Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B8839D511120CC6A24C5D5373822EC130EBFA1BF.cer
File: B8839D511120CC6A24C5D5373822EC130EBFA1BF.cer (raw, json)
Hash identifier: PxYhFnEbJwPW40mg82wpEAjRh6krGKfKAHJlVfvbnUY=
Subject key identifier: B8:83:9D:51:11:20:CC:6A:24:C5:D5:37:38:22:EC:13:0E:BF:A1:BF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3305A354AF9AF6E42BF283EB9027918D67B5FC2E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B8839D511120CC6A24C5D5373822EC130EBFA1BF.mft
caRepository: rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 04 Feb 2025 12:05:18 +0000
Certificate not after: Tue 03 Feb 2026 12:10:18 +0000
Subordinate resources: AS: 61796
IP: 201.159.180.0/22
IP: 2804:1978::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:05:a3:54:af:9a:f6:e4:2b:f2:83:eb:90:27:91:8d:67:b5:fc:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 4 12:05:18 2025 GMT
Not After : Feb 3 12:10:18 2026 GMT
Subject: CN=B8839D511120CC6A24C5D5373822EC130EBFA1BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:68:d7:53:dd:7d:97:7b:af:18:5c:f2:d7:c3:
86:f0:02:29:ef:51:1d:e6:5a:b9:7a:9a:63:02:8b:
73:8d:df:fb:ea:f2:62:4f:ff:fa:b5:90:06:1b:e4:
67:d0:3a:4f:af:04:11:84:d1:6f:31:a9:c4:eb:57:
22:32:28:fd:ea:4f:ac:0a:eb:65:c9:d0:2d:30:a0:
8a:57:19:54:7d:6e:ed:76:dc:fb:e1:d3:21:44:23:
3f:71:c3:d8:b9:a2:7c:b6:c2:32:7e:92:fc:12:4c:
c7:a5:45:57:e2:df:2f:76:f5:72:6f:e0:89:d6:05:
4f:9b:e9:4c:87:b5:6e:8b:4a:3a:5c:de:c1:cc:ed:
8d:c0:c7:d2:87:20:33:51:cf:f6:9a:a7:b5:dd:7b:
3e:9a:b5:0f:2f:88:2e:b2:38:91:36:2e:0c:c4:fa:
56:16:fc:e5:c1:f5:96:6f:99:a7:5a:a6:75:fd:81:
8a:00:54:eb:06:09:93:f2:c6:11:82:cc:73:aa:f3:
41:47:a7:7e:e3:13:0a:29:13:9d:c7:dd:94:54:76:
e8:f4:74:b1:13:d1:93:5d:ab:7d:5a:a0:a9:0d:d8:
59:72:ef:6a:c6:9b:4b:85:c8:a2:4a:19:47:a8:c3:
9f:a6:e7:15:03:4e:44:8b:4e:b8:84:d5:9f:75:a3:
dc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B8:83:9D:51:11:20:CC:6A:24:C5:D5:37:38:22:EC:13:0E:BF:A1:BF
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B8839D511120CC6A24C5D5373822EC130EBFA1BF.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.159.180.0/22
IPv6:
2804:1978::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61796
Signature Algorithm: sha256WithRSAEncryption
5b:d4:e6:74:72:ac:b9:df:b9:92:e4:10:6b:e6:b0:32:b6:b2:
26:f6:3e:53:eb:33:e1:15:cc:50:9f:40:9a:2e:71:14:69:ac:
dc:5d:ef:23:07:79:fe:b0:80:42:34:55:b7:23:98:7c:a7:30:
bd:77:20:da:54:e5:20:b3:a1:38:37:af:a6:e9:f7:7d:b8:2e:
22:fe:19:0f:c5:21:db:04:d4:b5:9c:d5:19:fe:60:b6:e8:58:
4b:44:3f:2e:e7:59:5d:2e:6b:43:b9:34:49:1c:16:98:c7:fd:
93:9d:09:fd:8b:22:f1:45:cd:8f:95:7f:60:9f:de:a7:ce:52:
36:df:6e:3e:01:a5:68:9f:8f:3e:06:81:b9:83:6c:2c:b6:4b:
28:4a:1c:e2:25:54:28:e7:69:4e:e7:71:33:85:a2:fc:33:cc:
51:b4:bc:31:c9:36:74:b1:68:65:d6:e1:d0:bc:30:76:e8:43:
7f:d4:b8:e0:7b:d3:2f:84:eb:bb:20:9d:8c:28:c1:5b:b2:92:
5a:63:43:13:a1:74:aa:be:d5:35:78:cf:2d:29:12:78:42:73:
2d:41:0b:6f:1b:77:6c:ca:31:40:f8:85:93:1d:54:e7:9b:1a:
a1:03:3b:d7:6f:9d:85:f0:0e:18:27:b9:17:7e:39:bc:5d:b9:
f1:cb:fc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:53 2025 by rpki-client