Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2.cer
File: ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2.cer (raw, json)
Hash identifier: zY9nNxeTcHD9xKrW9E0N/CVGfOGjO1KRDmcuQ0qvnU8=
Subject key identifier: AC:F9:AE:0D:17:0D:44:6F:D5:A5:A3:77:A0:EC:AB:AE:B7:F6:27:A2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7B85F348666287E440306267DC1FE0297CA93795
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/1/ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2.mft
caRepository: rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/1
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:27:56 +0000
Certificate not after: Wed 02 Apr 2025 18:32:56 +0000
Subordinate resources: AS: 263902
IP: 138.204.52.0/22
IP: 2804:2774::/32
Validation: Failed, certificate revoked on Fri 05 Jul 2024 01:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:85:f3:48:66:62:87:e4:40:30:62:67:dc:1f:e0:29:7c:a9:37:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:27:56 2024 GMT
Not After : Apr 2 18:32:56 2025 GMT
Subject: CN=ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:e6:ff:97:9e:22:31:ca:5c:98:73:9c:69:
35:dc:79:c3:d5:e2:fc:d0:a5:10:fe:e1:75:1a:c4:
64:a2:6f:fa:1a:87:7e:fb:d9:dc:ae:f1:04:b6:7f:
f6:13:3d:b3:d7:96:b6:89:dd:be:8f:53:03:3e:ff:
b8:67:11:d6:5d:c0:32:9c:7c:57:5d:38:38:23:bf:
38:a3:d9:f5:6b:61:63:bd:3a:72:ca:e9:cf:64:4e:
e3:d2:e0:f7:76:02:8d:94:57:54:7a:82:c7:a3:b1:
54:4d:91:e5:27:a6:64:56:dc:b6:b4:0b:1a:e2:6d:
fb:ec:c0:95:bb:09:46:6e:a7:0f:45:46:cb:30:e6:
19:20:70:a9:d9:6c:d7:6f:2e:76:ad:92:d6:4b:d1:
92:cd:8f:05:8c:c8:08:33:ee:ff:44:ed:4c:bb:5d:
09:69:33:a0:f7:20:d0:90:47:e1:3a:40:6b:ce:6c:
93:9a:f3:ab:7f:74:7a:8b:11:b7:b7:04:ab:c9:96:
38:f6:41:7d:df:07:ee:03:4f:77:c8:f3:a9:c2:d3:
71:d0:94:f9:33:57:1d:05:68:41:2f:82:bb:a2:a4:
24:c9:48:bd:33:49:f5:6b:b4:1c:3b:87:77:1d:8e:
f3:cd:83:f1:1b:52:ba:7d:5c:81:a7:26:50:6f:e6:
11:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AC:F9:AE:0D:17:0D:44:6F:D5:A5:A3:77:A0:EC:AB:AE:B7:F6:27:A2
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/1/ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.52.0/22
IPv6:
2804:2774::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263902
Signature Algorithm: sha256WithRSAEncryption
bc:6d:59:b5:cc:f3:f9:61:d7:6d:9f:d0:53:87:ca:20:7d:11:
48:04:3b:f6:b1:24:f8:65:d2:50:1b:7e:71:a7:7d:e4:bf:08:
b4:18:bb:bd:1b:0a:87:12:36:42:ab:ce:2d:59:95:a5:a1:f4:
cc:42:5a:30:b6:18:cd:7c:ad:81:d5:ca:c3:45:ac:cb:2a:b1:
5a:cc:ea:e5:d8:fb:1b:3a:27:85:4d:03:69:4c:1b:81:4d:10:
18:7f:33:d6:6f:1e:d1:32:e8:0f:ef:9d:d3:89:9e:01:17:9d:
5b:61:6c:9b:b5:71:0c:e8:10:e8:35:8b:67:23:ba:d9:d6:36:
a3:0d:9d:da:3a:48:86:81:c6:81:7b:eb:5a:09:a0:3b:72:17:
83:d4:83:01:89:36:db:8b:a9:68:e8:1e:aa:a3:57:07:ae:12:
79:52:7e:97:6f:07:a6:95:7d:63:0b:12:f8:55:4d:34:1d:be:
f9:af:e1:2c:15:88:80:0e:2a:f3:60:91:03:19:87:f5:40:e5:
6e:cc:c6:6d:9a:3f:b9:ab:0a:d8:c0:51:06:6c:c0:5e:e3:90:
f3:0c:34:f9:65:0a:b7:35:ca:78:e0:22:8f:4d:c1:cf:9a:67:
cc:f2:56:bc:bf:50:8f:89:bc:da:8d:91:b3:60:72:1c:d6:87:
77:e4:3b:fc
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUe4XzSGZih+RAMGJn3B/gKXypN5UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxODI3NTZaFw0yNTA0MDIxODMyNTZaMDMxMTAvBgNV
BAMTKEFDRjlBRTBEMTcwRDQ0NkZENUE1QTM3N0EwRUNBQkFFQjdGNjI3QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6sub/l54iMcpcmHOcaTXcecPV
4vzQpRD+4XUaxGSib/oah3772dyu8QS2f/YTPbPXlraJ3b6PUwM+/7hnEdZdwDKc
fFddODgjvzij2fVrYWO9OnLK6c9kTuPS4Pd2Ao2UV1R6gsejsVRNkeUnpmRW3La0
CxribfvswJW7CUZupw9FRssw5hkgcKnZbNdvLnatktZL0ZLNjwWMyAgz7v9E7Uy7
XQlpM6D3INCQR+E6QGvObJOa86t/dHqLEbe3BKvJljj2QX3fB+4DT3fI86nC03HQ
lPkzVx0FaEEvgruipCTJSL0zSfVrtBw7h3cdjvPNg/EbUrp9XIGnJlBv5hGfAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSs+a4NFw1Eb9Wl
o3eg7Kuut/YnojAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3dn
VjV1c3N5QUNUbXJORVp0YXQyV1llWUNGOXBwc2hiRk1mMXF4SmRoZXEvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3dn
VjV1c3N5QUNUbXJORVp0YXQyV1llWUNGOXBwc2hiRk1mMXF4SmRoZXEvMS9BQ0Y5
QUUwRDE3MEQ0NDZGRDVBNUEzNzdBMEVDQUJBRUI3RjYyN0EyLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAKKzDQwDQQCAAIwBwMFACgEJ3QwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBAbeMA0GCSqGSIb3DQEBCwUAA4IBAQC8bVm1zPP5Yddtn9BT
h8ogfRFIBDv2sST4ZdJQG35xp33kvwi0GLu9GwqHEjZCq84tWZWlofTMQlowthjN
fK2B1crDRazLKrFazOrl2PsbOieFTQNpTBuBTRAYfzPWbx7RMugP753TiZ4BF51b
YWybtXEM6BDoNYtnI7rZ1jajDZ3aOkiGgcaBe+taCaA7cheD1IMBiTbbi6lo6B6q
o1cHrhJ5Un6XbwemlX1jCxL4VU00Hb75r+EsFYiADirzYJEDGYf1QOVuzMZtmj+5
qwrYwFEGbMBe45DzDDT5ZQq3Ncp44CKPTcHPmmfM8la8v1CPibzajZGzYHIc1od3
5Dv8
-----END CERTIFICATE-----
Generated at Fri Jul 5 02:53:42 2024 by rpki-client on console-fra.rpki-client.org