Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer
File: D1FFDF44055E16082D529730642377D751467152.cer (raw, json)
Hash identifier: n0h6mbYR7LTiSpuuUrpvW6Eg4Bk2XCsaSddTdEnsWsk=
Subject key identifier: D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 6974563CFD3DA75B55A1F7873537E96F0F865F8C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
caRepository: rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 21 Dec 2024 16:34:33 +0000
Certificate not after: Sat 20 Dec 2025 16:39:33 +0000
Subordinate resources: AS: 268782
IP: 45.172.240.0/22
IP: 2804:5a94::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:74:56:3c:fd:3d:a7:5b:55:a1:f7:87:35:37:e9:6f:0f:86:5f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 21 16:34:33 2024 GMT
Not After : Dec 20 16:39:33 2025 GMT
Subject: CN=D1FFDF44055E16082D529730642377D751467152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:29:15:dd:a7:57:43:f4:3a:06:e2:8b:91:23:
84:53:ee:02:63:d7:c9:cc:1e:ec:9d:84:97:c9:47:
ae:b4:fb:27:a9:d9:e0:a6:d1:15:09:92:2d:9e:c6:
d3:9f:c6:aa:af:47:c0:c5:4a:48:43:db:42:76:32:
ea:89:96:ad:43:e9:ed:e4:ae:a4:3a:d1:6d:b1:05:
11:ad:2e:fe:f5:2a:03:cf:05:6a:1b:b1:7a:a2:e0:
08:4f:57:41:d5:96:88:fa:eb:55:4c:8b:c1:b6:05:
d7:f5:cd:28:bc:4e:82:04:5c:3c:33:5c:72:a7:0f:
48:e2:e5:03:18:2e:5f:f6:bf:ac:c6:2b:fc:9f:03:
8f:a9:b7:97:f2:30:41:c4:ff:d5:90:70:97:99:b1:
46:e1:91:ea:5a:07:62:e9:31:a0:90:9f:74:26:f7:
41:6a:a3:5b:d7:3b:8c:06:29:db:eb:60:ee:27:06:
6c:78:1f:10:f8:94:74:23:4d:dc:8f:4a:11:56:cf:
a2:19:a1:b9:82:68:8c:51:10:b1:eb:21:1b:7c:07:
eb:ad:f5:d8:0a:d9:ee:5c:b3:7c:24:56:4f:96:3e:
e9:1e:a6:03:97:de:e9:bb:37:e4:09:db:94:fe:45:
3c:84:24:64:be:21:b2:32:d3:7c:57:55:34:19:60:
8b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.240.0/22
IPv6:
2804:5a94::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268782
Signature Algorithm: sha256WithRSAEncryption
cc:74:4d:5d:89:8a:8b:ed:de:4e:cd:1c:71:1a:a2:f9:ce:1f:
15:bd:d4:6a:67:83:1e:8e:35:7a:ee:18:5a:7b:f3:74:e9:f0:
34:af:a9:18:78:ec:5b:44:63:66:4d:1e:82:7a:c6:f0:d1:19:
11:43:ce:73:11:77:e0:30:d5:77:64:8d:be:21:68:3f:66:fd:
d2:29:d1:e2:87:21:7f:88:7e:59:22:cb:fb:34:1d:e8:38:cb:
02:6c:05:42:4a:c7:91:a6:98:f6:47:2a:4f:f2:2d:57:10:61:
32:4c:36:25:50:48:d4:22:32:79:c0:99:a3:7e:3f:31:86:40:
43:bc:64:84:69:8a:a8:7d:44:5a:34:2d:cf:3b:1b:f5:fc:e5:
e2:35:8d:b1:6d:d2:99:c0:cc:09:48:35:aa:42:ca:8f:0f:72:
b5:71:bb:2e:2a:46:cf:6f:26:ed:a8:32:d7:55:6a:36:c8:75:
a1:13:69:34:db:00:35:f5:9b:97:b8:b5:db:a2:da:1d:a2:0a:
7e:f0:4b:7d:c9:9e:60:31:f7:40:44:fd:72:c3:78:cf:36:68:
4b:de:71:b9:1e:68:42:61:6e:05:80:6e:16:2f:46:aa:71:f8:
bf:34:45:a4:33:58:20:74:62:1c:2c:4d:9a:9f:74:0a:3b:a4:
8b:46:78:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:23 2025 by rpki-client