Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D17A39CEAB2C6C76438EFCB39808BBC31EEF4750.cer
File: D17A39CEAB2C6C76438EFCB39808BBC31EEF4750.cer (raw, json)
Hash identifier: IEsdiXgy0kJj/RUfmX7IWM9GlnYJcY9WdOrejADaLcs=
Subject key identifier: D1:7A:39:CE:AB:2C:6C:76:43:8E:FC:B3:98:08:BB:C3:1E:EF:47:50
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 075ADA2014247510695C5018B5EB381462F5E221
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/1/D17A39CEAB2C6C76438EFCB39808BBC31EEF4750.mft
caRepository: rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 05:51:29 +0000
Certificate not after: Thu 03 Apr 2025 05:56:29 +0000
Subordinate resources: AS: 268679
IP: 45.165.68.0/22
IP: 2804:54f0::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:5a:da:20:14:24:75:10:69:5c:50:18:b5:eb:38:14:62:f5:e2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 05:51:29 2024 GMT
Not After : Apr 3 05:56:29 2025 GMT
Subject: CN=D17A39CEAB2C6C76438EFCB39808BBC31EEF4750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4e:01:6d:83:ff:17:c2:dc:77:c9:2e:d3:01:
8f:4b:5e:af:4a:fd:4d:40:52:90:45:1a:76:ea:b3:
48:88:ad:bb:a4:8a:b2:e6:64:64:d1:6f:09:c6:3e:
c2:9e:71:8d:6c:55:8d:7a:cb:81:d2:3e:29:bc:cb:
27:f3:59:31:76:fe:18:0a:4f:52:1e:51:dc:d6:be:
f4:87:d5:4d:c6:00:02:01:e2:ce:2f:f9:6e:33:3a:
4f:20:c0:9c:47:a9:05:57:90:e4:98:f5:62:db:07:
a8:3a:a2:ee:b3:77:db:45:79:46:18:15:85:02:8f:
b5:04:06:79:43:31:66:38:60:23:fe:b3:09:83:37:
22:c9:2f:81:32:61:6b:b0:8a:72:32:26:23:16:3c:
f9:79:b9:b4:18:29:0a:6a:f9:fa:2d:fd:07:fe:61:
df:eb:29:bd:13:b6:ed:73:ec:f7:78:5d:67:0a:14:
51:8f:47:1a:52:f5:2e:f4:86:82:8a:37:6a:05:d7:
5f:85:82:74:6a:66:e6:66:ac:33:54:3e:79:8b:fa:
f0:d8:b9:e6:88:e3:ac:25:74:bc:a4:31:2b:cc:7e:
77:37:ac:f3:a3:5a:f6:f0:07:0f:b5:f7:32:80:31:
c9:47:40:c4:c4:16:a0:67:fe:e5:f9:97:33:ad:77:
60:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D1:7A:39:CE:AB:2C:6C:76:43:8E:FC:B3:98:08:BB:C3:1E:EF:47:50
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/1/D17A39CEAB2C6C76438EFCB39808BBC31EEF4750.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.68.0/22
IPv6:
2804:54f0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268679
Signature Algorithm: sha256WithRSAEncryption
32:73:b4:aa:5c:ff:e4:4e:75:ee:35:aa:23:fc:29:79:c2:5d:
49:6c:97:3a:f6:f0:56:4a:77:1a:7c:7f:30:10:39:e0:a8:06:
90:42:1f:78:81:67:1e:98:42:24:dc:c0:8c:af:5c:86:cc:7a:
31:ff:a3:db:5f:9f:d5:42:cd:fa:b5:87:63:b0:b1:30:0b:cb:
a1:6e:a9:c0:06:16:71:35:48:9c:3e:83:01:ce:ad:00:94:1a:
86:5e:29:7d:ac:f9:15:f0:92:7b:b8:c9:61:6f:60:d0:a6:58:
79:22:f4:6e:77:ff:06:0b:3a:bb:82:a5:7f:58:66:b3:8c:5e:
95:59:67:b8:10:20:54:6a:84:d2:09:d5:5c:65:54:d2:dc:c2:
18:cd:c8:0a:d9:f1:5a:c6:08:f0:f8:9c:a2:a9:69:b3:d1:c9:
27:1d:a6:91:e1:a9:d5:57:b2:d4:c3:59:ed:1c:54:ea:95:63:
10:11:c8:78:3f:5f:a3:9f:53:18:81:eb:16:d6:30:25:87:28:
ad:a9:f8:93:fb:a7:c5:de:96:da:9a:9f:0c:38:ab:23:6b:41:
a7:1a:1b:d3:a9:86:4d:7d:dd:4d:84:f1:eb:53:1f:d3:d7:c0:
e3:11:c9:73:7c:72:8a:ce:f6:74:26:01:88:0f:d9:ef:3c:18:
72:97:54:3e
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUB1raIBQkdRBpXFAYtes4FGL14iEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwNTUxMjlaFw0yNTA0MDMwNTU2MjlaMDMxMTAvBgNV
BAMTKEQxN0EzOUNFQUIyQzZDNzY0MzhFRkNCMzk4MDhCQkMzMUVFRjQ3NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVTgFtg/8Xwtx3yS7TAY9LXq9K
/U1AUpBFGnbqs0iIrbukirLmZGTRbwnGPsKecY1sVY16y4HSPim8yyfzWTF2/hgK
T1IeUdzWvvSH1U3GAAIB4s4v+W4zOk8gwJxHqQVXkOSY9WLbB6g6ou6zd9tFeUYY
FYUCj7UEBnlDMWY4YCP+swmDNyLJL4EyYWuwinIyJiMWPPl5ubQYKQpq+fot/Qf+
Yd/rKb0Ttu1z7Pd4XWcKFFGPRxpS9S70hoKKN2oF11+FgnRqZuZmrDNUPnmL+vDY
ueaI46wldLykMSvMfnc3rPOjWvbwBw+19zKAMclHQMTEFqBn/uX5lzOtd2BZAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTRejnOqyxsdkOO
/LOYCLvDHu9HUDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNnlW
NGlKS0R6TlR2a3dUTW05Q0thWTY0NndMTjJOYnRHdDdib1VVeHZWNjIvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZ5
VjRpSktEek5Udmt3VE1tOUNLYVk2NDZ3TE4yTmJ0R3Q3Ym9VVXh2VjYyLzEvRDE3
QTM5Q0VBQjJDNkM3NjQzOEVGQ0IzOTgwOEJCQzMxRUVGNDc1MC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLaVEMA0EAgACMAcDBQAoBFTwMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQZhzANBgkqhkiG9w0BAQsFAAOCAQEAMnO0qlz/5E517jWq
I/wpecJdSWyXOvbwVkp3Gnx/MBA54KgGkEIfeIFnHphCJNzAjK9chsx6Mf+j21+f
1ULN+rWHY7CxMAvLoW6pwAYWcTVInD6DAc6tAJQahl4pfaz5FfCSe7jJYW9g0KZY
eSL0bnf/Bgs6u4Klf1hms4xelVlnuBAgVGqE0gnVXGVU0tzCGM3ICtnxWsYI8Pic
oqlps9HJJx2mkeGp1Vey1MNZ7RxU6pVjEBHIeD9fo59TGIHrFtYwJYcoran4k/un
xd6W2pqfDDirI2tBpxob06mGTX3dTYTx61Mf09fA4xHJc3xyis72dCYBiA/Z7zwY
cpdUPg==
-----END CERTIFICATE-----
Generated at Wed Apr 9 07:57:33 2025 by rpki-client