
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FD4F4B25972C4E648507F9D49CACC2CF95322DFF.cer
File: FD4F4B25972C4E648507F9D49CACC2CF95322DFF.cer (raw, json)
Hash identifier: r0mbRqOxKc18YP4UuGoAyRZvANNnN2vmYJ3k4TzOjUw=
Subject key identifier: FD:4F:4B:25:97:2C:4E:64:85:07:F9:D4:9C:AC:C2:CF:95:32:2D:FF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 068C07F41919E866B67E7B03876525194F8C8589
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/FD4F4B25972C4E648507F9D49CACC2CF95322DFF.mft
caRepository: rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 01 Apr 2025 16:44:11 +0000
Certificate not after: Tue 31 Mar 2026 16:49:11 +0000
Subordinate resources: AS: 273638
IP: 2804:89f8::/32
Validation: Failed, certificate revoked on Mon 26 May 2025 05:48:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:8c:07:f4:19:19:e8:66:b6:7e:7b:03:87:65:25:19:4f:8c:85:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 1 16:44:11 2025 GMT
Not After : Mar 31 16:49:11 2026 GMT
Subject: CN=FD4F4B25972C4E648507F9D49CACC2CF95322DFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fe:b4:68:5c:f8:a3:06:f6:cf:71:83:7a:f3:
ae:88:d6:f5:08:fb:74:2a:f3:50:a0:e0:2e:01:52:
4e:7e:d6:d0:dc:0c:29:a4:2c:9a:d9:bc:aa:15:91:
f0:f3:3a:2d:da:5a:89:92:79:cd:b2:aa:22:7a:b8:
c3:7c:81:94:b6:09:b5:8a:0f:05:6a:b1:58:08:87:
a0:12:91:ac:b8:9b:2a:68:fa:94:9b:ec:03:f1:50:
7d:a0:ee:85:ab:bd:1d:04:68:d3:30:71:70:2d:aa:
e6:f7:0e:3f:af:96:c1:bf:45:c1:64:5b:a3:64:ec:
54:33:bd:20:88:c6:ac:63:5b:8f:60:8c:b9:31:2f:
2c:d3:b9:7b:a1:b8:49:87:78:48:51:2f:7c:41:6b:
55:6d:be:ec:fa:cb:10:32:19:bf:54:a7:d8:db:fd:
2f:1e:1e:ce:ba:c3:a6:3f:b0:a7:7d:51:d4:fc:ae:
e5:97:be:d7:60:2c:66:22:59:88:76:6e:e9:dd:59:
ee:bc:0b:ef:f0:e7:6a:d6:23:e9:2c:e2:9f:51:61:
4c:1e:07:87:41:01:27:b7:da:34:11:b1:02:62:4f:
4c:e8:1f:6f:1f:e0:c4:11:76:df:65:9b:d7:de:95:
6b:55:c2:bc:53:fb:dd:39:a7:fa:37:5c:f2:bb:69:
27:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FD:4F:4B:25:97:2C:4E:64:85:07:F9:D4:9C:AC:C2:CF:95:32:2D:FF
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/FD4F4B25972C4E648507F9D49CACC2CF95322DFF.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:89f8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273638
Signature Algorithm: sha256WithRSAEncryption
a5:b3:cf:c3:8f:79:b4:b9:b0:be:2e:35:9f:b8:27:04:8a:b1:
c9:45:a9:a3:f4:7f:75:48:b6:05:ea:7b:34:06:0e:bf:6c:65:
4e:22:6e:76:29:97:16:89:4f:fd:20:3b:21:45:b7:c8:ff:25:
c6:3a:5c:d8:34:3e:fb:d7:5a:33:dd:1e:5d:40:00:61:67:7b:
fa:ba:28:ef:7d:e2:90:03:65:4a:5b:3d:a2:0d:de:5c:d6:9a:
ef:ab:88:39:98:d1:35:d9:8a:1d:9b:31:d4:38:8c:c7:fd:c2:
2a:7c:25:9a:76:11:12:bf:01:2a:b4:8f:cb:6d:82:e6:24:8e:
b9:99:42:3d:9c:07:61:26:c7:78:d8:ed:00:f9:53:e7:ae:66:
56:f7:e6:25:06:1d:30:c2:5a:18:fc:2e:3f:44:e3:85:5e:0d:
74:a5:fc:80:d1:44:06:4e:c8:6e:cf:cd:ef:bb:68:8d:ba:fc:
86:72:08:49:92:8a:01:d3:86:44:52:64:2b:91:89:b7:d5:6d:
05:99:92:86:a1:c6:59:f8:64:b1:13:92:6e:6a:da:55:06:28:
7c:48:0d:8b:95:ab:3f:3e:38:e1:9e:bb:97:fa:3c:ba:20:e0:
cd:28:d7:8b:b6:a0:6d:da:f4:96:f4:9d:87:e8:50:30:da:37:
dd:f7:c4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:29:56 2025 by rpki-client