Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.cer
File: CECEE953A375AC085E59078AAB4DC678DA6D7A20.cer (raw, json)
Hash identifier: ezNb+cVSqisrbYXBJMtkDRXWoejlyTOAYyJUdUs6ECs=
Subject key identifier: CE:CE:E9:53:A3:75:AC:08:5E:59:07:8A:AB:4D:C6:78:DA:6D:7A:20
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7474414152BD081F266815D0E1ED2B121ED3D921
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.mft
caRepository: rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 25 Nov 2024 13:52:59 +0000
Certificate not after: Mon 24 Nov 2025 13:57:59 +0000
Subordinate resources: AS: 61745
IP: 131.72.152.0/22
IP: 186.219.240.0 -- 186.219.254.255
IP: 2804:1bb8::/32
Validation: Failed, certificate revoked on Tue 26 Nov 2024 10:13:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:74:41:41:52:bd:08:1f:26:68:15:d0:e1:ed:2b:12:1e:d3:d9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 25 13:52:59 2024 GMT
Not After : Nov 24 13:57:59 2025 GMT
Subject: CN=CECEE953A375AC085E59078AAB4DC678DA6D7A20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:79:f4:ed:3c:3a:ab:c6:87:82:91:ca:1f:44:
f2:74:4a:44:2e:00:af:cb:dd:0f:1d:9b:a4:9c:33:
2a:56:a3:00:36:51:3f:ef:56:3d:b1:d8:2f:16:8a:
0f:6b:fe:97:65:d4:ca:8d:29:56:70:dd:81:d7:b0:
d9:56:39:ca:ae:6c:ec:f4:47:69:60:f5:d5:1e:33:
ea:bc:6f:81:93:0f:0e:80:ed:53:77:51:25:19:15:
78:91:ba:25:53:aa:2b:71:69:c3:96:af:65:0a:6c:
ec:61:b9:6c:23:5c:04:19:cd:f4:60:ea:cb:29:db:
0c:6b:ad:0f:fa:70:87:48:67:d2:a7:45:1a:17:8f:
14:65:4d:28:e8:b3:63:ac:bc:bb:64:a5:d0:e2:a9:
fa:dd:db:24:26:17:ef:19:9b:9d:99:b0:b2:d2:67:
69:17:10:27:f4:39:c4:88:f3:5a:1c:d8:d8:16:0c:
1d:4e:41:8b:ba:16:35:1a:c8:bc:13:26:13:de:47:
d1:88:89:70:c6:71:08:04:13:2f:d4:7e:74:ca:25:
38:7b:ae:8c:99:70:4d:62:5e:cd:a0:16:46:a4:04:
4e:22:cc:cd:eb:f1:fe:7a:1a:71:91:e6:ab:02:6e:
31:08:93:08:d3:db:3b:ca:93:d7:cb:79:fa:80:89:
14:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CE:CE:E9:53:A3:75:AC:08:5E:59:07:8A:AB:4D:C6:78:DA:6D:7A:20
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.152.0/22
186.219.240.0-186.219.254.255
IPv6:
2804:1bb8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61745
Signature Algorithm: sha256WithRSAEncryption
31:f0:15:cb:95:bb:a3:1b:4c:41:11:6b:d2:fb:b0:fa:0c:84:
54:91:5c:87:83:ab:bc:4f:4e:64:3e:10:18:aa:51:91:7f:1c:
43:4c:62:83:c7:dc:84:f1:79:c4:e9:23:84:c2:b2:50:26:b5:
ec:90:02:63:25:69:8d:ab:0c:85:3f:b5:d1:78:04:ec:d3:9b:
56:83:95:6d:60:0d:e7:e7:c8:d4:6c:11:fc:a7:da:8f:19:97:
55:29:ef:4d:86:54:d7:23:18:58:cf:8f:b9:95:f9:37:cd:5b:
7d:fb:d6:c5:6b:91:fb:85:66:f0:e6:23:ea:ff:e3:b4:f9:fa:
a5:77:a9:d7:78:3b:af:52:9f:ed:49:88:e7:4e:36:de:dc:61:
8e:d5:29:fa:75:1a:ab:9f:ec:8e:34:c2:e7:69:ba:9f:61:e8:
28:66:36:c8:a6:b0:93:fb:9a:cb:3d:72:b1:c6:1d:e3:f7:3a:
c0:f1:1a:17:e4:b4:88:5a:c1:0e:02:58:c3:eb:9b:f6:68:af:
07:17:9a:aa:40:24:16:9c:cc:bb:33:15:59:d0:bc:b1:4d:2b:
95:65:ee:e1:14:2c:b1:60:f7:2f:39:2e:d0:33:2f:5f:19:c6:
00:24:99:cb:a7:85:d2:7d:98:c3:d6:ba:07:8f:70:cb:da:45:
4d:44:4a:3b
-----BEGIN CERTIFICATE-----
MIIGPTCCBSWgAwIBAgIUdHRBQVK9CB8maBXQ4e0rEh7T2SEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMjUxMzUyNTlaFw0yNTExMjQxMzU3NTlaMDMxMTAvBgNV
BAMTKENFQ0VFOTUzQTM3NUFDMDg1RTU5MDc4QUFCNERDNjc4REE2RDdBMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6efTtPDqrxoeCkcofRPJ0SkQu
AK/L3Q8dm6ScMypWowA2UT/vVj2x2C8Wig9r/pdl1MqNKVZw3YHXsNlWOcqubOz0
R2lg9dUeM+q8b4GTDw6A7VN3USUZFXiRuiVTqitxacOWr2UKbOxhuWwjXAQZzfRg
6ssp2wxrrQ/6cIdIZ9KnRRoXjxRlTSjos2OsvLtkpdDiqfrd2yQmF+8Zm52ZsLLS
Z2kXECf0OcSI81oc2NgWDB1OQYu6FjUayLwTJhPeR9GIiXDGcQgEEy/UfnTKJTh7
royZcE1iXs2gFkakBE4izM3r8f56GnGR5qsCbjEIkwjT2zvKk9fLefqAiRQPAgMB
AAGjggNHMIIDQzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTOzulTo3WsCF5Z
B4qrTcZ42m16IDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzhD
VDhFa1FTbkVyd1VSOWF2MWgxdWNQVVFKaHFUbndURjlhODc0NGgxNGcvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzhD
VDhFa1FTbkVyd1VSOWF2MWgxdWNQVVFKaHFUbndURjlhODc0NGgxNGcvMS9DRUNF
RTk1M0EzNzVBQzA4NUU1OTA3OEFBQjREQzY3OERBNkQ3QTIwLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUHAQcB
Af8ELTArMBoEAgABMBQDBAKDSJgwDAMEBLrb8AMEALrb/jANBAIAAjAHAwUAKAQb
uDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA8TEwDQYJKoZIhvcNAQELBQADggEB
ADHwFcuVu6MbTEERa9L7sPoMhFSRXIeDq7xPTmQ+EBiqUZF/HENMYoPH3ITxecTp
I4TCslAmteyQAmMlaY2rDIU/tdF4BOzTm1aDlW1gDefnyNRsEfyn2o8Zl1Up702G
VNcjGFjPj7mV+TfNW3371sVrkfuFZvDmI+r/47T5+qV3qdd4O69Sn+1JiOdONt7c
YY7VKfp1Gquf7I40wudpup9h6ChmNsimsJP7mss9crHGHeP3OsDxGhfktIhawQ4C
WMPrm/ZorwcXmqpAJBaczLszFVnQvLFNK5Vl7uEULLFg9y85LtAzL18ZxgAkmcun
hdJ9mMPWugePcMvaRU1ESjs=
-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:05 2024 by rpki-client on console-ams.rpki-client.org