Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BF3D2960951229F60429923820F4643A4958DB73.cer
File: BF3D2960951229F60429923820F4643A4958DB73.cer (raw, json)
Hash identifier: PjG7MCFuzdcl8THxV2HRyIxSHDgpLDbltkayPY4Wlxs=
Subject key identifier: BF:3D:29:60:95:12:29:F6:04:29:92:38:20:F4:64:3A:49:58:DB:73
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 6C5F8896E8B99C930DF03BC702B53BB8F61371F3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/BF3D2960951229F60429923820F4643A4958DB73.mft
caRepository: rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 27 Aug 2025 16:43:56 +0000
Certificate not after: Wed 26 Aug 2026 16:48:56 +0000
Subordinate resources: AS: 264889
IP: 168.227.220.0/22
IP: 2804:2f68::/32
Validation: Failed, certificate revoked on Fri 12 Sep 2025 09:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:5f:88:96:e8:b9:9c:93:0d:f0:3b:c7:02:b5:3b:b8:f6:13:71:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 27 16:43:56 2025 GMT
Not After : Aug 26 16:48:56 2026 GMT
Subject: CN=BF3D2960951229F60429923820F4643A4958DB73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:54:db:cf:db:77:7c:d2:a1:f6:3b:f2:41:
ca:83:b0:8f:43:e4:9c:d3:d6:ed:23:e2:94:26:86:
6b:97:6b:8d:60:7c:1e:19:ed:e6:fb:d8:10:96:0a:
42:85:1d:cd:81:b6:0c:da:87:d5:fe:5c:ac:7d:08:
bb:0e:46:0d:d5:21:80:9f:07:2e:6c:58:23:12:2b:
57:39:ec:51:19:f3:d6:97:2a:0b:84:f7:0c:a7:c9:
20:4d:57:8a:ea:74:9b:a7:76:b3:29:8b:25:e0:11:
33:77:ba:6c:95:38:36:d1:73:fb:64:f8:c1:59:2c:
58:e5:1e:fd:f6:33:03:aa:3b:f5:d7:db:47:ff:aa:
c3:55:85:ed:15:ae:77:47:bc:d8:13:58:1e:bb:d8:
9f:11:f9:84:05:0c:a6:65:83:9f:74:cb:e6:4d:12:
58:fd:c7:01:bc:b9:23:cc:15:93:df:9c:58:87:fb:
85:7a:8c:41:3d:6f:99:39:5b:4b:00:77:dc:f7:f5:
cd:55:15:8b:10:45:a0:41:21:04:f6:6c:c3:1d:54:
8a:a2:1d:f6:a3:23:1d:4f:65:59:b4:af:0f:71:7d:
d0:c4:e1:22:bc:d1:30:9b:ac:39:ab:7e:19:51:a0:
c4:11:f7:80:15:d7:f4:44:ed:8b:38:83:be:76:32:
9e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BF:3D:29:60:95:12:29:F6:04:29:92:38:20:F4:64:3A:49:58:DB:73
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/BF3D2960951229F60429923820F4643A4958DB73.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.220.0/22
IPv6:
2804:2f68::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264889
Signature Algorithm: sha256WithRSAEncryption
b7:fb:1e:c7:b1:3d:0e:06:1e:01:b8:52:f1:9d:6a:62:24:45:
e9:5a:4c:29:89:05:f4:8b:92:80:b5:ec:24:d2:69:f3:38:6b:
f5:69:f7:8a:78:2c:64:f5:2e:f0:d8:64:78:e1:27:7a:d3:23:
4e:9a:be:da:e1:42:cd:9b:50:a3:09:0d:d5:70:f5:30:32:a5:
15:1f:38:2d:7a:d0:55:78:4f:15:74:1f:be:e8:a0:6b:12:3a:
a5:1e:9c:f6:11:2f:92:ff:70:48:3b:a9:2f:10:a4:86:43:6b:
a5:c6:89:54:d5:7d:8d:aa:8d:7a:7b:22:de:68:7d:b4:be:43:
1f:00:0b:17:c6:9e:44:3c:2c:60:ef:c0:f2:63:46:9f:a8:ae:
be:6b:78:e5:01:ad:56:8a:fd:14:f7:f8:73:ef:6e:fe:13:99:
7a:5e:9f:b3:85:00:9e:99:19:1b:6c:63:5a:68:09:90:9f:e6:
f7:be:09:97:95:8a:7d:70:b3:be:80:30:5e:61:97:39:70:dc:
80:8f:e7:67:12:d5:c5:46:e7:eb:eb:d8:63:78:4c:13:cc:8e:
43:b7:49:da:2a:53:65:77:47:8a:5a:3a:a5:be:32:bb:17:de:
34:92:0e:25:d3:e7:03:67:b9:87:95:ac:78:b8:32:ff:34:d6:
a3:9e:dd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 05:51:59 2025 by rpki-client