Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A9F6427C32C617D9FC68BBA56D31A88E88DAFF54.cer
File: A9F6427C32C617D9FC68BBA56D31A88E88DAFF54.cer (raw, json)
Hash identifier: v5KKDVmGMzyC76ubp/L5C1gx/SCj5D+N2ANjWCIFFlg=
Subject key identifier: A9:F6:42:7C:32:C6:17:D9:FC:68:BB:A5:6D:31:A8:8E:88:DA:FF:54
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 02A3E37F472023A42092578FEF9A76FCE5D6C1AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/1/A9F6427C32C617D9FC68BBA56D31A88E88DAFF54.mft
caRepository: rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 08:50:05 +0000
Certificate not after: Thu 03 Apr 2025 08:55:05 +0000
Subordinate resources: AS: 28636
IP: 170.150.68.0/22
IP: 179.97.112.0/20
IP: 2804:dc8::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:a3:e3:7f:47:20:23:a4:20:92:57:8f:ef:9a:76:fc:e5:d6:c1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 08:50:05 2024 GMT
Not After : Apr 3 08:55:05 2025 GMT
Subject: CN=A9F6427C32C617D9FC68BBA56D31A88E88DAFF54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e9:78:6f:18:22:2c:4d:ad:3f:9a:15:1e:41:
5b:b9:23:85:4f:35:e1:50:b0:0c:ad:f9:c9:b0:dd:
41:c2:93:2e:49:f6:3f:0e:79:bc:3c:3a:76:7e:c9:
38:4a:b5:89:6c:e7:fd:9a:f6:b2:c9:22:72:1b:31:
82:61:1b:b7:b1:a4:17:40:01:b6:a1:e5:08:73:8b:
e4:69:9f:54:92:1d:bb:e3:42:47:d8:d4:e2:98:61:
29:35:10:cd:c4:fa:89:2e:75:b4:56:79:ab:0b:9a:
f1:3f:c9:d0:50:78:45:60:36:b1:45:fb:e7:4a:05:
1a:3e:89:e1:4b:2c:2c:fc:5a:f6:d7:85:de:2d:4b:
de:b5:e1:55:43:ed:8d:8d:93:5f:b7:1b:0e:bb:1a:
5e:62:ff:a9:12:33:52:6a:7b:d0:1c:d6:b1:91:cc:
ea:8a:ab:0e:bc:0d:09:74:15:e2:b6:dc:54:53:4b:
ce:5a:73:04:e8:9c:6a:85:cb:68:4b:c9:49:18:04:
0a:c3:32:91:12:6b:68:13:72:35:d1:1f:14:94:7b:
44:d6:b2:bb:fb:c7:26:05:5d:ff:e6:6a:c0:a7:9e:
d6:d2:32:ac:33:d1:28:b2:6e:48:8a:db:c4:19:c9:
e5:8a:27:c1:02:fe:52:5e:8f:56:41:04:5b:c3:c7:
ae:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A9:F6:42:7C:32:C6:17:D9:FC:68:BB:A5:6D:31:A8:8E:88:DA:FF:54
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/1/A9F6427C32C617D9FC68BBA56D31A88E88DAFF54.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.150.68.0/22
179.97.112.0/20
IPv6:
2804:dc8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28636
Signature Algorithm: sha256WithRSAEncryption
2c:55:57:20:8c:43:c7:3a:b4:6b:3c:80:c6:59:af:33:d8:b5:
99:11:10:b5:a7:89:aa:52:f3:1b:ff:6c:8f:7f:f0:94:73:5e:
1a:76:a5:46:bb:84:1b:ca:e6:2d:26:72:8a:cf:4e:2f:38:7f:
6a:27:e5:68:7d:db:a9:18:2b:f8:bf:b4:c5:40:a7:a2:0f:a4:
d7:37:2d:80:9b:28:65:03:ea:79:af:8d:da:c1:cb:59:48:fd:
c1:a3:b6:8a:98:f4:2d:06:da:d9:0e:c6:33:1c:6d:1a:bb:bf:
2f:db:d7:6d:f1:2a:48:19:89:61:b3:d9:56:18:75:97:ee:92:
a3:a4:3e:0b:7d:83:f3:ab:49:58:23:c4:0b:c4:b4:28:f9:eb:
78:6e:02:fa:21:c7:54:b6:d0:02:0b:f0:28:d3:a8:a5:05:ea:
8d:34:5b:1d:47:a1:22:ab:70:5b:e1:f3:35:75:e3:3a:24:93:
51:c4:40:25:69:36:a2:25:2c:ca:7f:29:4f:3c:d1:2c:3a:82:
38:25:12:91:7f:56:03:0e:9b:76:41:59:e5:0c:74:7c:46:e6:
00:15:fb:d5:a9:b9:85:69:db:57:84:74:c3:b2:0a:d7:d4:f4:
e9:10:63:1d:b3:3f:06:67:34:0e:0a:f4:f0:fe:cf:0b:41:2f:
0f:a3:c3:05
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgIUAqPjf0cgI6QgkleP75p2/OXWwa0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwODUwMDVaFw0yNTA0MDMwODU1MDVaMDMxMTAvBgNV
BAMTKEE5RjY0MjdDMzJDNjE3RDlGQzY4QkJBNTZEMzFBODhFODhEQUZGNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk6XhvGCIsTa0/mhUeQVu5I4VP
NeFQsAyt+cmw3UHCky5J9j8Oebw8OnZ+yThKtYls5/2a9rLJInIbMYJhG7expBdA
Abah5Qhzi+Rpn1SSHbvjQkfY1OKYYSk1EM3E+okudbRWeasLmvE/ydBQeEVgNrFF
++dKBRo+ieFLLCz8WvbXhd4tS9614VVD7Y2Nk1+3Gw67Gl5i/6kSM1Jqe9Ac1rGR
zOqKqw68DQl0FeK23FRTS85acwTonGqFy2hLyUkYBArDMpESa2gTcjXRHxSUe0TW
srv7xyYFXf/masCnntbSMqwz0SiybkiK28QZyeWKJ8EC/lJej1ZBBFvDx64/AgMB
AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSp9kJ8MsYX2fxo
u6VtMaiOiNr/VDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNWl5
SG84M1NOa2FRQjFQc2llVFF1UFRqRndvR281aHJoOUpVaTV3MU1ENW4vMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVp
eUhvODNTTmthUUIxUHNpZVRRdVBUakZ3b0dvNWhyaDlKVWk1dzFNRDVuLzEvQTlG
NjQyN0MzMkM2MTdEOUZDNjhCQkE1NkQzMUE4OEU4OERBRkY1NC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCqpZEAwQEs2FwMA0EAgACMAcDBQAoBA3IMBkGCCsG
AQUFBwEIAQH/BAowCKAGMAQCAm/cMA0GCSqGSIb3DQEBCwUAA4IBAQAsVVcgjEPH
OrRrPIDGWa8z2LWZERC1p4mqUvMb/2yPf/CUc14adqVGu4QbyuYtJnKKz04vOH9q
J+VofdupGCv4v7TFQKeiD6TXNy2AmyhlA+p5r43awctZSP3Bo7aKmPQtBtrZDsYz
HG0au78v29dt8SpIGYlhs9lWGHWX7pKjpD4LfYPzq0lYI8QLxLQo+et4bgL6IcdU
ttACC/Ao06ilBeqNNFsdR6Eiq3Bb4fM1deM6JJNRxEAlaTaiJSzKfylPPNEsOoI4
JRKRf1YDDpt2QVnlDHR8RuYAFfvVqbmFadtXhHTDsgrX1PTpEGMdsz8GZzQOCvTw
/s8LQS8Po8MF
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:40:16 2025 by rpki-client