Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.cer
File: BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.cer (raw, json)
Hash identifier: x40KMduhW38eUouyxOMqNMiVNUVcqrF9Dy5K+kt0AQk=
Subject key identifier: BC:61:E6:D5:F8:50:C8:FF:71:4F:E8:34:B7:A2:E7:1D:62:AB:BC:5C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 51790C6E2CF13A1F981BCB53FA3B50B248E32821
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.mft
caRepository: rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 03 Sep 2024 18:26:45 +0000
Certificate not after: Tue 02 Sep 2025 18:31:45 +0000
Subordinate resources: AS: 11097
IP: 192.207.194.0/24
IP: 200.0.70.0/24
IP: 200.202.128.0/18
IP: 2801:80:1400::/40
Validation: Failed, certificate revoked on Thu 19 Dec 2024 17:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:79:0c:6e:2c:f1:3a:1f:98:1b:cb:53:fa:3b:50:b2:48:e3:28:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 3 18:26:45 2024 GMT
Not After : Sep 2 18:31:45 2025 GMT
Subject: CN=BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:74:cf:60:c6:5b:95:8b:6c:ed:0c:88:fb:d5:
e3:ac:a3:52:82:4f:f0:9e:7e:65:89:cd:c2:67:53:
aa:6a:88:67:84:e3:71:36:7e:6e:f4:6a:c1:60:df:
cf:57:ea:46:8e:6d:13:92:31:03:f2:16:8e:23:92:
4e:ea:8f:24:a6:41:12:07:10:1a:ef:d7:1b:d1:9e:
47:fc:eb:19:c9:af:de:a2:3d:89:6d:d9:e2:81:2c:
c7:47:03:a9:76:8e:1e:e4:41:26:06:b4:fb:a5:5c:
09:0b:5c:a5:a6:d4:e6:79:6d:7e:09:12:b2:cc:de:
47:89:4e:de:ee:bc:14:f3:8e:bf:7a:dd:25:3c:c6:
68:10:9b:cc:17:cd:ea:80:9d:25:2a:49:0b:41:81:
dc:e9:b1:7f:5d:49:fb:79:73:b1:6c:08:cf:34:8b:
07:40:46:5c:84:3f:b8:80:15:86:d5:17:f3:09:cd:
25:f0:7d:e5:48:e2:85:b8:4a:3b:a7:0c:1d:98:17:
15:45:dd:9e:07:19:be:54:d1:0c:11:a0:57:b3:c0:
49:8d:6a:c8:0e:fd:99:f0:f3:9e:4c:a1:91:a5:a1:
ad:3c:c0:5d:33:c6:58:58:1a:5c:dd:48:e5:6b:05:
74:b5:98:3d:3b:e8:64:86:de:a5:07:8a:d7:fe:cd:
19:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BC:61:E6:D5:F8:50:C8:FF:71:4F:E8:34:B7:A2:E7:1D:62:AB:BC:5C
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.207.194.0/24
200.0.70.0/24
200.202.128.0/18
IPv6:
2801:80:1400::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11097
Signature Algorithm: sha256WithRSAEncryption
8b:f0:8e:77:71:1a:60:db:df:aa:b7:ba:44:76:ec:f0:45:43:
ee:9d:bd:36:69:38:e0:84:a3:fb:56:d0:78:cc:7f:82:14:93:
b8:40:b0:44:a3:ad:74:d3:4f:a7:09:10:b8:7a:df:6d:66:e4:
58:5d:29:68:10:0d:64:88:8c:43:cd:58:8a:5d:c8:9e:3a:13:
55:5c:6d:ea:03:cf:b3:4c:14:e4:8d:e0:b1:f1:ae:65:9a:e6:
26:c3:d2:42:5d:21:83:9f:9e:7e:e0:eb:ea:60:21:8c:d0:a2:
fe:1b:5a:1d:1b:35:d8:c7:be:cf:23:98:65:bd:09:31:07:39:
dc:8c:1b:92:82:d7:a5:62:7b:4e:45:b8:77:9a:9d:6e:fc:51:
bc:2f:4a:d8:14:3c:c0:80:a6:68:f1:67:17:86:6d:61:02:8b:
94:b1:4c:5f:28:17:5a:4f:69:32:d9:e4:61:42:92:a4:8c:20:
4b:56:bf:d0:70:1b:d6:7e:43:6b:28:6d:18:17:47:59:0a:b1:
74:87:7d:5f:46:1e:b7:c7:5e:1d:d1:15:0e:92:e1:b8:9e:85:
94:61:21:5e:6d:8a:ac:5a:8e:3c:3a:e5:1d:7a:3d:95:0e:bd:
24:75:c4:b4:9a:69:95:7a:c9:7d:03:ee:d7:26:78:be:c9:b5:
8d:39:bb:58
-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgIUUXkMbizxOh+YG8tT+jtQskjjKCEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MDMxODI2NDVaFw0yNTA5MDIxODMxNDVaMDMxMTAvBgNV
BAMTKEJDNjFFNkQ1Rjg1MEM4RkY3MTRGRTgzNEI3QTJFNzFENjJBQkJDNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2dM9gxluVi2ztDIj71eOso1KC
T/CefmWJzcJnU6pqiGeE43E2fm70asFg389X6kaObROSMQPyFo4jkk7qjySmQRIH
EBrv1xvRnkf86xnJr96iPYlt2eKBLMdHA6l2jh7kQSYGtPulXAkLXKWm1OZ5bX4J
ErLM3keJTt7uvBTzjr963SU8xmgQm8wXzeqAnSUqSQtBgdzpsX9dSft5c7FsCM80
iwdARlyEP7iAFYbVF/MJzSXwfeVI4oW4SjunDB2YFxVF3Z4HGb5U0QwRoFezwEmN
asgO/Znw855MoZGloa08wF0zxlhYGlzdSOVrBXS1mD076GSG3qUHitf+zRk7AgMB
AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS8YebV+FDI/3FP
6DS3oucdYqu8XDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNFoy
bm9zVVFQYnRtQkp4V0d4RkVmMUozM1p4VTZZak5TY3NOZFAxdVBpZWUvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRa
Mm5vc1VRUGJ0bUJKeFdHeEZFZjFKMzNaeFU2WWpOU2NzTmRQMXVQaWVlLzAvQkM2
MUU2RDVGODUwQzhGRjcxNEZFODM0QjdBMkU3MUQ2MkFCQkM1Qy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEH
AQH/BCwwKjAYBAIAATASAwQAwM/CAwQAyABGAwQGyMqAMA4EAgACMAgDBgAoAQCA
FDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIrWTANBgkqhkiG9w0BAQsFAAOCAQEA
i/COd3EaYNvfqre6RHbs8EVD7p29Nmk44ISj+1bQeMx/ghSTuECwRKOtdNNPpwkQ
uHrfbWbkWF0paBANZIiMQ81Yil3InjoTVVxt6gPPs0wU5I3gsfGuZZrmJsPSQl0h
g5+efuDr6mAhjNCi/htaHRs12Me+zyOYZb0JMQc53IwbkoLXpWJ7TkW4d5qdbvxR
vC9K2BQ8wICmaPFnF4ZtYQKLlLFMXygXWk9pMtnkYUKSpIwgS1a/0HAb1n5Dayht
GBdHWQqxdId9X0Yet8deHdEVDpLhuJ6FlGEhXm2KrFqOPDrlHXo9lQ69JHXEtJpp
lXrJfQPu1yZ4vsm1jTm7WA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:25 2025 by rpki-client