Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A48C5704DA7C590E4B5966889452F8EDAEBAB1A8.cer
File: A48C5704DA7C590E4B5966889452F8EDAEBAB1A8.cer (raw, json)
Hash identifier: brXnWFAZJ49Sk2LfbvkBhy3YGgkbJ9eMQdDorvRa2Vw=
Subject key identifier: A4:8C:57:04:DA:7C:59:0E:4B:59:66:88:94:52:F8:ED:AE:BA:B1:A8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5FCC4E48169A5587951CBE999B4305E05501FD80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/A48C5704DA7C590E4B5966889452F8EDAEBAB1A8.mft
caRepository: rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 13 Jan 2025 14:02:19 +0000
Certificate not after: Mon 12 Jan 2026 14:07:19 +0000
Subordinate resources: AS: 262797
IP: 131.72.92.0/22
IP: 179.97.64.0/21
IP: 186.237.0.0/20
IP: 2804:23c::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:cc:4e:48:16:9a:55:87:95:1c:be:99:9b:43:05:e0:55:01:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 13 14:02:19 2025 GMT
Not After : Jan 12 14:07:19 2026 GMT
Subject: CN=A48C5704DA7C590E4B5966889452F8EDAEBAB1A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6c:46:2d:86:7c:3e:b6:16:b2:78:17:34:11:
22:2a:d5:f9:42:ce:b4:61:42:30:76:4a:8d:00:9f:
75:83:b2:0e:f4:6d:6c:06:b1:6b:ef:14:20:97:56:
3b:ff:3c:c5:9e:e1:6b:0e:31:7d:e0:57:bd:a1:96:
39:29:1c:8c:ed:61:87:f8:86:21:00:df:11:93:d4:
2a:98:43:07:fb:cd:c4:54:e6:3a:c9:ba:3e:dc:cc:
74:15:68:7f:11:27:81:48:3a:9a:a7:59:ea:20:ea:
21:d7:f2:8f:02:d5:ff:d9:22:94:41:0b:d4:cc:36:
7b:88:3a:1a:a7:4d:4e:68:b2:f6:b3:83:08:e0:f8:
3b:04:90:c5:89:49:59:df:67:77:08:d9:e6:e5:fe:
c7:c7:37:1d:7a:a5:50:21:43:3e:52:23:7f:dc:4d:
78:e0:5d:df:80:57:e8:a1:e9:e9:64:a5:c1:b2:2d:
dc:04:9e:3c:0b:39:68:ca:71:17:50:95:a1:48:8a:
40:d7:51:87:0b:99:40:9c:54:11:e8:bf:82:50:85:
41:e7:da:90:61:61:10:eb:14:a2:1e:c4:34:b8:5a:
85:84:d4:2d:df:d4:3c:77:31:e0:27:cd:33:9f:1b:
97:10:3b:03:18:9b:ee:e9:0a:d1:a7:1b:2e:20:fa:
82:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A4:8C:57:04:DA:7C:59:0E:4B:59:66:88:94:52:F8:ED:AE:BA:B1:A8
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/A48C5704DA7C590E4B5966889452F8EDAEBAB1A8.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.92.0/22
179.97.64.0/21
186.237.0.0/20
IPv6:
2804:23c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262797
Signature Algorithm: sha256WithRSAEncryption
d5:40:57:ec:eb:67:9c:4d:74:95:cf:6f:17:6e:7e:7f:a1:89:
df:80:a3:1b:26:89:88:48:77:1f:80:d2:22:d5:b6:41:8e:d8:
04:19:22:0b:ea:1d:62:fd:b9:84:ca:3a:2e:9a:d5:d9:f5:4d:
f6:c3:53:6e:0e:c0:1d:74:f5:80:8e:a8:26:6a:ee:8e:1e:7a:
39:a6:4d:2b:2f:b5:97:68:3b:e9:f3:34:87:e4:8c:1b:67:dc:
6d:4e:5a:5b:45:bb:78:77:2b:2c:73:26:44:4c:72:11:e1:fb:
0d:e0:da:1a:13:2e:e8:01:95:9b:af:e2:cb:5d:21:c3:d3:d7:
66:59:c0:9e:67:31:78:d0:a4:79:bd:f7:da:5e:4e:65:df:72:
2d:2e:ce:e1:5b:17:09:c2:67:b1:7a:21:1f:a9:e5:74:df:8d:
f8:ed:6c:db:9b:b6:27:13:d0:49:30:87:03:0a:16:58:a1:45:
83:aa:1b:5b:6d:3b:ab:1a:2b:62:aa:24:e9:bb:70:c3:4b:f0:
87:da:ab:70:04:d1:ff:b8:0b:d3:ee:c3:ef:25:47:c8:e7:7c:
b6:f3:44:ce:f9:6a:48:cc:c3:9f:e2:6a:df:c1:48:43:42:04:
ef:e5:c2:fe:5a:3e:6f:5f:7c:f2:64:69:61:89:44:8f:b8:fb:
58:c9:69:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:55 2025 by rpki-client