Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.cer
File: ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.cer (raw, json)
Hash identifier: OdVy7eAKR7NxU9Zdw8LxqvEBElSqjzQuKu8OBF5GQwA=
Subject key identifier: ED:9F:DB:85:BF:C8:0C:0A:4C:B9:4B:00:7E:75:C6:B4:27:9D:CB:02
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 42A072981A73CAEA656C59DD06D65D73BFA72C7B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.mft
caRepository: rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 21 Dec 2024 16:03:37 +0000
Certificate not after: Sat 20 Dec 2025 16:08:37 +0000
Subordinate resources: AS: 52699
IP: 170.244.0.0/22
IP: 177.23.136.0/21
IP: 177.223.0.0/20
IP: 2804:c64::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:a0:72:98:1a:73:ca:ea:65:6c:59:dd:06:d6:5d:73:bf:a7:2c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 21 16:03:37 2024 GMT
Not After : Dec 20 16:08:37 2025 GMT
Subject: CN=ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f2:22:37:9b:4f:bb:e8:cf:56:9d:7f:71:4a:
23:55:d1:ab:5d:cf:bb:a2:e9:13:df:bc:f2:42:1c:
fa:fe:8f:89:6e:65:0b:65:b5:70:05:cd:8a:d2:eb:
e3:ce:7a:60:83:ab:24:4d:6d:86:3d:73:77:a8:86:
02:17:c2:bd:93:2b:23:17:58:be:90:99:c5:ba:4f:
cc:a9:a6:51:c7:15:69:6e:41:4b:54:a9:91:d4:80:
9b:5a:5c:9f:67:4b:f7:bb:ae:58:57:c4:66:3d:d6:
f4:6b:95:39:07:c7:df:cf:75:21:a5:ab:e9:d2:6d:
6a:e4:d2:a4:e5:95:f6:f0:fd:46:a4:f5:ee:88:e9:
5a:37:5c:3a:5b:7d:e5:e9:6e:8e:45:88:f2:91:69:
6d:f9:ee:a2:01:0b:07:c9:be:32:b5:37:8a:52:27:
29:83:35:ec:f2:dd:88:90:5f:79:c2:83:b2:89:43:
e2:50:3d:e0:e3:10:b4:2a:a0:ae:ee:ea:b3:16:a9:
8a:4e:0f:18:ef:c8:6c:e2:b2:d1:d1:58:c8:d0:a4:
c0:13:37:66:a2:89:03:3d:c1:cc:be:72:b0:dc:e4:
1a:c9:a0:cd:b8:7c:b6:b4:6f:90:c4:a2:2f:d8:66:
39:9d:26:27:62:c0:70:08:f7:74:90:60:a1:4f:e8:
27:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
ED:9F:DB:85:BF:C8:0C:0A:4C:B9:4B:00:7E:75:C6:B4:27:9D:CB:02
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/38pmcHAJZPCeSci8UcDXaSMZtKjM9jz6wsKuvwpPfg1Q/0/ED9FDB85BFC80C0A4CB94B007E75C6B4279DCB02.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.0.0/22
177.23.136.0/21
177.223.0.0/20
IPv6:
2804:c64::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52699
Signature Algorithm: sha256WithRSAEncryption
3c:42:47:6a:37:f9:c8:c3:9a:bb:ad:80:88:4d:78:8b:26:df:
7c:6d:5b:a9:9c:9e:af:b1:36:d7:29:86:09:17:f8:20:3d:22:
1f:30:a4:11:62:f5:f3:81:3e:5a:b5:9a:75:de:f8:98:bc:da:
d5:bd:23:c0:fb:52:ee:d4:3e:4c:6c:45:78:bd:89:8d:d7:74:
5d:11:3b:6e:ed:ee:cf:6d:8e:f9:18:8e:97:b1:7b:f4:80:d1:
88:1d:5f:fa:36:57:f3:cd:ec:1b:e1:e9:64:0a:d5:8a:e9:54:
69:31:ad:fd:a8:53:a3:d4:ad:08:56:27:e4:13:58:bc:7b:1c:
f0:55:20:15:d4:6a:7e:04:ab:bf:95:b5:10:76:d3:11:3a:cf:
60:a2:50:d4:69:7a:3c:ed:ef:5f:0d:7a:6f:ca:79:fd:09:40:
66:de:fb:83:34:a3:30:77:bd:ee:d1:6f:77:ea:dd:d3:cc:f5:
aa:63:43:b0:c3:d0:73:98:9c:52:4a:e3:4e:63:71:e7:60:27:
e8:2f:bc:01:eb:90:e1:60:cd:86:b1:08:a3:6b:ea:b1:46:a4:
a6:1a:14:cf:3e:be:2f:27:21:8c:d4:5f:c6:85:33:d4:08:e8:
6e:ce:ca:b6:ee:ca:2e:a2:a6:ec:2f:cf:3d:32:9d:fc:31:0f:
d7:8d:7f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:43 2025 by rpki-client