Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D29EC91A5E5ACAD123140211CBB6A6005BC225CA.cer
File: D29EC91A5E5ACAD123140211CBB6A6005BC225CA.cer (raw, json)
Hash identifier: t10DM0Nx0dxzR3Gwi8+sheMHaJ9OvLtUPz0I5ActBbA=
Subject key identifier: D2:9E:C9:1A:5E:5A:CA:D1:23:14:02:11:CB:B6:A6:00:5B:C2:25:CA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 78AB0DFAAE82473C7F0D00847AA4A44E47E44AE3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/D29EC91A5E5ACAD123140211CBB6A6005BC225CA.mft
caRepository: rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 30 Sep 2024 15:26:53 +0000
Certificate not after: Mon 29 Sep 2025 15:31:53 +0000
Subordinate resources: AS: 267155
IP: 45.229.144.0/22
IP: 2804:48f4::/32
Validation: Failed, certificate revoked on Fri 04 Oct 2024 10:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:ab:0d:fa:ae:82:47:3c:7f:0d:00:84:7a:a4:a4:4e:47:e4:4a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 30 15:26:53 2024 GMT
Not After : Sep 29 15:31:53 2025 GMT
Subject: CN=D29EC91A5E5ACAD123140211CBB6A6005BC225CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c8:a6:e0:4a:78:a7:42:61:44:d5:2c:6d:26:
67:f5:74:6f:c6:6f:68:9f:0c:53:1b:39:c7:5c:ea:
b9:04:98:f9:43:e1:c4:d9:cb:6e:ef:2e:0c:d6:ba:
1b:e1:0b:5b:40:ed:83:73:8a:28:42:54:49:f9:77:
86:5b:dd:a2:de:d5:1b:0f:56:a8:7b:4b:d3:cc:50:
5f:0a:ef:4b:71:f6:8e:7c:67:ad:e7:3d:f2:d9:c4:
da:f1:4b:69:64:7c:aa:ee:84:d1:a8:27:bc:2b:a2:
68:c8:31:12:c6:1a:9c:63:12:7b:09:09:0d:d4:e4:
1b:79:b0:91:df:9c:54:f7:99:0f:ef:d1:8a:c4:b2:
9d:6b:ca:61:39:df:a2:c4:c5:18:09:0e:0a:29:f1:
d1:57:18:fb:3b:b0:c4:ec:4e:53:4e:96:77:8d:18:
4e:81:56:dd:7a:e0:22:06:b2:07:65:3b:60:fa:6a:
ba:49:53:df:81:d8:95:93:2e:f2:4a:7c:b2:2c:0e:
af:e0:f4:10:ff:ee:32:05:ad:df:1b:10:78:29:71:
09:a5:d2:3f:33:06:5a:c6:98:78:d3:db:c4:5c:2c:
07:ed:fd:9f:6e:04:14:35:30:92:a2:8b:3f:4f:23:
12:55:82:31:d0:91:07:74:1e:40:3f:46:d2:c7:f5:
4e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D2:9E:C9:1A:5E:5A:CA:D1:23:14:02:11:CB:B6:A6:00:5B:C2:25:CA
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/D29EC91A5E5ACAD123140211CBB6A6005BC225CA.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.144.0/22
IPv6:
2804:48f4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267155
Signature Algorithm: sha256WithRSAEncryption
dc:22:1c:aa:90:af:b6:23:18:e4:25:7c:f6:02:63:b0:cf:91:
13:e2:ff:6c:b4:09:c3:f9:01:13:6f:62:49:3c:0e:84:96:c5:
08:b3:b1:55:27:c5:ac:90:e8:79:ba:bc:31:69:5e:32:bd:fd:
23:5d:e8:be:e2:c3:e6:5d:cd:3c:cc:d3:4e:a4:97:ac:2b:37:
3f:cc:2d:ba:b5:ea:2b:2d:24:65:ee:7d:79:21:b9:ba:f2:be:
0a:4f:03:cf:1f:e6:73:54:b8:70:9c:81:2c:d9:53:d5:f0:a8:
ab:d5:7a:18:bf:7a:6c:ef:1a:5b:d0:43:83:88:9e:ba:d0:99:
b6:ec:75:11:9c:1c:b0:61:e0:4a:ab:83:a6:44:fb:45:73:42:
4e:80:78:f4:49:7c:af:21:c0:0c:67:b9:64:3a:dc:eb:6a:12:
d9:78:b9:a0:65:4e:f4:dd:ec:0f:4c:52:63:b7:ac:85:3b:5b:
4c:31:c6:ed:87:c9:cc:98:fa:04:6e:30:10:f5:5e:24:5d:0b:
c7:dc:a5:ef:fe:32:89:fe:6b:ef:c3:1e:3f:f3:d6:89:21:bd:
5f:62:27:d2:4d:3c:6b:55:41:dc:f2:a6:35:7a:f4:23:d2:0a:
0a:eb:d9:0d:b3:80:ac:5d:c1:12:d3:95:29:44:c6:70:4d:77:
d2:25:55:b6
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUeKsN+q6CRzx/DQCEeqSkTkfkSuMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MzAxNTI2NTNaFw0yNTA5MjkxNTMxNTNaMDMxMTAvBgNV
BAMTKEQyOUVDOTFBNUU1QUNBRDEyMzE0MDIxMUNCQjZBNjAwNUJDMjI1Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCayKbgSninQmFE1SxtJmf1dG/G
b2ifDFMbOcdc6rkEmPlD4cTZy27vLgzWuhvhC1tA7YNziihCVEn5d4Zb3aLe1RsP
Vqh7S9PMUF8K70tx9o58Z63nPfLZxNrxS2lkfKruhNGoJ7wromjIMRLGGpxjEnsJ
CQ3U5Bt5sJHfnFT3mQ/v0YrEsp1rymE536LExRgJDgop8dFXGPs7sMTsTlNOlneN
GE6BVt164CIGsgdlO2D6arpJU9+B2JWTLvJKfLIsDq/g9BD/7jIFrd8bEHgpcQml
0j8zBlrGmHjT28RcLAft/Z9uBBQ1MJKiiz9PIxJVgjHQkQd0HkA/RtLH9U6LAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTSnskaXlrK0SMU
AhHLtqYAW8IlyjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN0FO
OVZNZjNqMmlMaHNqZEZibk5zNWh3NU4xQXI5V0NNSzFxQTluY3VZWHIvMDCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN0FO
OVZNZjNqMmlMaHNqZEZibk5zNWh3NU4xQXI5V0NNSzFxQTluY3VZWHIvMC9EMjlF
QzkxQTVFNUFDQUQxMjMxNDAyMTFDQkI2QTYwMDVCQzIyNUNBLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAIt5ZAwDQQCAAIwBwMFACgESPQwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBBOTMA0GCSqGSIb3DQEBCwUAA4IBAQDcIhyqkK+2IxjkJXz2
AmOwz5ET4v9stAnD+QETb2JJPA6ElsUIs7FVJ8WskOh5urwxaV4yvf0jXei+4sPm
Xc08zNNOpJesKzc/zC26teorLSRl7n15Ibm68r4KTwPPH+ZzVLhwnIEs2VPV8Kir
1XoYv3ps7xpb0EODiJ660Jm27HURnBywYeBKq4OmRPtFc0JOgHj0SXyvIcAMZ7lk
OtzrahLZeLmgZU703ewPTFJjt6yFO1tMMcbth8nMmPoEbjAQ9V4kXQvH3KXv/jKJ
/mvvwx4/89aJIb1fYifSTTxrVUHc8qY1evQj0goK69kNs4CsXcES05UpRMZwTXfS
JVW2
-----END CERTIFICATE-----
Generated at Fri Oct 4 14:31:46 2024 by rpki-client on console-ams.rpki-client.org