Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D21C3B9B0100AC1E3A1B7E6A2CC30E6A52DBF690.cer
File: D21C3B9B0100AC1E3A1B7E6A2CC30E6A52DBF690.cer (raw, json)
Hash identifier: 8KnRXhLDCVnRf89G9M7Hinsvxp+9TXaM6Gviu3IMGsM=
Subject key identifier: D2:1C:3B:9B:01:00:AC:1E:3A:1B:7E:6A:2C:C3:0E:6A:52:DB:F6:90
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 38455AA0B38FEF9C3F3CE936F5C155C511DA112E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/D21C3B9B0100AC1E3A1B7E6A2CC30E6A52DBF690.mft
caRepository: rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 10 Aug 2024 17:31:07 +0000
Certificate not after: Sat 09 Aug 2025 17:36:07 +0000
Subordinate resources: AS: 264268
IP: 138.118.176.0/22
IP: 191.7.112.0/22
IP: 2804:2540::/32
Validation: Failed, certificate revoked on Sat 10 Aug 2024 23:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:45:5a:a0:b3:8f:ef:9c:3f:3c:e9:36:f5:c1:55:c5:11:da:11:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 10 17:31:07 2024 GMT
Not After : Aug 9 17:36:07 2025 GMT
Subject: CN=D21C3B9B0100AC1E3A1B7E6A2CC30E6A52DBF690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:89:92:7d:d5:3b:fa:ba:e1:af:8c:84:5f:0b:
2f:60:ea:58:47:3a:80:3c:96:a8:63:fc:8d:48:98:
a0:b0:3b:0e:52:3c:2e:8a:db:23:08:d6:64:80:ba:
76:da:4f:d6:89:4a:cc:15:df:ed:bc:e4:a7:c0:7e:
02:8d:a1:29:54:5d:5a:7a:46:1f:2e:88:f9:ef:e8:
22:12:50:04:24:15:0b:65:7d:49:be:57:ee:4e:b9:
e4:fc:b3:84:e5:df:31:30:d2:2a:8c:e3:20:b2:da:
6b:27:fa:40:5f:05:76:3b:01:f7:df:cf:17:44:be:
6b:2c:04:ee:2f:53:9f:49:0e:d2:bb:69:fd:c0:df:
8e:4f:b9:d9:12:0d:fb:fe:bb:bd:2a:f3:7f:ca:54:
fb:6d:1a:ad:fa:cb:25:29:cd:f5:97:87:38:71:94:
9f:fc:48:23:ff:da:24:6b:3c:85:e6:3a:b1:00:07:
f1:41:71:16:13:a5:43:8d:1e:28:4f:56:fa:19:33:
a0:9e:e1:68:a0:91:aa:4b:6f:29:1c:47:b3:da:1f:
a3:9b:1e:ab:db:a2:d1:4b:5a:98:41:cf:38:8f:c5:
81:ad:ec:49:dd:f0:86:39:84:ea:d1:c6:9e:c4:cd:
27:5d:39:0e:c8:41:fa:e2:f0:88:d1:71:78:f5:3b:
36:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D2:1C:3B:9B:01:00:AC:1E:3A:1B:7E:6A:2C:C3:0E:6A:52:DB:F6:90
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/D21C3B9B0100AC1E3A1B7E6A2CC30E6A52DBF690.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.176.0/22
191.7.112.0/22
IPv6:
2804:2540::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264268
Signature Algorithm: sha256WithRSAEncryption
5a:7f:71:55:3f:f9:6d:0f:de:b4:26:9e:13:72:40:da:eb:36:
54:60:c8:81:40:72:ab:87:ff:50:96:f1:60:9d:bb:38:cd:3b:
fb:1d:99:a6:11:1e:51:d3:68:fa:a6:61:b5:ce:4a:90:d6:48:
54:aa:32:9b:90:10:2c:b0:ae:16:a8:9a:80:fa:d2:df:24:58:
02:a5:d5:b8:42:05:ce:18:36:fd:dd:e5:48:54:d7:3a:d2:9e:
4d:3a:54:7c:36:42:e1:53:28:63:d7:8f:09:23:3f:4c:78:09:
89:92:20:50:ef:73:99:d9:06:cf:88:11:4c:ac:fa:e8:9f:4f:
2e:43:d7:77:6a:f5:d0:95:ce:b3:88:f2:cd:c9:6d:40:93:9b:
3e:95:14:52:d4:9b:13:76:6e:dc:19:07:41:79:c4:4d:61:8f:
63:49:d4:94:99:96:b6:8a:66:cb:14:f3:06:90:4f:bb:a8:9b:
34:3e:c1:b2:64:a6:ec:23:4d:d4:9f:c5:7f:e2:2a:50:16:13:
81:ad:fe:87:c5:5a:cc:2b:d9:00:8e:59:7d:d7:4f:4a:0c:dd:
77:3c:c4:9d:3b:bc:13:cc:b3:90:39:40:73:f6:69:7d:36:8f:
63:1c:d5:0a:32:81:a2:2a:74:8b:f7:82:ca:ce:ac:85:95:08:
07:c0:29:8b
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUOEVaoLOP75w/POk29cFVxRHaES4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA4MTAxNzMxMDdaFw0yNTA4MDkxNzM2MDdaMDMxMTAvBgNV
BAMTKEQyMUMzQjlCMDEwMEFDMUUzQTFCN0U2QTJDQzMwRTZBNTJEQkY2OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfiZJ91Tv6uuGvjIRfCy9g6lhH
OoA8lqhj/I1ImKCwOw5SPC6K2yMI1mSAunbaT9aJSswV3+285KfAfgKNoSlUXVp6
Rh8uiPnv6CISUAQkFQtlfUm+V+5OueT8s4Tl3zEw0iqM4yCy2msn+kBfBXY7Afff
zxdEvmssBO4vU59JDtK7af3A345PudkSDfv+u70q83/KVPttGq36yyUpzfWXhzhx
lJ/8SCP/2iRrPIXmOrEAB/FBcRYTpUONHihPVvoZM6Ce4WigkapLbykcR7PaH6Ob
HqvbotFLWphBzziPxYGt7End8IY5hOrRxp7EzSddOQ7IQfri8IjRcXj1OzbvAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTSHDubAQCsHjob
fmosww5qUtv2kDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDd5
aFVEZnVuNFhMRUFlcnk3MW51M2o4eVNjTG1FM2p3MmtKbXZSTnpiOGsvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0g3
eWhVRGZ1bjRYTEVBZXJ5NzFudTNqOHlTY0xtRTNqdzJrSm12Uk56YjhrLzAvRDIx
QzNCOUIwMTAwQUMxRTNBMUI3RTZBMkNDMzBFNkE1MkRCRjY5MC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCinawAwQCvwdwMA0EAgACMAcDBQAoBCVAMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQITDANBgkqhkiG9w0BAQsFAAOCAQEAWn9xVT/5
bQ/etCaeE3JA2us2VGDIgUByq4f/UJbxYJ27OM07+x2ZphEeUdNo+qZhtc5KkNZI
VKoym5AQLLCuFqiagPrS3yRYAqXVuEIFzhg2/d3lSFTXOtKeTTpUfDZC4VMoY9eP
CSM/THgJiZIgUO9zmdkGz4gRTKz66J9PLkPXd2r10JXOs4jyzcltQJObPpUUUtSb
E3Zu3BkHQXnETWGPY0nUlJmWtopmyxTzBpBPu6ibND7BsmSm7CNN1J/Ff+IqUBYT
ga3+h8VazCvZAI5ZfddPSgzddzzEnTu8E8yzkDlAc/ZpfTaPYxzVCjKBoip0i/eC
ys6shZUIB8Apiw==
-----END CERTIFICATE-----
Generated at Sun Aug 11 00:40:07 2024 by rpki-client on console-fra.rpki-client.org