Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FA8D895DEA10C0D11206F62D5BE38EDB0A317794.cer
File: FA8D895DEA10C0D11206F62D5BE38EDB0A317794.cer (raw, json)
Hash identifier: IsYaLz5lR5tTkOPxkGU4VcIgpJp3j8p0SZlusSTi3Ag=
Subject key identifier: FA:8D:89:5D:EA:10:C0:D1:12:06:F6:2D:5B:E3:8E:DB:0A:31:77:94
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 64B582E9AA6651C2AFEA2B2EB5CD5AE1EEB0AC0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/FA8D895DEA10C0D11206F62D5BE38EDB0A317794.mft
caRepository: rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 24 Jan 2025 18:19:45 +0000
Certificate not after: Fri 23 Jan 2026 18:24:45 +0000
Subordinate resources: AS: 271309
IP: 207.248.24.0/22
IP: 2804:7980::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:b5:82:e9:aa:66:51:c2:af:ea:2b:2e:b5:cd:5a:e1:ee:b0:ac:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 24 18:19:45 2025 GMT
Not After : Jan 23 18:24:45 2026 GMT
Subject: CN=FA8D895DEA10C0D11206F62D5BE38EDB0A317794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:b5:89:f3:9c:db:7a:6f:be:2d:07:f0:13:
41:43:7b:be:82:b7:61:04:74:7e:c6:39:ae:f4:28:
12:df:17:62:33:75:f1:3a:66:98:b6:63:16:4f:55:
b8:55:ae:4a:8e:be:6e:55:23:4f:c6:91:49:b5:c1:
c7:9b:0e:a2:34:4a:92:0b:19:cd:44:0e:21:a0:01:
94:4f:b8:9c:b7:f9:17:6a:10:ef:a1:5b:db:5c:ab:
bd:f4:3f:f7:53:cd:79:2c:f2:0b:a2:e0:9e:6d:fd:
69:ef:8f:93:10:b8:f5:15:a8:16:e4:ef:5c:68:56:
40:6f:b1:d9:48:71:4b:69:18:b2:23:17:9d:57:bb:
e4:d8:3d:a1:a3:32:e3:f2:7d:55:51:1e:d8:37:e7:
01:1e:05:e3:46:f1:46:d9:ff:7c:24:af:80:e6:f3:
00:ac:3b:ff:aa:c3:c2:4a:7c:11:91:31:91:ab:5a:
a4:e2:3e:91:a4:3b:55:38:a4:bb:d9:14:00:1e:8e:
6c:5d:da:ed:a9:27:cf:bf:1d:63:f8:94:c3:9a:5e:
00:40:2d:81:72:30:3c:0b:6d:bd:ae:fc:c7:84:9d:
d5:50:7a:b7:03:eb:f3:e1:10:c5:7e:30:b2:9e:3a:
8a:00:b9:4b:eb:61:29:d4:7b:0c:7a:7a:69:24:8f:
b9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FA:8D:89:5D:EA:10:C0:D1:12:06:F6:2D:5B:E3:8E:DB:0A:31:77:94
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/FA8D895DEA10C0D11206F62D5BE38EDB0A317794.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.248.24.0/22
IPv6:
2804:7980::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271309
Signature Algorithm: sha256WithRSAEncryption
57:2e:4a:90:c7:5f:fc:f3:ef:cd:7c:34:98:84:1a:48:54:11:
5c:15:d2:84:41:f7:09:ee:26:1a:c6:c1:23:61:5b:78:57:b6:
ff:9f:a7:d6:6a:d2:74:4c:85:6e:73:cf:c1:a1:c1:6a:e4:15:
bd:71:45:88:c9:ed:b7:73:54:31:25:be:39:b5:9e:77:15:93:
fe:a1:47:57:0d:0b:2b:70:d6:07:d7:df:a7:4f:a9:d7:ee:66:
c1:87:68:9a:6d:20:bb:0d:c3:12:f7:61:6a:c9:ca:08:1c:1c:
cb:31:57:54:db:15:65:ba:d3:b0:04:e2:cc:d8:78:94:20:c7:
53:ea:93:72:86:32:c7:59:96:f1:d0:94:d9:ba:78:8e:b6:af:
5e:9b:ab:89:44:46:b2:3f:a0:d5:ae:16:6a:dd:b5:2d:98:d6:
8b:54:35:5e:7e:f2:19:9c:f9:16:92:e2:fd:82:a5:1c:f5:4d:
a9:a8:9e:1c:b9:cd:4a:b6:e6:c4:62:9f:20:b5:fe:bb:4b:f1:
31:92:9f:19:61:7d:5c:bd:77:17:01:ec:33:fc:80:43:e3:2b:
74:db:de:36:63:b3:34:3a:97:ae:d8:2d:3f:17:f4:22:91:47:
42:51:d2:0f:6e:d2:af:bd:0c:6e:b3:2a:0b:45:11:8e:61:dd:
91:aa:b9:3d
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUZLWC6apmUcKv6isutc1a4e6wrAswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMjQxODE5NDVaFw0yNjAxMjMxODI0NDVaMDMxMTAvBgNV
BAMTKEZBOEQ4OTVERUExMEMwRDExMjA2RjYyRDVCRTM4RURCMEEzMTc3OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxmbWJ85zbem++LQfwE0FDe76C
t2EEdH7GOa70KBLfF2IzdfE6Zpi2YxZPVbhVrkqOvm5VI0/GkUm1wcebDqI0SpIL
Gc1EDiGgAZRPuJy3+RdqEO+hW9tcq730P/dTzXks8gui4J5t/Wnvj5MQuPUVqBbk
71xoVkBvsdlIcUtpGLIjF51Xu+TYPaGjMuPyfVVRHtg35wEeBeNG8UbZ/3wkr4Dm
8wCsO/+qw8JKfBGRMZGrWqTiPpGkO1U4pLvZFAAejmxd2u2pJ8+/HWP4lMOaXgBA
LYFyMDwLbb2u/MeEndVQercD6/PhEMV+MLKeOooAuUvrYSnUewx6emkkj7n5AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT6jYld6hDA0RIG
9i1b447bCjF3lDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNFQy
WUJtYVR6enhFR2VRQ1BHdzRpczhjc2RLSDlvN3NORXBCd290Nk1uYmYvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRU
MllCbWFUenp4RUdlUUNQR3c0aXM4Y3NkS0g5bzdzTkVwQndvdDZNbmJmLzAvRkE4
RDg5NURFQTEwQzBEMTEyMDZGNjJENUJFMzhFREIwQTMxNzc5NC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCz/gYMA0EAgACMAcDBQAoBHmAMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQjzTANBgkqhkiG9w0BAQsFAAOCAQEAVy5KkMdf/PPvzXw0
mIQaSFQRXBXShEH3Ce4mGsbBI2FbeFe2/5+n1mrSdEyFbnPPwaHBauQVvXFFiMnt
t3NUMSW+ObWedxWT/qFHVw0LK3DWB9ffp0+p1+5mwYdomm0guw3DEvdhasnKCBwc
yzFXVNsVZbrTsATizNh4lCDHU+qTcoYyx1mW8dCU2bp4jravXpuriURGsj+g1a4W
at21LZjWi1Q1Xn7yGZz5FpLi/YKlHPVNqaieHLnNSrbmxGKfILX+u0vxMZKfGWF9
XL13FwHsM/yAQ+MrdNveNmOzNDqXrtgtPxf0IpFHQlHSD27Sr70MbrMqC0URjmHd
kaq5PQ==
-----END CERTIFICATE-----
Generated at Thu Feb 20 01:31:13 2025 by rpki-client