Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D4011B3B71F651F115EC7A23D76BF65D250F0114.cer
File: D4011B3B71F651F115EC7A23D76BF65D250F0114.cer (raw, json)
Hash identifier: krfjb6e7EyGzu1R4T9f1RbLzgwzkqva2Gt6+NkZ/d+w=
Subject key identifier: D4:01:1B:3B:71:F6:51:F1:15:EC:7A:23:D7:6B:F6:5D:25:0F:01:14
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2F71E567262F59D7887426E2EAF0DBDDBA8A3F2C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D4011B3B71F651F115EC7A23D76BF65D250F0114.mft
caRepository: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 17 Mar 2025 14:41:59 +0000
Certificate not after: Mon 16 Mar 2026 14:46:59 +0000
Subordinate resources: AS: 11432
IP: 200.155.128.0/18
IP: 200.170.192.0/18
IP: 200.194.248.0/21
IP: 200.201.128.0/19
IP: 2804:138::/32
Validation: Failed, certificate revoked on Mon 17 Mar 2025 15:23:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:71:e5:67:26:2f:59:d7:88:74:26:e2:ea:f0:db:dd:ba:8a:3f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 17 14:41:59 2025 GMT
Not After : Mar 16 14:46:59 2026 GMT
Subject: CN=D4011B3B71F651F115EC7A23D76BF65D250F0114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ed:7a:01:99:65:0b:92:75:58:16:37:22:d9:
56:37:20:50:cd:db:fc:a6:0c:52:04:24:1b:2a:fd:
f0:cf:28:ca:0a:c7:1a:09:75:7f:21:3e:34:bc:f9:
6b:64:4f:9a:bc:c9:c1:23:4b:48:d3:f1:fb:47:6d:
03:0e:36:8b:88:c2:f6:e2:99:49:bc:11:09:ae:25:
f1:ac:a8:28:ff:7d:c7:82:7d:23:b5:b1:e3:4d:e8:
71:01:1c:42:6b:ae:7e:63:9b:6c:50:1c:a7:59:13:
f4:32:13:0b:36:3c:b1:3b:c0:ed:5f:79:05:f4:dd:
f2:26:1a:db:0c:04:c2:ea:01:b5:68:79:d0:c6:ea:
00:7d:9a:5b:51:37:20:1b:f6:94:83:a3:17:05:a2:
3a:6d:6a:24:7a:f7:20:5b:f4:26:f3:bd:88:4d:32:
74:ab:b7:a3:79:70:77:8e:39:af:e2:6e:e7:1c:e6:
d1:bd:3f:a7:80:e6:0d:d6:0c:2a:48:19:b7:cc:9f:
42:bb:a7:7c:28:87:a6:a3:40:6c:ac:e3:ee:9c:24:
d3:c0:da:33:3e:b3:3d:7c:6a:da:3b:ce:1f:16:9a:
16:de:dc:69:bf:9b:2d:66:53:b3:f8:07:a8:b1:8a:
18:d3:8b:97:5b:08:07:d2:aa:e4:a0:38:71:a4:66:
24:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D4:01:1B:3B:71:F6:51:F1:15:EC:7A:23:D7:6B:F6:5D:25:0F:01:14
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D4011B3B71F651F115EC7A23D76BF65D250F0114.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.155.128.0/18
200.170.192.0/18
200.194.248.0/21
200.201.128.0/19
IPv6:
2804:138::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11432
Signature Algorithm: sha256WithRSAEncryption
b6:0c:17:8b:fe:25:81:78:e7:d7:76:e5:03:0b:de:cd:4a:f0:
32:6c:15:36:7e:f5:51:a1:3b:e4:0d:0d:00:e8:29:e0:58:91:
b2:c4:c6:10:12:79:32:2b:07:b2:5a:b2:72:e1:85:9b:21:68:
14:ef:02:e0:f0:14:cc:2a:25:e1:49:bc:34:9a:29:8c:d1:0a:
85:43:fb:ca:3e:eb:8b:94:22:7d:40:e1:76:bc:45:8e:42:d6:
2d:d4:b4:3e:93:35:e0:b2:35:f5:9c:1b:73:83:b0:5a:ae:09:
3a:ce:de:34:e9:b4:64:b6:d9:8f:47:b7:25:2d:fe:d2:f4:fc:
d1:5c:0e:39:9f:e9:b9:cc:d5:07:d7:47:48:a3:1d:77:fc:c9:
06:01:05:2e:89:2b:f3:9f:16:c3:8b:06:da:71:ba:aa:43:0b:
ae:23:0c:14:ef:82:4a:d9:e9:d3:a0:78:41:7f:87:6f:51:03:
6b:94:fa:eb:ae:27:59:f2:32:2d:19:36:93:07:83:39:ef:4b:
82:7a:e4:71:87:49:38:c7:87:b4:2d:2c:d8:e8:d8:92:93:39:
5d:82:a6:58:1e:a1:9c:5f:7d:4e:67:70:bf:3f:a8:de:6c:7c:
44:ad:d4:df:d1:14:ee:c2:3a:7c:cf:d3:ef:f6:0a:bf:94:eb:
4b:45:75:af
-----BEGIN CERTIFICATE-----
MIIGQTCCBSmgAwIBAgIUL3HlZyYvWdeIdCbi6vDb3bqKPywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMTcxNDQxNTlaFw0yNjAzMTYxNDQ2NTlaMDMxMTAvBgNV
BAMTKEQ0MDExQjNCNzFGNjUxRjExNUVDN0EyM0Q3NkJGNjVEMjUwRjAxMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn7XoBmWULknVYFjci2VY3IFDN
2/ymDFIEJBsq/fDPKMoKxxoJdX8hPjS8+WtkT5q8ycEjS0jT8ftHbQMONouIwvbi
mUm8EQmuJfGsqCj/fceCfSO1seNN6HEBHEJrrn5jm2xQHKdZE/QyEws2PLE7wO1f
eQX03fImGtsMBMLqAbVoedDG6gB9mltRNyAb9pSDoxcFojptaiR69yBb9CbzvYhN
MnSrt6N5cHeOOa/ibucc5tG9P6eA5g3WDCpIGbfMn0K7p3woh6ajQGys4+6cJNPA
2jM+sz18ato7zh8Wmhbe3Gm/my1mU7P4B6ixihjTi5dbCAfSquSgOHGkZiTDAgMB
AAGjggNLMIIDRzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTUARs7cfZR8RXs
eiPXa/ZdJQ8BFDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNnhH
aHNRUHhpYlR6NFpKVk1CUGpETXdSdE1BOExmdmJQdms1enFaTWRQalMvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZ4
R2hzUVB4aWJUejRaSlZNQlBqRE13UnRNQThMZnZiUHZrNXpxWk1kUGpTLzEvRDQw
MTFCM0I3MUY2NTFGMTE1RUM3QTIzRDc2QkY2NUQyNTBGMDExNC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH
AQH/BDEwLzAeBAIAATAYAwQGyJuAAwQGyKrAAwQDyML4AwQFyMmAMA0EAgACMAcD
BQAoBAE4MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiyoMA0GCSqGSIb3DQEBCwUA
A4IBAQC2DBeL/iWBeOfXduUDC97NSvAybBU2fvVRoTvkDQ0A6CngWJGyxMYQEnky
KweyWrJy4YWbIWgU7wLg8BTMKiXhSbw0mimM0QqFQ/vKPuuLlCJ9QOF2vEWOQtYt
1LQ+kzXgsjX1nBtzg7Bargk6zt406bRkttmPR7clLf7S9PzRXA45n+m5zNUH10dI
ox13/MkGAQUuiSvznxbDiwbacbqqQwuuIwwU74JK2enToHhBf4dvUQNrlPrrridZ
8jItGTaTB4M570uCeuRxh0k4x4e0LSzY6NiSkzldgqZYHqGcX31OZ3C/P6jebHxE
rdTf0RTuwjp8z9Pv9gq/lOtLRXWv
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:21:13 2025 by rpki-client