Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer
File: D40D71C26E8C990D22430A76496945930ECE72FE.cer (raw, json)
Hash identifier: dm98WpcCYjjNLohgFCZapl9cmrsVm/PDCFwFEv10JX0=
Subject key identifier: D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5FA18FF925F3261F4BFFC6A5848CE2FB79C5AA3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/D40D71C26E8C990D22430A76496945930ECE72FE.mft
caRepository: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 16 Dec 2024 16:22:36 +0000
Certificate not after: Mon 15 Dec 2025 16:27:36 +0000
Subordinate resources: AS: 264397
IP: 131.161.92.0/22
IP: 164.163.36.0/22
IP: 170.239.96.0/22
IP: 2804:1dd4::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:a1:8f:f9:25:f3:26:1f:4b:ff:c6:a5:84:8c:e2:fb:79:c5:aa:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 16 16:22:36 2024 GMT
Not After : Dec 15 16:27:36 2025 GMT
Subject: CN=D40D71C26E8C990D22430A76496945930ECE72FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9b:f2:99:db:10:fa:ee:72:01:47:4e:b5:49:
09:da:da:df:95:62:78:0f:6c:3f:0d:e3:a0:82:f6:
fc:d3:65:07:0e:05:a9:2b:36:0b:80:e2:a8:4d:2b:
ec:5c:98:43:ce:ae:d1:13:4e:65:85:58:8d:51:b3:
c7:98:52:4d:00:85:d3:b9:52:8e:6c:a3:b7:88:80:
9c:89:e2:b1:de:e3:42:71:28:3e:4d:1f:55:44:a1:
fc:d9:9f:cb:3c:a8:a3:23:0f:34:64:88:90:62:b2:
2e:ec:0a:50:de:c4:c6:1a:0d:d5:38:39:8b:d9:dd:
b2:35:bf:31:43:5b:8a:ef:29:78:e6:ad:4a:88:15:
6b:00:27:9b:bf:95:f7:b1:48:95:65:56:0f:d2:44:
03:8c:3d:d7:cb:04:0e:6b:d3:7c:6c:7b:f7:dd:c1:
26:99:3f:a9:ed:ad:f2:24:18:b8:2e:a1:3b:ba:23:
33:6b:13:d6:81:cb:5a:f3:f2:8a:d8:5b:eb:97:4f:
e7:2f:6d:0b:7a:31:dd:d3:3f:8c:17:c1:62:b7:a5:
94:d6:48:0d:0b:e5:a8:37:e8:26:bf:fe:83:7a:02:
0e:0e:bb:0e:0a:60:26:f2:73:f1:68:c6:86:3a:f9:
3f:b8:5f:54:29:90:b4:e3:68:84:3d:a9:20:ae:0d:
ba:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/D40D71C26E8C990D22430A76496945930ECE72FE.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.92.0/22
164.163.36.0/22
170.239.96.0/22
IPv6:
2804:1dd4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264397
Signature Algorithm: sha256WithRSAEncryption
13:a9:f0:9c:6b:e1:56:a0:f2:30:a6:6f:01:a6:7c:03:e8:06:
73:4d:02:1c:42:83:fe:e5:29:7c:18:9c:a1:31:e8:e5:b9:6f:
f4:08:b4:1a:1d:0c:07:ca:f5:90:28:f2:9d:8c:65:f3:5a:bf:
c7:ca:35:e3:26:46:04:96:92:dc:07:bd:05:43:d6:79:df:ba:
15:29:6c:37:35:d3:cc:e0:e2:71:55:bb:12:22:85:e7:c6:d2:
83:5c:f5:df:81:7e:7f:7d:42:fd:b4:cb:50:0f:27:43:76:ff:
dc:65:2f:06:fc:7d:f8:c1:ed:f5:3f:6d:83:52:b2:05:67:19:
b7:7a:79:34:c2:2f:ce:74:31:d9:e9:b9:fb:7f:93:66:0b:4f:
38:0d:d1:3c:66:e0:0a:53:67:d5:6d:df:bf:90:06:d9:d6:48:
65:22:f5:ff:6a:4d:59:3f:78:6e:23:25:9e:af:05:a7:dc:42:
57:bb:40:73:d6:0d:0f:86:f1:2f:7f:94:d9:be:89:fc:3a:de:
09:9f:5f:19:b4:60:ff:25:dc:0b:34:47:eb:89:02:b1:d8:6c:
63:cc:30:91:1a:fc:77:5c:af:10:f1:f1:cd:fd:97:f2:55:cd:
57:7c:0e:b3:c9:8d:a3:95:8b:98:7b:5a:6a:1a:68:62:52:77:
e9:0e:27:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:31:22 2025 by rpki-client