Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.cer
File: D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.cer (raw, json)
Hash identifier: Y3folMW5cR9qZC4zYeJ/jjiJF9nKFqBw40hXghBOYuI=
Subject key identifier: D5:A9:D3:63:5F:3D:EC:D3:DB:27:7A:C6:7D:C6:A6:AB:D2:E8:3D:EB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 551190249FD4F0F7D34340D9E9DCC150B0D0E0D0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.mft
caRepository: rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 29 Apr 2025 17:42:43 +0000
Certificate not after: Tue 28 Apr 2026 17:47:43 +0000
Subordinate resources: AS: 267027
IP: 45.227.168.0/22
IP: 2804:4708::/32
Validation: Failed, certificate revoked on Wed 06 Aug 2025 16:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:11:90:24:9f:d4:f0:f7:d3:43:40:d9:e9:dc:c1:50:b0:d0:e0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 29 17:42:43 2025 GMT
Not After : Apr 28 17:47:43 2026 GMT
Subject: CN=D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a9:d5:d3:7f:c8:82:72:9a:60:af:0d:98:45:
ab:e3:92:b9:ed:71:e6:a9:0f:66:ed:77:74:e7:f3:
31:a8:99:76:93:69:f6:00:58:44:99:1a:51:17:bc:
d6:fb:2e:c4:bf:90:3e:52:7a:52:5c:9f:b8:fc:99:
9c:7c:67:01:e7:3a:53:a1:33:d1:b6:5f:a2:27:ae:
8c:4c:6e:bd:55:5f:5f:16:52:59:69:ce:9e:5b:01:
f3:f3:a0:94:f7:bc:49:90:5d:47:b9:54:bb:c9:85:
f9:07:10:cc:09:03:39:ca:59:cf:c1:91:29:8d:fb:
d7:f1:96:9e:61:41:a9:9f:3c:31:1c:6f:fc:41:5d:
af:c1:a9:6c:61:4e:fd:f0:a4:15:a6:1b:3c:ad:2d:
0b:f1:b2:a5:d3:bc:b1:c9:ad:39:ab:98:3b:e6:1f:
b8:13:e7:e0:25:d8:b4:d2:00:5a:f1:19:be:29:98:
19:30:44:3a:17:01:83:8c:23:0d:fa:0a:0c:b5:12:
86:17:a0:99:50:81:ee:93:b3:ab:a0:10:6d:f2:ff:
73:14:cc:93:fd:1c:9b:b1:19:12:7b:58:b8:de:fb:
b8:7a:17:57:ab:71:43:c3:28:11:de:9a:15:53:00:
bc:df:3f:43:30:06:0a:e9:47:32:29:66:15:1d:08:
c8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D5:A9:D3:63:5F:3D:EC:D3:DB:27:7A:C6:7D:C6:A6:AB:D2:E8:3D:EB
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.227.168.0/22
IPv6:
2804:4708::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267027
Signature Algorithm: sha256WithRSAEncryption
ca:7b:2f:bd:3e:9d:f8:9a:db:5f:b9:cf:93:02:bf:3e:03:24:
17:d4:d0:ae:45:2b:74:e8:75:f2:0e:e4:a4:9d:8a:46:ec:45:
cc:87:4b:90:bd:91:cd:59:0e:ca:45:0c:ca:8a:8e:9c:34:8b:
0c:15:71:90:39:52:5c:5f:45:a8:73:3d:45:1b:b7:52:23:17:
96:fb:63:50:11:4b:91:e1:87:5c:2c:ff:7f:c1:f6:77:a9:a6:
b9:84:17:77:f0:ff:df:f0:75:b3:38:74:12:65:b0:d6:58:78:
7a:3b:cb:b0:65:43:b7:98:93:6a:41:df:6f:2e:81:c6:93:6a:
00:75:42:f0:94:af:81:3a:c6:d2:72:6f:23:26:97:30:b3:5f:
47:3d:9a:17:a8:42:77:3e:a0:61:20:5b:cd:28:8c:57:08:b6:
a5:50:e8:ab:8a:50:72:e6:ac:4b:8e:dc:15:82:00:ac:cb:42:
1e:40:dd:e7:cd:2e:e6:0a:af:0d:98:75:52:5d:11:d1:e1:d4:
19:d9:8b:9b:ff:58:9d:af:f7:ca:a9:5c:5e:3d:6d:3b:7e:ef:
64:4c:9c:3a:38:33:ce:15:bc:3c:60:4c:7b:06:10:76:a6:3c:
e1:13:bd:a4:51:99:f2:3e:6e:f9:88:2c:ce:16:58:5a:7d:db:
89:3c:fa:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:31:32 2025 by rpki-client