Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
File: A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer (raw, json)
Hash identifier: bsBkTIiZuXNY7THld0GCBDS0IFhsxQcVxBN2wUgZgJA=
Subject key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0443FA885D570CC9440FB2537516A0FAC162A355
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
caRepository: rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 10 Feb 2025 14:19:57 +0000
Certificate not after: Mon 09 Feb 2026 14:24:57 +0000
Subordinate resources: AS: 28349
AS: 28647
AS: 53008
AS: 53067
AS: 53143
AS: 262420
AS: 265021
AS: 266206
AS: 267203
AS: 267452
AS: 267484
AS: 268555
AS: 268603
AS: 269112
AS: 269489
IP: 45.161.148.0/22
IP: 45.163.96.0/22
IP: 45.179.0.0/22
IP: 45.187.236.0/22
IP: 45.231.136.0/22
IP: 131.0.84.0/22
IP: 131.100.68.0/22
IP: 168.195.236.0/22
IP: 170.0.160.0/22
IP: 177.84.176.0/21
IP: 177.154.64.0/20
IP: 177.185.160.0/19
IP: 179.107.0.0/21
IP: 181.191.76.0/22
IP: 186.193.112.0/20
IP: 186.194.224.0/20
IP: 186.219.96.0/20
IP: 187.85.192.0/19
IP: 187.86.112.0/20
IP: 187.87.64.0/20
IP: 189.51.128.0/19
IP: 189.113.192.0/20
IP: 189.113.216.0/21
IP: 189.126.160.0/19
IP: 200.71.68.0/22
IP: 201.76.224.0/19
IP: 2804:554::/32
IP: 2804:a50::/32
IP: 2804:b1c::/32
IP: 2804:e50::/32
IP: 2804:1a68::/32
IP: 2804:3184::/32
IP: 2804:3c5c::/32
IP: 2804:41b8::/32
IP: 2804:4230::/32
IP: 2804:49c8::/32
IP: 2804:52fc::/32
IP: 2804:53bc::/32
IP: 2804:5f9c::/32
IP: 2804:656c::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:43:fa:88:5d:57:0c:c9:44:0f:b2:53:75:16:a0:fa:c1:62:a3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 10 14:19:57 2025 GMT
Not After : Feb 9 14:24:57 2026 GMT
Subject: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:ea:b3:be:9d:5a:c2:20:eb:4c:5e:09:04:
cc:91:2e:15:d3:40:c0:a3:3a:db:cd:1d:54:88:7d:
d2:4e:db:56:21:18:09:ed:83:f6:88:b0:38:f4:2d:
6d:b4:a3:72:d7:8d:e5:e5:5c:f6:34:17:9c:ec:59:
23:8d:64:ed:d8:df:ad:1d:8b:c8:cf:65:dc:1d:b7:
66:ae:49:57:22:97:75:db:61:5f:e6:f0:ad:57:de:
fe:b6:8e:1d:5e:04:d8:29:98:79:6c:3f:3a:54:7d:
ca:92:7f:7d:86:40:75:94:7e:75:fd:05:04:55:83:
bc:41:65:92:38:a9:17:69:6c:b8:b2:37:e7:ef:41:
58:c1:35:d7:15:a8:0d:f7:7a:5e:03:fa:ab:5d:87:
97:32:84:75:57:1f:16:a7:58:d2:93:6e:c9:cb:c3:
7e:dc:11:a2:dd:8f:25:8b:2d:53:54:b6:94:d9:ed:
49:c1:da:ac:45:93:c0:f5:9c:1b:68:60:cb:38:5a:
69:73:8d:23:7a:02:17:80:50:76:c2:0d:12:cd:fa:
d3:b6:56:99:cd:bc:ea:05:94:f0:a7:a0:4d:4d:d3:
e9:d1:80:a5:17:a3:62:d8:d4:94:87:38:5d:4c:79:
39:dd:f4:5e:fe:1b:59:e6:82:90:de:a7:0b:75:78:
ca:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.148.0/22
45.163.96.0/22
45.179.0.0/22
45.187.236.0/22
45.231.136.0/22
131.0.84.0/22
131.100.68.0/22
168.195.236.0/22
170.0.160.0/22
177.84.176.0/21
177.154.64.0/20
177.185.160.0/19
179.107.0.0/21
181.191.76.0/22
186.193.112.0/20
186.194.224.0/20
186.219.96.0/20
187.85.192.0/19
187.86.112.0/20
187.87.64.0/20
189.51.128.0/19
189.113.192.0/20
189.113.216.0/21
189.126.160.0/19
200.71.68.0/22
201.76.224.0/19
IPv6:
2804:554::/32
2804:a50::/32
2804:b1c::/32
2804:e50::/32
2804:1a68::/32
2804:3184::/32
2804:3c5c::/32
2804:41b8::/32
2804:4230::/32
2804:49c8::/32
2804:52fc::/32
2804:53bc::/32
2804:5f9c::/32
2804:656c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28349
28647
53008
53067
53143
262420
265021
266206
267203
267452
267484
268555
268603
269112
269489
Signature Algorithm: sha256WithRSAEncryption
98:b7:db:93:0e:0a:b6:67:6b:da:ca:f7:35:76:c4:8d:32:25:
a5:fe:97:78:e0:31:5d:1b:87:96:54:ab:3a:e4:a6:fb:ce:17:
1c:2e:1a:db:ca:4f:7b:6e:41:41:77:4a:48:14:b1:59:1d:bd:
48:75:0d:98:28:29:48:ad:32:dd:82:ac:55:7f:50:3c:ba:d4:
69:ca:52:af:09:c1:2b:8f:83:22:58:23:9f:b7:46:82:55:51:
4e:1b:35:83:86:7c:de:d7:53:11:3c:3f:ec:cf:27:15:bb:8d:
b1:ef:8b:84:35:b2:e5:ef:13:18:dd:d4:e5:b6:35:9f:a7:f7:
5a:c5:ce:ed:e3:23:cd:82:8c:ad:ee:58:91:78:28:38:db:4f:
ac:31:0b:76:f4:b6:b9:d6:0f:da:1c:8f:a8:0b:77:71:ff:c8:
59:72:77:b8:6a:84:bb:ad:20:47:19:2f:5a:61:e3:6b:16:5a:
d4:bf:9d:00:d3:29:71:39:7f:0d:44:ab:01:60:96:0f:39:0f:
14:c5:43:a5:75:13:93:e8:c4:d1:0e:88:29:f1:16:36:d7:6a:
58:9e:14:49:ce:4b:7c:4f:94:b5:a7:e3:0b:f5:18:0e:f2:e7:
74:aa:51:fc:de:a2:0a:cb:56:82:cc:82:b5:af:74:16:22:3e:
5a:b8:5e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:31 2025 by rpki-client