Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E820888BFB0DAD374E0F751AA350D4880C41FA44.cer
File: E820888BFB0DAD374E0F751AA350D4880C41FA44.cer (raw, json)
Hash identifier: dkxMuh3JbRE5O4OTHnsP/FgTH5QjrUnJT6NKka+ISsM=
Subject key identifier: E8:20:88:8B:FB:0D:AD:37:4E:0F:75:1A:A3:50:D4:88:0C:41:FA:44
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5C23FFC3EB576B12D45C422404B2BF044F5A11CD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/E820888BFB0DAD374E0F751AA350D4880C41FA44.mft
caRepository: rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 18 Jan 2025 20:29:53 +0000
Certificate not after: Sat 17 Jan 2026 20:34:53 +0000
Subordinate resources: AS: 61621
AS: 267420
IP: 45.235.160.0/22
IP: 170.231.208.0/22
IP: 177.23.252.0/22
IP: 186.209.123.0/24
IP: 186.209.222.0/23
IP: 2804:4d3c::/32
Validation: Failed, certificate revoked on Wed 22 Jan 2025 01:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:23:ff:c3:eb:57:6b:12:d4:5c:42:24:04:b2:bf:04:4f:5a:11:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 18 20:29:53 2025 GMT
Not After : Jan 17 20:34:53 2026 GMT
Subject: CN=E820888BFB0DAD374E0F751AA350D4880C41FA44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:56:b8:d6:f2:b5:32:d5:d2:10:40:3f:97:
cb:43:73:ac:d8:0d:15:34:4c:98:b9:17:d0:14:09:
68:c0:1a:7c:51:82:31:fa:9e:4c:6e:38:7f:a6:05:
2d:e1:89:68:aa:2b:1e:44:15:e8:6d:33:a3:0d:de:
d3:6e:e1:96:85:d3:43:0b:0d:40:e5:a8:d5:1d:08:
c1:cb:b1:9b:96:1a:f9:6e:d4:ad:b1:b3:cb:2a:5f:
d4:2f:6f:33:a3:bd:4f:85:c6:cc:97:2d:c1:df:ee:
03:96:3a:48:85:8b:db:4e:75:7e:ce:5a:8e:eb:41:
04:b0:fe:2a:66:80:84:d4:55:89:78:c9:96:3b:74:
d9:87:43:f4:8c:9e:ba:37:9e:7b:a1:37:4f:d1:b0:
2d:5f:8c:ed:c7:43:9b:2e:5e:6f:4d:da:2c:9f:2e:
15:61:27:b0:6f:07:63:2e:5a:bf:a8:a4:03:a6:5d:
2d:0f:2f:0f:35:53:da:20:05:3a:af:aa:20:96:c7:
61:18:9f:72:2f:89:6a:b5:4d:25:93:f1:83:26:b3:
8a:6e:bc:0b:20:ff:93:21:f2:ca:48:f0:ab:70:e3:
24:8e:95:3f:65:2b:ba:ef:26:80:46:07:a3:ac:35:
99:7b:8a:90:7a:9a:c1:26:a8:bc:83:6f:69:05:c6:
66:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E8:20:88:8B:FB:0D:AD:37:4E:0F:75:1A:A3:50:D4:88:0C:41:FA:44
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/E820888BFB0DAD374E0F751AA350D4880C41FA44.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.160.0/22
170.231.208.0/22
177.23.252.0/22
186.209.123.0/24
186.209.222.0/23
IPv6:
2804:4d3c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61621
267420
Signature Algorithm: sha256WithRSAEncryption
4a:51:35:44:65:2b:9e:73:2c:b5:42:f2:84:d0:cd:e7:9b:5f:
92:34:86:b2:24:36:fb:d1:25:f3:c7:16:1c:b1:03:2b:7e:a4:
58:ce:25:f9:a6:a9:5e:e6:d9:a7:e0:6b:46:d8:39:f6:a3:be:
b5:aa:11:ed:0e:2a:3f:c7:46:10:2d:0d:f9:13:73:19:96:07:
71:13:18:0f:cd:4e:10:99:f8:ff:26:29:d1:7c:d5:2a:89:ef:
32:fd:f5:c1:e4:e9:0e:ba:00:fa:b0:35:b3:b6:4d:60:ff:dc:
8d:8f:18:f1:60:b9:dd:0d:22:97:6b:10:ee:75:d1:26:77:8c:
96:41:48:a8:6a:40:40:04:b2:ba:6d:c8:6c:69:60:dd:4c:1f:
de:92:59:d5:7b:b5:81:b7:49:74:44:37:fb:19:1e:e7:eb:b0:
b9:49:7c:0c:0c:dd:4e:b2:55:24:4c:73:ba:50:1c:05:9c:3b:
a8:af:e1:18:fb:63:a4:85:7d:e3:f1:7c:b1:cc:b4:1f:a4:58:
f7:10:47:61:03:8b:9c:9f:9d:88:6b:9b:da:92:a5:22:4f:66:
8c:95:53:b0:63:cd:d4:86:55:10:a6:9c:63:a0:75:b6:85:4b:
56:2e:86:00:e0:62:ab:6d:78:df:c1:43:02:72:ac:0d:5b:2e:
e9:2a:1e:60
-----BEGIN CERTIFICATE-----
MIIGTTCCBTWgAwIBAgIUXCP/w+tXaxLUXEIkBLK/BE9aEc0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMTgyMDI5NTNaFw0yNjAxMTcyMDM0NTNaMDMxMTAvBgNV
BAMTKEU4MjA4ODhCRkIwREFEMzc0RTBGNzUxQUEzNTBENDg4MEM0MUZBNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq1Va41vK1MtXSEEA/l8tDc6zY
DRU0TJi5F9AUCWjAGnxRgjH6nkxuOH+mBS3hiWiqKx5EFehtM6MN3tNu4ZaF00ML
DUDlqNUdCMHLsZuWGvlu1K2xs8sqX9QvbzOjvU+FxsyXLcHf7gOWOkiFi9tOdX7O
Wo7rQQSw/ipmgITUVYl4yZY7dNmHQ/SMnro3nnuhN0/RsC1fjO3HQ5suXm9N2iyf
LhVhJ7BvB2MuWr+opAOmXS0PLw81U9ogBTqvqiCWx2EYn3IviWq1TSWT8YMms4pu
vAsg/5Mh8spI8Ktw4ySOlT9lK7rvJoBGB6OsNZl7ipB6msEmqLyDb2kFxmb3AgMB
AAGjggNXMIIDUzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBToIIiL+w2tN04P
dRqjUNSIDEH6RDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHNC
OVNvRjRqRmJpem5mNGR4S0RvZTdUc0x2MVFFTGszM2J4YlhrSEE5UGcvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hz
QjlTb0Y0akZiaXpuZjRkeEtEb2U3VHNMdjFRRUxrMzNieGJYa0hBOVBnLzAvRTgy
MDg4OEJGQjBEQUQzNzRFMEY3NTFBQTM1MEQ0ODgwQzQxRkE0NC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEH
AQH/BDcwNTAkBAIAATAeAwQCLeugAwQCqufQAwQCsRf8AwQAutF7AwQButHeMA0E
AgACMAcDBQAoBE08MB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDwtQIDBBScMA0G
CSqGSIb3DQEBCwUAA4IBAQBKUTVEZSuecyy1QvKE0M3nm1+SNIayJDb70SXzxxYc
sQMrfqRYziX5pqle5tmn4GtG2Dn2o761qhHtDio/x0YQLQ35E3MZlgdxExgPzU4Q
mfj/JinRfNUqie8y/fXB5OkOugD6sDWztk1g/9yNjxjxYLndDSKXaxDuddEmd4yW
QUioakBABLK6bchsaWDdTB/eklnVe7WBt0l0RDf7GR7n67C5SXwMDN1OslUkTHO6
UBwFnDuor+EY+2OkhX3j8XyxzLQfpFj3EEdhA4ucn52Ia5vakqUiT2aMlVOwY83U
hlUQppxjoHW2hUtWLoYA4GKrbXjfwUMCcqwNWy7pKh5g
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:19:52 2025 by rpki-client