Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CAC3360A5C9E4BCF422CF69F74E9A2B51E2041AE.cer
File: CAC3360A5C9E4BCF422CF69F74E9A2B51E2041AE.cer (raw, json)
Hash identifier: Qf0IO9NOYuN0Hhkx0CacOBUC2MlGO6Hy8gS1onRXTDM=
Subject key identifier: CA:C3:36:0A:5C:9E:4B:CF:42:2C:F6:9F:74:E9:A2:B5:1E:20:41:AE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 731F05AE4534472C8B964B90F4CD2CA37B7BE57F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BB6SQScjiJE3JV2LRxgyvKFF9FfKa2BHtmbRNKMT5T48/1/CAC3360A5C9E4BCF422CF69F74E9A2B51E2041AE.mft
caRepository: rsync://rpki-repo.registro.br/repo/BB6SQScjiJE3JV2LRxgyvKFF9FfKa2BHtmbRNKMT5T48/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 16:47:30 +0000
Certificate not after: Thu 03 Apr 2025 16:52:30 +0000
Subordinate resources: AS: 268761
IP: 45.171.148.0/22
IP: 2804:5a44::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:1f:05:ae:45:34:47:2c:8b:96:4b:90:f4:cd:2c:a3:7b:7b:e5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 16:47:30 2024 GMT
Not After : Apr 3 16:52:30 2025 GMT
Subject: CN=CAC3360A5C9E4BCF422CF69F74E9A2B51E2041AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3b:49:56:d1:00:9a:63:df:35:36:cb:eb:e4:
56:bc:c6:de:d0:8d:d0:82:33:98:29:9c:a8:de:76:
e9:01:b2:d2:71:b2:ef:57:ab:e6:3d:36:f6:ed:cd:
d6:34:c5:18:d7:b1:03:54:0a:f6:89:3f:a2:0b:53:
08:3d:86:d8:3a:37:69:71:5e:48:31:ba:8d:7f:dc:
a3:3e:0e:11:4f:60:6e:52:97:11:1a:4f:58:01:58:
50:43:4a:1a:e6:c3:eb:84:62:a1:f3:b4:9b:10:da:
21:28:1c:e3:ff:ad:72:e4:aa:71:24:b1:6e:dc:23:
68:4d:60:b6:c9:04:4d:9a:78:7b:6c:53:b1:31:04:
0a:0d:76:df:7e:f3:b4:91:fb:42:53:65:90:8c:2e:
e5:85:5c:a7:d1:5e:b9:17:8f:66:f7:c7:6e:74:2c:
5a:31:8c:af:88:64:a0:dd:0c:aa:5b:9b:10:b6:4e:
f3:57:11:c9:aa:c5:91:29:d9:8e:86:ce:c6:66:e5:
bd:fe:db:da:36:20:a1:a1:ca:9c:a8:ac:eb:95:86:
95:ea:2c:5f:29:a3:a0:8b:28:c7:a4:6c:54:fc:77:
75:81:29:d7:79:44:1b:62:b8:21:5d:ff:70:e1:40:
ed:60:24:3b:98:d7:d9:d4:fb:22:f2:d6:dd:10:a0:
99:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CA:C3:36:0A:5C:9E:4B:CF:42:2C:F6:9F:74:E9:A2:B5:1E:20:41:AE
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BB6SQScjiJE3JV2LRxgyvKFF9FfKa2BHtmbRNKMT5T48/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BB6SQScjiJE3JV2LRxgyvKFF9FfKa2BHtmbRNKMT5T48/1/CAC3360A5C9E4BCF422CF69F74E9A2B51E2041AE.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.148.0/22
IPv6:
2804:5a44::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268761
Signature Algorithm: sha256WithRSAEncryption
95:00:61:d7:b6:d4:72:97:09:49:9e:3e:c5:99:b6:a4:5a:f0:
75:05:f5:e2:a3:ca:7b:33:3e:94:51:9d:58:e0:5d:9c:06:44:
bf:b2:0a:d2:9e:d6:63:47:d3:2e:ae:a0:c6:ff:5a:3e:f5:e2:
5c:a5:d1:18:d9:0a:ba:0e:36:70:40:7e:1b:2f:2a:d5:d6:8b:
cc:4a:59:a2:ef:bf:5f:0b:9e:55:ca:bf:3b:aa:8d:13:87:42:
ea:43:12:7a:6d:79:d4:d0:d5:2e:db:5b:ed:33:2f:e4:a3:94:
ee:c2:6c:38:b5:1a:b4:6c:84:0c:ec:9a:b3:5f:d9:ea:b1:67:
b4:61:1c:3f:5a:f0:63:d2:b5:a1:1c:05:c9:ed:a5:3c:77:2e:
f4:5e:6c:93:c0:e6:cd:1f:3f:76:91:d8:95:70:f6:36:73:0c:
36:d1:9a:ab:43:02:a5:14:f8:ab:4a:15:2a:4c:fb:46:c7:ae:
73:b8:23:ba:5a:ee:12:e9:e6:fa:f8:f1:8f:31:85:9c:5f:81:
3c:e4:dc:4a:df:4d:a4:3e:0c:4b:9a:9b:53:f5:c8:67:88:68:
6b:7f:a7:e6:d3:a5:d2:de:73:24:47:77:6e:f9:25:ac:6a:80:
f1:af:0a:98:39:a9:e5:2b:ea:32:45:53:13:bc:9a:aa:d2:8a:
cf:77:ee:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:06:20 2025 by rpki-client