Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.cer
File: 3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.cer (raw, json)
Hash identifier: QU0ja2fsUEp57TLai4YvXIvqskmTf3ctjL6p96ObeAM=
Subject key identifier: 3E:0B:06:DA:52:F7:E7:DF:A9:E2:8E:3E:56:40:8F:89:6C:C0:7A:AD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3CAEA4681C06947147F538A52CF9AE9C9856A883
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.mft
caRepository: rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 16 Apr 2025 22:17:21 +0000
Certificate not after: Wed 15 Apr 2026 22:22:21 +0000
Subordinate resources: AS: 263951
IP: 138.255.20.0/22
IP: 2804:2844::/32
Validation: Failed, certificate revoked on Wed 16 Apr 2025 23:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:ae:a4:68:1c:06:94:71:47:f5:38:a5:2c:f9:ae:9c:98:56:a8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 16 22:17:21 2025 GMT
Not After : Apr 15 22:22:21 2026 GMT
Subject: CN=3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:d1:3a:98:16:80:ff:b1:3a:f1:b0:9f:88:
64:23:59:6f:ec:ad:8b:2f:3b:48:a4:ed:48:96:bd:
08:e2:e2:ea:2a:56:19:fd:2b:bc:82:47:76:fa:42:
c8:54:d2:1e:e8:71:58:06:fa:87:7f:d6:25:ad:19:
43:d6:96:16:62:e1:37:e5:fe:bf:fd:6f:26:ba:46:
dc:15:8d:90:fd:cb:a8:37:f3:26:48:74:1c:c7:c9:
ad:a4:53:d3:79:d7:ca:c8:3c:6a:f6:a9:43:66:9e:
32:42:a1:c9:f9:a1:72:1a:44:63:ae:0b:d8:a6:42:
d9:50:75:92:d2:8e:da:31:f4:83:18:e5:69:6f:f1:
10:5c:ab:40:2b:3e:e2:3f:2e:28:64:13:d6:72:35:
fd:c7:56:72:6f:b2:4a:fc:f7:2a:fb:8d:ff:11:4d:
2b:9a:90:b0:5f:91:0a:a6:55:17:df:fc:67:ef:47:
f7:cb:1f:d5:77:53:46:5d:66:f7:ec:e8:b5:27:40:
0e:c9:14:96:28:08:d6:ae:70:da:78:e2:4d:19:f4:
eb:75:cc:ad:bf:45:77:4a:f9:e8:57:96:48:fb:98:
b7:73:2f:89:91:08:56:c1:b9:53:6b:10:c3:b0:fd:
7c:e7:51:13:0e:a8:9d:cc:6e:5f:c7:ff:2e:5c:68:
fe:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3E:0B:06:DA:52:F7:E7:DF:A9:E2:8E:3E:56:40:8F:89:6C:C0:7A:AD
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.20.0/22
IPv6:
2804:2844::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263951
Signature Algorithm: sha256WithRSAEncryption
34:a9:32:2b:47:ca:5e:f9:48:c4:81:9c:8a:a6:37:0f:18:b1:
7a:5d:fe:13:03:42:be:98:4f:a1:42:55:34:e7:07:6a:62:6c:
fb:ea:fe:39:61:35:a3:73:e2:56:d2:a9:bf:62:ad:6b:71:91:
d7:4c:b9:e3:f1:b0:2b:e8:4d:95:c1:fc:02:95:f2:9e:88:53:
54:91:37:b3:ba:2d:f8:31:34:62:ab:c2:07:c3:c1:1a:ed:37:
eb:8e:a3:ef:8e:98:7c:61:1d:8b:a0:25:e1:3e:31:21:d4:58:
20:93:98:c8:e4:fa:de:44:df:68:4d:4c:ea:3d:08:f5:04:6a:
75:ba:f7:24:1c:45:46:5e:f8:6b:f0:9c:95:42:7f:03:81:91:
f4:03:46:0d:52:72:ad:04:b6:d7:ed:36:54:ff:af:df:f7:91:
b3:aa:c1:53:cd:3c:7a:03:0c:7d:56:19:dd:fa:56:b2:a1:23:
50:ee:a3:7a:3a:2d:cc:a6:c2:01:62:5a:c7:84:91:3b:64:e9:
3d:1b:2a:c0:c7:07:b8:40:0c:ed:dd:07:86:c0:84:d6:66:0a:
60:a8:68:0e:ed:c5:c7:cd:14:41:02:a0:6b:1a:bc:00:74:af:
06:3b:b8:77:f3:9d:58:d9:55:fc:be:87:a5:1f:50:8a:83:a3:
76:dd:32:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:11:03 2025 by rpki-client