Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BA9E8A914F7631D8CF92ADECDEB3E49C8A0D5B3D.cer
File: BA9E8A914F7631D8CF92ADECDEB3E49C8A0D5B3D.cer (raw, json)
Hash identifier: KcFkFDbis7dhd0Sd6Bo3zqBG1v7H7/OjS0hS5chXNA8=
Subject key identifier: BA:9E:8A:91:4F:76:31:D8:CF:92:AD:EC:DE:B3:E4:9C:8A:0D:5B:3D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2CA4E9BDC407D829EC319494FB4B4701213680A1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/BA9E8A914F7631D8CF92ADECDEB3E49C8A0D5B3D.mft
caRepository: rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 08 Oct 2024 21:21:33 +0000
Certificate not after: Tue 07 Oct 2025 21:26:33 +0000
Subordinate resources: AS: 266194
IP: 45.5.176.0/22
IP: 2804:3c2c::/32
Validation: Failed, certificate revoked on Sun 20 Oct 2024 16:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:a4:e9:bd:c4:07:d8:29:ec:31:94:94:fb:4b:47:01:21:36:80:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Oct 8 21:21:33 2024 GMT
Not After : Oct 7 21:26:33 2025 GMT
Subject: CN=BA9E8A914F7631D8CF92ADECDEB3E49C8A0D5B3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:78:b4:20:c8:c7:27:64:2d:f2:dd:4c:cb:60:
eb:71:fe:3c:96:b3:ed:12:71:5f:95:97:09:0c:e3:
dc:a7:73:d1:59:09:78:60:c1:57:49:b1:c1:67:c2:
a9:d7:62:57:42:c3:b9:fe:eb:61:09:37:3c:b1:22:
f5:99:f2:69:90:4f:3d:9e:b4:9f:c8:87:03:d9:a5:
8e:7c:9f:59:fa:f1:20:70:38:4b:74:aa:15:60:ca:
0e:7c:d9:b7:5b:50:c0:5f:e7:2f:e6:26:15:9f:91:
19:09:42:2e:61:77:87:cb:a6:2a:5d:cc:ac:15:3b:
63:e3:22:a0:05:f5:f8:08:f8:b0:30:5b:01:e5:72:
93:98:d6:67:41:15:93:ad:d3:b0:50:b1:f6:82:ed:
ea:e6:80:6d:7d:cb:cc:43:dd:2a:ba:1a:a1:f1:a7:
cb:c5:ae:7b:e3:de:f3:89:3e:ee:77:72:a0:63:80:
6a:0b:1f:15:03:85:e9:2f:af:5d:04:3d:db:4c:90:
ae:b6:48:fe:73:af:2a:b8:3f:db:f0:dc:04:7a:36:
44:b0:c0:41:83:8e:b5:6c:a6:fb:0e:1d:a6:62:b6:
50:3f:09:51:c8:3f:39:be:e1:82:1f:7d:b6:b9:e8:
c8:28:59:ba:05:c0:72:6a:f2:62:bd:b8:f3:8f:d4:
12:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BA:9E:8A:91:4F:76:31:D8:CF:92:AD:EC:DE:B3:E4:9C:8A:0D:5B:3D
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/BA9E8A914F7631D8CF92ADECDEB3E49C8A0D5B3D.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.176.0/22
IPv6:
2804:3c2c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266194
Signature Algorithm: sha256WithRSAEncryption
95:8b:1f:c9:33:af:9c:55:4c:dd:46:df:de:dc:7e:7d:90:80:
91:0d:78:19:64:01:35:27:ef:b5:46:b1:43:ad:2c:90:a0:16:
a7:b7:54:11:71:8b:cd:1b:cc:6e:f2:7d:3d:9d:e9:a4:12:12:
88:99:87:7a:f8:43:58:ac:47:e5:ef:b0:f6:0b:51:7f:ec:93:
78:fe:be:03:32:b3:27:bb:0f:08:0d:c0:8b:6d:62:f6:b4:b6:
06:c4:92:e1:47:53:d8:2a:e7:f8:92:13:66:70:28:1a:7a:13:
76:7d:f0:44:03:5f:58:cf:f1:69:b5:90:d6:a0:03:a1:e5:70:
1d:6c:48:f2:52:d7:60:04:6c:11:15:4d:c7:6c:d1:b0:5e:db:
6e:24:ff:e4:76:9e:12:78:fa:87:3f:a9:97:38:e0:bf:a1:e9:
6a:5b:d2:45:42:8c:aa:87:a0:57:da:b6:c9:e2:58:83:97:2a:
96:0c:28:f0:be:43:21:b8:e7:a8:50:3a:52:42:a5:18:01:5c:
29:f3:0f:fc:87:71:00:db:63:cb:6e:23:29:cb:f2:ab:38:6b:
1e:b2:21:ed:6c:7c:82:1e:aa:a4:76:eb:7a:85:b4:38:35:f0:
5f:39:b6:1c:52:7b:82:6a:89:89:87:bd:71:b1:fc:11:48:8c:
39:fb:24:a2
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIULKTpvcQH2CnsMZSU+0tHASE2gKEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEwMDgyMTIxMzNaFw0yNTEwMDcyMTI2MzNaMDMxMTAvBgNV
BAMTKEJBOUU4QTkxNEY3NjMxRDhDRjkyQURFQ0RFQjNFNDlDOEEwRDVCM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQeLQgyMcnZC3y3UzLYOtx/jyW
s+0ScV+VlwkM49ync9FZCXhgwVdJscFnwqnXYldCw7n+62EJNzyxIvWZ8mmQTz2e
tJ/IhwPZpY58n1n68SBwOEt0qhVgyg582bdbUMBf5y/mJhWfkRkJQi5hd4fLpipd
zKwVO2PjIqAF9fgI+LAwWwHlcpOY1mdBFZOt07BQsfaC7ermgG19y8xD3Sq6GqHx
p8vFrnvj3vOJPu53cqBjgGoLHxUDhekvr10EPdtMkK62SP5zryq4P9vw3AR6NkSw
wEGDjrVspvsOHaZitlA/CVHIPzm+4YIffba56MgoWboFwHJq8mK9uPOP1BK1AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS6noqRT3Yx2M+S
rezes+Scig1bPTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQm9H
a2Y2YzFUN2tUN3ZLY1Z6b0d1cEhiOVBaWUs0azZUQzQ1THlTekJ3VTQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jv
R2tmNmMxVDdrVDd2S2NWem9HdXBIYjlQWllLNGs2VEM0NUx5U3pCd1U0LzAvQkE5
RThBOTE0Rjc2MzFEOENGOTJBREVDREVCM0U0OUM4QTBENUIzRC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLQWwMA0EAgACMAcDBQAoBDwsMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQP0jANBgkqhkiG9w0BAQsFAAOCAQEAlYsfyTOvnFVM3Ubf
3tx+fZCAkQ14GWQBNSfvtUaxQ60skKAWp7dUEXGLzRvMbvJ9PZ3ppBISiJmHevhD
WKxH5e+w9gtRf+yTeP6+AzKzJ7sPCA3Ai21i9rS2BsSS4UdT2Crn+JITZnAoGnoT
dn3wRANfWM/xabWQ1qADoeVwHWxI8lLXYARsERVNx2zRsF7bbiT/5HaeEnj6hz+p
lzjgv6HpalvSRUKMqoegV9q2yeJYg5cqlgwo8L5DIbjnqFA6UkKlGAFcKfMP/Idx
ANtjy24jKcvyqzhrHrIh7Wx8gh6qpHbreoW0ODXwXzm2HFJ7gmqJiYe9cbH8EUiM
Ofskog==
-----END CERTIFICATE-----
Generated at Sun Oct 20 17:47:47 2024 by rpki-client on console-fra.rpki-client.org