Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D37C4A3F93D03DD215E03306519BD8C784C71CB4.cer
File: D37C4A3F93D03DD215E03306519BD8C784C71CB4.cer (raw, json)
Hash identifier: ilrhB0k3UBQnNWF3RQgYsxYxWBr3I/Yo3qaAUDH/4OM=
Subject key identifier: D3:7C:4A:3F:93:D0:3D:D2:15:E0:33:06:51:9B:D8:C7:84:C7:1C:B4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0D4A3C2555EAF2DAAAEC9C3089BDE4FBE46922B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/D37C4A3F93D03DD215E03306519BD8C784C71CB4.mft
caRepository: rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sun 09 Feb 2025 17:08:27 +0000
Certificate not after: Sun 08 Feb 2026 17:13:27 +0000
Subordinate resources: AS: 268055
IP: 45.168.112.0/22
IP: 2804:5744::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:4a:3c:25:55:ea:f2:da:aa:ec:9c:30:89:bd:e4:fb:e4:69:22:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 9 17:08:27 2025 GMT
Not After : Feb 8 17:13:27 2026 GMT
Subject: CN=D37C4A3F93D03DD215E03306519BD8C784C71CB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:42:da:84:1a:b4:a3:18:5f:ed:5f:2a:d6:38:
ed:35:ee:a3:40:4a:6b:2f:51:d4:c6:44:cd:14:83:
27:b2:6d:61:07:50:eb:b6:f3:92:a7:47:dd:85:e5:
8f:bd:3a:78:b0:9c:3a:26:5e:d7:8c:0c:ff:5f:99:
02:32:5e:21:a3:b7:5e:dd:d9:fd:d4:d3:c0:e0:b9:
f4:43:97:57:d1:5f:13:ee:ea:39:a2:da:f6:32:e7:
d8:cb:b2:3a:b8:e6:da:86:ab:30:c4:1d:6d:86:6d:
5b:c8:f3:40:93:75:30:c4:a4:e6:41:85:71:e0:35:
a1:50:58:c1:f9:50:2b:08:5d:5b:ad:71:c7:f8:65:
be:9c:c2:b5:03:77:79:12:aa:db:4f:83:c3:94:81:
c1:f6:61:b5:ba:5f:47:6d:b4:2b:11:8a:85:e8:0d:
bc:fe:0e:3b:1c:f7:fb:fb:49:69:a7:74:c9:ef:9b:
a1:4c:23:94:8c:c5:21:d7:bd:60:0b:7b:ed:02:92:
3d:2f:e6:53:be:00:1b:31:5c:6b:cc:d5:66:05:90:
44:97:7d:92:1e:28:fb:88:05:70:b9:ef:20:b4:3b:
0e:29:28:93:02:93:7e:4d:ea:74:fe:c5:49:a0:2a:
76:ad:bb:67:33:98:2a:a9:14:83:4d:f6:c8:c7:f1:
fb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D3:7C:4A:3F:93:D0:3D:D2:15:E0:33:06:51:9B:D8:C7:84:C7:1C:B4
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/D37C4A3F93D03DD215E03306519BD8C784C71CB4.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.112.0/22
IPv6:
2804:5744::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268055
Signature Algorithm: sha256WithRSAEncryption
09:9c:49:cf:47:28:a2:93:2e:12:6f:7e:74:9e:07:47:31:37:
85:64:f6:14:bc:0f:d7:9a:39:87:73:bc:48:79:05:90:7c:9e:
24:57:4b:b8:1c:dd:03:8b:98:63:79:70:ae:40:49:43:9a:c8:
cd:00:0f:03:f9:e2:19:ea:70:c1:aa:e9:f7:0c:01:4b:22:96:
68:db:ee:ca:de:15:e2:c2:af:99:32:cd:b3:a5:08:3f:cc:18:
61:03:5b:2a:92:62:be:50:a1:25:fe:a0:b3:e6:57:4c:76:44:
c2:c5:f9:90:fc:50:fa:62:3f:0f:ef:20:0e:87:d1:3e:6c:af:
a5:09:80:bd:f6:75:94:44:41:68:9e:a9:c0:39:68:0c:5c:28:
14:2f:78:ce:b4:0d:ce:19:ad:0c:29:c2:03:36:5d:69:bf:91:
d6:49:87:66:ba:13:90:91:45:93:75:15:d6:05:bb:d4:5d:26:
1b:c8:1c:9b:da:51:30:e7:e4:b8:3c:4f:69:3e:4b:38:ef:5a:
16:42:80:ca:4b:6e:c9:f1:ae:67:79:44:2b:0c:87:24:0a:22:
22:4f:4e:27:f6:c5:42:4d:c5:6a:3e:eb:44:de:cb:e4:d7:97:
d7:f8:18:5a:56:d9:f0:38:2c:3a:83:d4:60:1f:14:5f:1d:d1:
ff:15:4e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:33:09 2025 by rpki-client