Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.cer
File: D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.cer (raw, json)
Hash identifier: OnE5K6WlPFVbHB5JGl6E62ADjj+XXPOftlDpWIHsUR0=
Subject key identifier: D3:8D:F1:FE:AB:79:19:2D:7C:5A:DF:07:EF:5B:AE:24:A8:67:D0:5C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 29794C91BE6CECFF274CC47BC508072C4F3059E4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.mft
caRepository: rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 14 Feb 2025 00:40:39 +0000
Certificate not after: Fri 13 Feb 2026 00:45:39 +0000
Subordinate resources: AS: 269265
IP: 45.182.32.0/22
IP: 2804:61ec::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:79:4c:91:be:6c:ec:ff:27:4c:c4:7b:c5:08:07:2c:4f:30:59:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 14 00:40:39 2025 GMT
Not After : Feb 13 00:45:39 2026 GMT
Subject: CN=D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:a0:e9:ef:02:71:57:f2:cd:7b:9a:56:13:
0b:0b:82:b7:4f:e5:56:61:46:da:d8:11:66:da:ab:
78:3b:3e:4e:4a:70:8a:6c:68:24:4e:6b:78:f6:7c:
e6:ff:78:6c:be:2e:77:86:7b:43:0c:f7:89:0d:14:
5e:a8:73:a9:25:89:06:3c:e3:99:cd:40:f1:02:03:
9f:0d:52:85:4a:c2:62:18:ac:49:a3:07:d0:bd:b7:
fa:0d:93:9b:e1:d0:ca:c3:bd:23:9e:18:73:c2:94:
38:51:ab:43:51:a6:fb:43:8c:78:71:e6:3f:15:a8:
37:ba:91:58:e6:0f:e1:80:14:db:e5:9e:ae:6a:b2:
4f:a5:17:82:90:ff:0b:64:e6:3a:e2:74:27:a3:88:
bb:b7:5b:23:a9:9b:d5:9c:98:e7:12:d7:06:13:a6:
b9:5c:13:62:c5:55:7a:7d:4b:f0:98:b1:d7:9a:87:
f3:93:42:df:32:98:7a:19:5e:2e:8a:1c:2f:12:5b:
d7:c8:f7:64:a7:7f:78:a6:3a:6e:f7:86:40:04:e5:
5c:4e:02:04:a6:68:16:d3:0c:2e:77:e4:b6:51:65:
44:3d:c8:39:fa:f8:95:06:da:21:78:59:ce:a3:80:
3b:2d:a3:d6:57:09:af:b4:32:9c:bb:0d:7b:ca:2c:
34:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D3:8D:F1:FE:AB:79:19:2D:7C:5A:DF:07:EF:5B:AE:24:A8:67:D0:5C
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.182.32.0/22
IPv6:
2804:61ec::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
269265
Signature Algorithm: sha256WithRSAEncryption
1f:73:6f:7f:d2:2e:9a:a1:37:5e:0c:ac:fa:9c:98:41:f5:c1:
29:e5:56:2b:f1:8a:a4:b7:63:f7:01:83:0e:99:d8:fe:e5:10:
d0:61:c0:36:3c:40:2f:83:b3:35:b6:84:22:1a:b7:2b:14:a2:
fc:fd:b9:3b:bd:76:ea:25:a3:20:37:f3:b5:12:ea:50:ea:5f:
f0:16:b3:2a:66:b6:67:14:d1:a6:0e:a8:e4:1c:8d:ed:de:5c:
b8:24:bd:b3:e8:15:73:92:2f:60:b9:22:44:e2:b6:cd:6a:35:
5f:71:a6:f2:65:b8:ff:fa:94:08:3d:27:b4:a7:43:d2:e5:f4:
32:0b:b2:79:27:65:d3:e4:4e:b1:e8:c3:10:e6:ac:7f:7d:ab:
77:e4:8d:c5:66:f5:e7:71:c7:40:5c:c6:2e:69:cf:eb:eb:ff:
d4:b1:fc:26:80:91:28:07:69:c7:b2:a9:51:69:6e:4c:b5:c3:
28:ca:f7:4b:90:3c:8d:43:3f:2e:99:8f:95:53:c2:c6:c6:85:
50:eb:6e:f7:8a:9c:43:a9:ee:e4:46:5e:7f:a6:c4:4f:ba:4c:
c5:9a:a1:b9:59:aa:27:db:33:73:5f:f7:d5:fb:d9:61:d9:b6:
36:88:18:54:92:98:55:2b:f2:b1:d8:95:19:65:b1:56:5d:71:
bb:9a:92:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:45 2025 by rpki-client