Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E8547D3CBE9C28478E0C3EB8DB7E37E86D8B5DEC.cer
File: E8547D3CBE9C28478E0C3EB8DB7E37E86D8B5DEC.cer (raw, json)
Hash identifier: y98VWMqNaU66yF0u1IoCggarRMCUtvqJquz9NW3TgBo=
Subject key identifier: E8:54:7D:3C:BE:9C:28:47:8E:0C:3E:B8:DB:7E:37:E8:6D:8B:5D:EC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 25876046C796D0A6796D4D282BAB212100742358
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/E8547D3CBE9C28478E0C3EB8DB7E37E86D8B5DEC.mft
caRepository: rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 05 May 2025 20:25:09 +0000
Certificate not after: Mon 04 May 2026 20:30:09 +0000
Subordinate resources: AS: 267961
IP: 45.165.160.0/22
IP: 2804:55dc::/32
Validation: Failed, certificate revoked on Fri 09 May 2025 16:59:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:87:60:46:c7:96:d0:a6:79:6d:4d:28:2b:ab:21:21:00:74:23:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: May 5 20:25:09 2025 GMT
Not After : May 4 20:30:09 2026 GMT
Subject: CN=E8547D3CBE9C28478E0C3EB8DB7E37E86D8B5DEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e5:49:9e:65:f4:64:67:4b:46:69:e5:14:f5:
a7:fd:59:58:92:70:5c:f5:22:e7:10:bc:a0:b1:ef:
fc:ab:f4:a4:77:13:59:14:a2:71:60:9d:55:4e:d4:
62:17:00:30:0f:72:47:0e:f6:0e:0e:e9:5a:5a:c3:
7b:c4:ec:f8:9b:f2:3e:25:f6:95:83:0c:f7:d7:1e:
44:4a:fe:96:69:10:a1:9f:8d:d1:7f:39:6e:b8:98:
8f:47:f7:f8:cc:8a:e3:93:87:2a:18:21:ea:27:31:
d7:b1:93:1b:dd:5f:8c:58:2c:2f:92:8f:86:15:43:
79:83:02:a4:ae:26:4e:84:36:03:9c:a3:52:c7:d9:
48:32:5c:c7:92:c1:3f:db:14:c6:5c:6c:43:3d:60:
76:8b:34:ae:2d:50:80:6f:19:ed:7c:6a:25:4b:5d:
47:49:b2:6d:0b:e1:9d:2f:c5:96:9b:ac:29:be:67:
11:99:6f:04:d1:75:bc:8b:de:77:e7:2e:dd:d7:17:
3d:ca:a1:32:45:87:99:03:e5:79:4c:9b:33:b8:9f:
29:08:b4:3f:ff:ba:07:cb:51:0c:71:45:b5:60:fd:
cc:84:6c:23:29:5d:9f:0d:7f:58:21:42:27:a3:d8:
7b:6d:2b:c3:cc:52:a2:7d:e5:8e:bc:c4:13:b4:32:
f5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E8:54:7D:3C:BE:9C:28:47:8E:0C:3E:B8:DB:7E:37:E8:6D:8B:5D:EC
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/E8547D3CBE9C28478E0C3EB8DB7E37E86D8B5DEC.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.160.0/22
IPv6:
2804:55dc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267961
Signature Algorithm: sha256WithRSAEncryption
59:e0:e4:21:d8:f5:b7:63:03:ed:97:93:2b:c6:95:60:e2:2f:
02:d5:fe:7f:4e:1b:4f:82:84:2e:a0:93:f7:a5:34:71:c8:69:
6e:7c:97:ad:ae:83:90:46:24:d2:9e:df:c1:90:c1:e8:2a:24:
50:75:6a:e2:6f:52:73:71:85:96:e1:01:87:f6:9e:e4:1e:1c:
f7:54:7e:b4:5c:c0:71:2d:01:bb:67:89:14:eb:dd:25:13:34:
97:eb:5d:6b:9f:ce:7c:47:26:dc:01:c8:4e:84:24:d3:6f:31:
f2:09:2e:e7:33:84:4b:99:6a:c6:23:39:a7:a6:f9:4d:87:f2:
ed:dc:a9:01:e3:54:3a:c2:9a:7f:f7:5a:4b:e2:c2:e0:02:b1:
87:65:10:31:65:09:d4:a7:4b:97:ce:59:d1:d6:b5:29:a5:4f:
47:02:b1:8b:1e:b6:7e:db:42:7f:41:ac:22:a9:26:f1:d1:b5:
ca:fa:9d:c8:fd:64:a8:ff:44:c2:2d:5f:f5:57:c0:b2:43:e4:
b0:b0:aa:a4:49:64:da:af:bd:01:83:11:a9:6c:77:d6:6e:76:
df:15:70:ef:fd:27:67:77:9d:83:90:5c:25:85:cc:d1:68:42:
85:ca:7c:9a:9d:e3:85:d7:96:2c:99:7a:2e:d9:a2:40:3c:46:
1c:3f:36:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:19:17 2025 by rpki-client