Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
File: A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer (raw, json)
Hash identifier: Q8F6VCVCsbWhkUUakwgQUSQtD2mKW/CCbkPOeXy/ork=
Subject key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3EF0A655D6F29455A79009D493DBA12653BF00D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
caRepository: rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 05 Mar 2025 18:35:42 +0000
Certificate not after: Wed 04 Mar 2026 18:40:42 +0000
Subordinate resources: AS: 61614
IP: 45.232.212.0/22
IP: 168.227.208.0/22
IP: 2804:4afc::/32
Validation: Failed, certificate revoked on Wed 13 Aug 2025 04:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:f0:a6:55:d6:f2:94:55:a7:90:09:d4:93:db:a1:26:53:bf:00:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 5 18:35:42 2025 GMT
Not After : Mar 4 18:40:42 2026 GMT
Subject: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:26:23:82:22:ba:29:39:75:9d:b4:11:5f:53:
0a:c4:38:01:42:ae:93:74:9a:f3:94:37:55:27:43:
15:09:db:89:60:21:1a:08:78:1a:37:4e:92:f7:37:
8c:35:35:5a:91:e9:47:f5:b7:19:02:a0:df:4b:f4:
c6:05:77:24:18:cf:b5:fe:16:b1:83:9a:a8:d6:1d:
76:b2:fd:61:93:fb:5d:05:11:c0:ed:3a:0e:44:a0:
d5:cd:88:52:9b:cd:3e:0e:f6:45:0e:e2:9b:ea:28:
2b:1b:31:01:12:2f:30:93:cd:8e:10:1b:a3:0e:44:
47:b2:f4:19:d7:ab:5f:3b:07:fe:67:02:b2:8d:76:
25:c0:bc:f1:9a:d2:3f:cd:3d:9b:c8:69:f4:04:8a:
91:a9:06:b6:e5:a7:51:dc:71:1f:c0:8c:28:a5:3e:
01:a5:ab:95:4f:bd:32:b4:c3:8b:a8:9b:6f:74:74:
79:3b:f6:4a:e3:a6:98:58:97:2e:45:93:e5:29:d5:
b9:af:1a:af:c3:68:02:94:50:7f:c4:b1:dd:0a:9e:
c1:d3:ec:17:65:83:c3:2d:0e:fd:76:ed:f7:4f:c8:
4d:b0:3a:1e:45:6b:61:60:c1:8d:a7:97:86:b4:b2:
38:a8:82:20:fc:a9:6f:94:66:3f:81:0c:94:26:fe:
27:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.212.0/22
168.227.208.0/22
IPv6:
2804:4afc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61614
Signature Algorithm: sha256WithRSAEncryption
3b:4f:28:90:88:47:c3:8f:69:ca:07:2b:aa:6f:62:0f:77:d5:
ad:6f:7c:85:12:eb:7d:41:7d:df:5c:5c:6b:06:8f:4a:1e:ec:
0a:5d:c7:d8:4b:f3:79:a0:b0:eb:99:58:00:ed:b4:59:8e:3c:
8d:68:a2:6a:25:b1:8f:64:82:2f:e6:7b:86:02:87:9a:e2:34:
d4:b4:e0:e9:73:ab:4d:59:1e:aa:e4:d0:3a:73:2a:98:1c:12:
3f:4f:55:5b:1a:40:09:a6:c5:3b:cf:7e:d9:65:39:d9:d0:02:
f5:6f:2b:e3:69:02:71:49:c5:fd:b5:b5:c4:5f:42:b1:2a:e4:
2e:19:3b:5b:34:38:e1:e2:fd:4a:db:c6:96:46:1a:71:38:99:
b6:f6:60:31:73:6e:06:ea:cc:70:54:d8:b5:24:4f:86:14:09:
d9:3d:4c:5b:10:c2:aa:79:3a:b3:c8:1f:79:fc:ef:8a:fb:bf:
b0:17:a1:17:68:62:6c:51:24:73:dc:1f:0f:6d:19:d1:d6:f8:
f6:94:63:de:b2:05:e0:e2:6e:41:3e:78:13:db:5c:75:2a:65:
ec:33:cc:e7:ef:ea:e0:94:b3:2a:e1:47:ee:51:18:d7:56:ed:
0f:2e:65:28:64:4a:55:8e:9a:15:84:14:46:66:f0:e6:1d:63:
75:82:d2:aa
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgIUPvCmVdbylFWnkAnUk9uhJlO/ANUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDUxODM1NDJaFw0yNjAzMDQxODQwNDJaMDMxMTAvBgNV
BAMTKEE5RTAxMUIzOEIzQTY4MTBDMTBERTI4NUZEOEQyNTZGQUJDRURCQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZJiOCIropOXWdtBFfUwrEOAFC
rpN0mvOUN1UnQxUJ24lgIRoIeBo3TpL3N4w1NVqR6Uf1txkCoN9L9MYFdyQYz7X+
FrGDmqjWHXay/WGT+10FEcDtOg5EoNXNiFKbzT4O9kUO4pvqKCsbMQESLzCTzY4Q
G6MOREey9BnXq187B/5nArKNdiXAvPGa0j/NPZvIafQEipGpBrblp1HccR/AjCil
PgGlq5VPvTK0w4uom290dHk79krjpphYly5Fk+Up1bmvGq/DaAKUUH/Esd0KnsHT
7Bdlg8MtDv127fdPyE2wOh5Fa2FgwY2nl4a0sjiogiD8qW+UZj+BDJQm/ieJAgMB
AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSp4BGzizpoEMEN
4oX9jSVvq87brzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMm5o
OWFkMmM2dlNqYVA1alR3VEhRekNFdkt2b1djeDFKejNpa0hTU2dheUYvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMm5o
OWFkMmM2dlNqYVA1alR3VEhRekNFdkt2b1djeDFKejNpa0hTU2dheUYvMS9BOUUw
MTFCMzhCM0E2ODEwQzEwREUyODVGRDhEMjU2RkFCQ0VEQkFGLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB
Af8EJTAjMBIEAgABMAwDBAIt6NQDBAKo49AwDQQCAAIwBwMFACgESvwwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDAPCuMA0GCSqGSIb3DQEBCwUAA4IBAQA7TyiQiEfD
j2nKByuqb2IPd9Wtb3yFEut9QX3fXFxrBo9KHuwKXcfYS/N5oLDrmVgA7bRZjjyN
aKJqJbGPZIIv5nuGAoea4jTUtODpc6tNWR6q5NA6cyqYHBI/T1VbGkAJpsU7z37Z
ZTnZ0AL1byvjaQJxScX9tbXEX0KxKuQuGTtbNDjh4v1K28aWRhpxOJm29mAxc24G
6sxwVNi1JE+GFAnZPUxbEMKqeTqzyB95/O+K+7+wF6EXaGJsUSRz3B8PbRnR1vj2
lGPesgXg4m5BPngT21x1KmXsM8zn7+rglLMq4UfuURjXVu0PLmUoZEpVjpoVhBRG
ZvDmHWN1gtKq
-----END CERTIFICATE-----
Generated at Fri Sep 19 19:41:34 2025 by rpki-client