Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.cer
File: AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.cer (raw, json)
Hash identifier: lOFeZv+9rIjXfLSRnU3t+tqTSd9RbGHBodfV1UcQci4=
Subject key identifier: AD:72:AB:44:A3:53:1C:FD:69:32:D3:C0:A8:DA:40:F1:37:CA:AC:01
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2CA39161D06BDFB4164A2347AA0ABF0A9DF0914B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.mft
caRepository: rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 30 Jan 2025 18:23:21 +0000
Certificate not after: Thu 29 Jan 2026 18:28:21 +0000
Subordinate resources: AS: 61608
IP: 2804:8270::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:a3:91:61:d0:6b:df:b4:16:4a:23:47:aa:0a:bf:0a:9d:f0:91:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 30 18:23:21 2025 GMT
Not After : Jan 29 18:28:21 2026 GMT
Subject: CN=AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:95:9a:b7:f1:63:d6:b6:03:5b:32:a8:29:
ca:87:dd:5e:c0:8d:fe:d3:1b:29:67:ab:bc:06:4c:
35:eb:e9:fb:51:8e:fb:90:eb:3e:38:cc:7e:07:de:
f3:d5:02:b9:43:7b:b9:ef:89:4a:8f:1c:ae:79:80:
45:6e:a0:07:65:53:eb:2b:6f:fd:11:c6:4b:8f:66:
49:81:07:a3:2d:4a:e7:4e:43:ba:b6:27:72:fa:b5:
00:11:39:de:36:fe:0b:5b:a2:0a:6e:27:10:e6:98:
b8:33:65:26:ae:cb:bd:d0:4d:36:80:8d:0f:d2:3c:
b0:45:39:43:96:c5:a0:3f:ea:18:b9:7c:a8:25:21:
32:e2:07:0b:90:bf:03:ea:27:f0:00:8f:c0:d6:dc:
09:a5:13:fb:84:95:d2:44:fa:fe:c8:02:b7:e4:0b:
a6:d5:60:6d:6a:27:5d:9b:53:30:b2:5e:4d:01:a0:
a7:62:59:94:8c:8a:0c:b2:bb:1c:a5:c9:41:b6:52:
f7:63:d1:dd:e3:59:e8:44:f4:2e:ea:2b:01:98:4d:
60:d9:9c:30:0c:f3:ec:77:f9:96:93:60:62:bb:e7:
95:84:ef:0c:0e:31:c9:31:cc:8d:ff:18:5a:d3:05:
ae:06:31:05:2d:79:38:a2:8a:61:4a:c0:ac:0c:49:
c1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AD:72:AB:44:A3:53:1C:FD:69:32:D3:C0:A8:DA:40:F1:37:CA:AC:01
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8270::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61608
Signature Algorithm: sha256WithRSAEncryption
07:23:dd:83:46:6b:02:90:2d:fa:ad:f2:bb:85:21:2d:25:dd:
5f:c8:42:8d:c8:87:49:5e:47:9c:a7:76:8f:c2:ca:1d:47:d6:
d6:cd:b0:04:c6:0e:ea:5d:f9:ed:53:b4:61:76:6b:6a:e2:fc:
60:2d:de:2a:13:6c:7a:1a:b2:a9:5f:ae:b5:11:10:94:21:7a:
54:93:86:48:62:18:7b:a2:45:10:2a:82:08:36:b2:06:42:1b:
8f:03:67:82:67:09:4f:67:5d:14:61:50:2c:0a:7a:9b:31:af:
7a:f1:2e:35:29:f2:2e:52:47:71:e8:8d:38:b1:07:17:2e:3f:
ca:22:88:68:e1:3a:1f:ba:5b:d1:a1:90:3f:8b:21:19:8e:11:
48:26:77:8b:c1:67:a5:9c:d0:38:6e:53:4c:f7:55:0a:22:09:
7c:bd:47:e7:b1:e2:f0:87:cf:14:5d:d0:bb:4a:29:f8:5c:46:
d4:b6:c5:30:6d:a0:4b:f6:f4:4e:28:71:72:7d:36:ec:c6:4e:
90:3e:c3:1d:7d:68:d1:27:ba:4d:48:68:e9:cf:cd:79:5e:11:
bd:1e:b3:d0:db:7c:1b:ca:0a:fb:c2:31:ac:41:8b:b7:d8:e1:
e2:d2:7c:4a:74:8a:91:20:04:39:6e:fe:db:ae:74:34:df:fc:
36:41:8e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:57 2025 by rpki-client