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3Ay
a3V4V1l3Q0QyWnVQRmJpTFV0SlBoQW05YjgyMlZyQ01YcjNNRU40bVkvMi8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Nw
Mmt1eFdZd0NEMlp1UEZiaUxVdEpQaEFtOWI4MjJWckNNWHIzTUVONG1ZLzIvOUJB
RTQ4QjYwOEMxMjdBRjdEMDVFRDZDRUJEQjY4RTcwNDYxREFERC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEyJhQMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAliy
MA0GCSqGSIb3DQEBCwUAA4IBAQAcgBjora0BCdmBcypNQ2H4MIWHzo0xR+/bRrlT
uN3r/FEfzUIE+7vza5xE9H/HsvuZcvB7OD5GW6U48dJaOwoWt31DwPrQzAxKXGye
XXm5NnNKo8CgpZQN/r16YIKrcjunYVKHvGmox9l3XVx5/7g71EkWz6WBC+EXI4Sb
Idla7MaW7skDskcMuHs+XBRUrJnsm2AnLhwBQrmCJALPN89nrnuLqZyW8VWjhUEe
5sFRfkePH28S+Ragr7+LUTZiU04ayNkqlYVT4El43vhVUfmD73Xu5U/uAD/+tzQO
tDU/FaEM+ChrzGbns2sUxLOm7SG9bbZlqNqmS/hbG7OSa7Kh
-----END CERTIFICATE-----
Generated at Mon Nov 11 10:09:57 2024 by rpki-client on console-ams.rpki-client.org