Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.cer
File: D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.cer (raw, json)
Hash identifier: Y5EUbjDAMT7qDhHTf1jbUidYqA6qUA8s3rJorxjTAQ0=
Subject key identifier: D1:EC:0A:15:7E:47:45:C6:E2:C4:AC:CE:96:C0:A9:2E:DE:9F:8B:47
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7FA7246F94F0F71C2A9890600BA7A1FE90D9BBB3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.mft
caRepository: rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 23:57:20 +0000
Certificate not after: Thu 03 Apr 2025 00:02:20 +0000
Subordinate resources: AS: 268746
IP: 45.171.228.0/22
IP: 2804:5a10::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:a7:24:6f:94:f0:f7:1c:2a:98:90:60:0b:a7:a1:fe:90:d9:bb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 23:57:20 2024 GMT
Not After : Apr 3 00:02:20 2025 GMT
Subject: CN=D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:0b:43:65:1d:53:c0:f7:a2:f3:ff:56:be:
7d:29:28:94:d4:f5:92:0b:93:f4:76:03:9d:c0:ad:
03:65:34:09:13:0a:7b:ca:2f:6d:28:bd:41:60:33:
28:3f:cc:72:d2:21:24:b7:7a:c8:a4:0b:49:2e:ba:
9e:3c:1f:97:0f:f1:17:31:be:c1:cc:bb:fc:40:78:
c8:f6:f9:ab:c3:7c:06:47:b1:f3:d7:0c:15:8f:91:
f3:29:a7:8f:24:1f:59:d3:33:2d:36:95:a7:2a:fd:
c8:13:61:7a:79:c0:3f:7f:c6:45:04:37:4f:d7:36:
72:85:4d:7b:a7:d3:7f:63:e4:30:42:a2:9d:4c:16:
48:8d:6f:6e:92:92:91:35:0d:46:8d:32:b3:57:95:
fa:93:13:44:5b:3a:63:f2:74:82:53:de:03:8b:b7:
cf:09:ca:13:a9:ab:c2:6c:2a:fa:df:d6:4c:10:ea:
e0:9c:30:eb:e8:af:51:63:e6:f4:28:6d:e4:a1:fe:
f2:1d:20:cc:43:68:1f:00:b7:81:99:34:e3:d3:de:
6f:78:66:08:26:48:f6:c3:4a:53:94:1f:86:ea:73:
90:2f:80:e3:1d:26:5d:b1:90:55:da:82:28:b5:97:
cd:32:8b:ac:24:e8:fb:ee:16:a4:32:44:e3:57:bd:
21:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D1:EC:0A:15:7E:47:45:C6:E2:C4:AC:CE:96:C0:A9:2E:DE:9F:8B:47
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.228.0/22
IPv6:
2804:5a10::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268746
Signature Algorithm: sha256WithRSAEncryption
8a:ea:28:d3:4e:57:fc:ad:d5:15:cc:53:ca:6f:e9:63:7a:75:
33:4b:52:f6:5c:da:6d:fe:78:f2:59:a0:15:dd:d0:0e:5c:88:
71:cd:03:66:46:20:e1:e8:f8:d6:b0:54:dc:96:d8:7e:67:fe:
49:d4:05:7d:8f:b3:d3:9b:a2:63:24:87:eb:74:8d:f5:3b:71:
10:91:d4:44:2a:91:ed:9d:29:16:7c:54:e9:45:3b:82:f4:3a:
16:d1:ec:25:6e:dd:17:ee:67:1f:86:c8:c6:25:19:42:e0:99:
81:88:b4:49:a6:74:ac:08:15:af:a3:4f:cd:66:04:74:82:f5:
58:e9:ce:cd:49:e8:07:4d:37:26:a2:ea:7a:24:02:e0:15:0a:
df:a7:b3:74:99:47:2b:1b:5f:87:d8:67:f9:4e:a9:14:f0:1c:
eb:fc:f3:40:5a:f8:45:e5:28:92:cf:65:c9:13:30:28:40:51:
36:ac:0b:d8:af:5f:d3:d1:91:6c:83:b8:24:b6:a1:7e:8a:f7:
96:40:c4:f2:89:73:ee:1c:17:0a:88:bc:3e:1f:06:60:a5:8e:
8e:52:ff:4a:ef:9b:f8:49:7d:e7:5d:01:53:30:45:7b:7a:d2:
68:58:6f:99:3b:48:69:ad:95:a5:05:57:a8:59:b9:4c:8f:59:
70:27:29:58
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIUf6ckb5Tw9xwqmJBgC6eh/pDZu7MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMyMzU3MjBaFw0yNTA0MDMwMDAyMjBaMDMxMTAvBgNV
BAMTKEQxRUMwQTE1N0U0NzQ1QzZFMkM0QUNDRTk2QzBBOTJFREU5RjhCNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzqAtDZR1TwPei8/9Wvn0pKJTU
9ZILk/R2A53ArQNlNAkTCnvKL20ovUFgMyg/zHLSISS3esikC0kuup48H5cP8Rcx
vsHMu/xAeMj2+avDfAZHsfPXDBWPkfMpp48kH1nTMy02lacq/cgTYXp5wD9/xkUE
N0/XNnKFTXun039j5DBCop1MFkiNb26SkpE1DUaNMrNXlfqTE0RbOmPydIJT3gOL
t88JyhOpq8JsKvrf1kwQ6uCcMOvor1Fj5vQobeSh/vIdIMxDaB8At4GZNOPT3m94
ZggmSPbDSlOUH4bqc5AvgOMdJl2xkFXagii1l80yi6wk6PvuFqQyRONXvSErAgMB
AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTR7AoVfkdFxuLE
rM6WwKku3p+LRzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vc1Fv
VlhEM3Z3UGhIRVRmRG0zUjZaM0twRUZlVk44RldwbndhcGlBS0N5cy8xLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vc1Fv
VlhEM3Z3UGhIRVRmRG0zUjZaM0twRUZlVk44RldwbndhcGlBS0N5cy8xL0QxRUMw
QTE1N0U0NzQ1QzZFMkM0QUNDRTk2QzBBOTJFREU5RjhCNDcubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB
/wQfMB0wDAQCAAEwBgMEAi2r5DANBAIAAjAHAwUAKARaEDAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEGcowDQYJKoZIhvcNAQELBQADggEBAIrqKNNOV/yt1RXMU8pv
6WN6dTNLUvZc2m3+ePJZoBXd0A5ciHHNA2ZGIOHo+NawVNyW2H5n/knUBX2Ps9Ob
omMkh+t0jfU7cRCR1EQqke2dKRZ8VOlFO4L0OhbR7CVu3RfuZx+GyMYlGULgmYGI
tEmmdKwIFa+jT81mBHSC9Vjpzs1J6AdNNyai6nokAuAVCt+ns3SZRysbX4fYZ/lO
qRTwHOv880Ba+EXlKJLPZckTMChAUTasC9ivX9PRkWyDuCS2oX6K95ZAxPKJc+4c
FwqIvD4fBmCljo5S/0rvm/hJfeddAVMwRXt60mhYb5k7SGmtlaUFV6hZuUyPWXAn
KVg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:13:23 2025 by rpki-client