Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DBB64CCDB727E7F11F10919482DBA32E200A88AE.cer
File: DBB64CCDB727E7F11F10919482DBA32E200A88AE.cer (raw, json)
Hash identifier: fJ1pIV3H/cNnBir3qH+Dd2mHPWYMF4UdB7uZE1qL9W4=
Subject key identifier: DB:B6:4C:CD:B7:27:E7:F1:1F:10:91:94:82:DB:A3:2E:20:0A:88:AE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 01CAFC34C738A4BA98D5435572B9437579F09C77
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/1/DBB64CCDB727E7F11F10919482DBA32E200A88AE.mft
caRepository: rsync://rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 22:29:52 +0000
Certificate not after: Wed 02 Apr 2025 22:34:52 +0000
Subordinate resources: AS: 269378
IP: 45.185.140.0/22
IP: 2804:63b4::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:ca:fc:34:c7:38:a4:ba:98:d5:43:55:72:b9:43:75:79:f0:9c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 22:29:52 2024 GMT
Not After : Apr 2 22:34:52 2025 GMT
Subject: CN=DBB64CCDB727E7F11F10919482DBA32E200A88AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d9:9f:63:2c:af:ea:97:ba:a4:16:cf:e2:1e:
05:a3:80:eb:91:14:9c:4c:85:ee:62:74:9d:c8:3d:
99:6c:1b:0e:e4:f1:55:6b:e1:c3:bf:8c:b2:f2:38:
b0:4b:5b:43:af:ae:8c:d9:7b:3f:2e:04:b4:7d:2e:
6f:e6:ac:e7:9d:fd:6d:6b:b8:b8:5e:ce:03:39:3a:
c6:94:8b:97:f7:c0:c9:68:a4:7d:39:a4:da:0d:1c:
44:ea:b2:2f:50:4f:59:c5:13:4a:32:c2:80:67:8c:
49:a4:01:6d:d3:b2:2a:19:eb:a2:e7:e7:4f:f9:29:
f0:e8:71:f0:aa:c1:c2:7f:73:c3:5a:9a:61:87:d6:
41:e2:cf:79:cf:bf:ce:aa:f5:e1:31:98:a2:a9:64:
2c:ef:3a:26:1a:3a:bc:44:16:b9:34:63:a3:bf:86:
b6:77:8f:f8:8f:3d:a1:1f:44:85:6a:49:cc:12:2a:
a4:f4:8a:fb:f1:b4:3a:b8:21:a7:93:21:2a:b2:60:
74:7f:d2:59:64:4c:d0:e0:a1:3a:19:b1:08:57:ad:
f7:43:30:ec:02:e5:ed:d9:2c:c8:0c:46:25:b2:30:
03:18:b9:86:30:81:00:0f:c0:b7:87:01:82:1d:e7:
12:44:27:69:2d:03:1f:6e:1a:16:55:cd:e3:ca:2b:
d6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DB:B6:4C:CD:B7:27:E7:F1:1F:10:91:94:82:DB:A3:2E:20:0A:88:AE
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/1/DBB64CCDB727E7F11F10919482DBA32E200A88AE.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.185.140.0/22
IPv6:
2804:63b4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
269378
Signature Algorithm: sha256WithRSAEncryption
bf:7f:25:c6:03:16:13:9e:52:cd:21:ac:d1:d0:da:51:17:1e:
21:38:06:ba:47:80:23:2a:bf:c5:95:75:d8:ab:6b:f8:85:9e:
50:3f:53:a7:eb:c2:89:6b:eb:cd:ad:5f:84:8c:7a:c7:c2:b2:
c3:2c:ce:f1:22:04:d1:5b:36:6b:85:76:94:06:81:d2:60:f4:
fd:a2:5f:07:f6:49:0f:36:28:bb:4b:76:7b:35:17:67:75:3c:
9b:01:4a:3f:73:c4:a9:29:65:3d:6a:62:62:c1:7d:6b:2e:54:
d8:92:8b:7f:81:f5:6b:56:7c:fd:4f:d5:e7:61:b0:ca:5d:d8:
c4:6e:6c:e8:83:96:c0:32:c2:55:d4:70:02:12:37:1d:b1:e7:
0e:2a:b0:03:8c:4a:bb:86:c0:b6:a7:9f:9a:6c:a4:0f:87:9a:
f3:2b:5a:1e:8c:4d:e4:8a:ef:6c:a2:9a:64:66:07:35:56:55:
24:0f:21:00:52:69:6a:bd:e8:8a:23:3b:b6:26:8a:5b:d1:91:
fe:a1:96:e4:89:39:65:cf:4b:4d:4d:c0:d2:53:9f:ee:a7:c4:
f2:d1:23:fe:2e:61:69:bf:a7:2d:3e:dc:fd:c8:e6:c8:00:9b:
4c:bb:bd:bc:6d:1e:2a:c7:ab:54:f2:07:49:d9:7c:76:0c:d4:
08:84:d2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:28:13 2025 by rpki-client