
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B90C4665B62CA51669AB68FE5718C2DF3E1AF674.cer
File: B90C4665B62CA51669AB68FE5718C2DF3E1AF674.cer (raw, json)
Hash identifier: WKstI+fqP2ipwWsHoIgHc87IX+nCM8XMpnAbwThF/0I=
Subject key identifier: B9:0C:46:65:B6:2C:A5:16:69:AB:68:FE:57:18:C2:DF:3E:1A:F6:74
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4371334FE37AAAF97D75FDE17102FFFF105B960D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/B90C4665B62CA51669AB68FE5718C2DF3E1AF674.mft
caRepository: rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 31 Mar 2025 20:29:06 +0000
Certificate not after: Mon 30 Mar 2026 20:34:06 +0000
Subordinate resources: AS: 28138
AS: 61650
IP: 131.100.204.0/22
IP: 187.49.0.0/21
IP: 187.49.11.0 -- 187.49.15.255
IP: 2804:d4::/32
IP: 2804:1c54::/32
Validation: Failed, certificate revoked on Sun 13 Apr 2025 16:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:71:33:4f:e3:7a:aa:f9:7d:75:fd:e1:71:02:ff:ff:10:5b:96:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 31 20:29:06 2025 GMT
Not After : Mar 30 20:34:06 2026 GMT
Subject: CN=B90C4665B62CA51669AB68FE5718C2DF3E1AF674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:37:af:a9:06:f0:37:1c:83:59:ee:ee:79:22:
ec:8c:81:83:35:c4:bd:a9:64:3c:4f:a5:12:0e:53:
db:9b:b4:5d:47:68:65:3f:87:3e:5a:b3:5c:6a:6a:
94:7e:0b:74:c7:47:7f:8d:9e:33:4d:19:79:a6:f4:
e0:17:c7:6d:b0:75:3f:d5:cd:9a:dd:b1:54:bc:22:
88:62:4d:ac:1e:37:c6:63:29:5b:32:0b:e3:63:7b:
d6:01:95:ec:99:5c:bf:7f:10:ea:31:c4:a3:49:4e:
6b:53:d8:e8:cd:df:53:66:a3:2c:91:c7:f3:bb:bd:
d9:36:64:74:86:73:93:09:3b:94:b9:28:db:c4:2f:
b0:c0:26:4c:3b:6b:7b:b5:49:b7:17:65:0a:31:9d:
2b:09:a9:3c:37:6b:62:87:d7:b0:a2:91:87:52:23:
cb:5d:e6:a5:c1:bf:4a:b4:b6:bb:fd:ee:34:c1:f7:
d0:fe:fc:21:3b:20:5f:ac:2a:2d:ad:8b:62:ea:c1:
65:bb:f8:0f:9f:ba:4d:62:57:db:cd:82:de:d2:7b:
e3:01:77:a8:7e:d3:b2:c4:b9:d4:07:d5:0e:65:d5:
d3:1e:be:4c:9d:f6:3b:59:a0:b1:d0:74:bb:23:4a:
7c:71:af:a6:76:e3:15:0f:7e:04:a2:eb:dc:bd:ab:
f9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B9:0C:46:65:B6:2C:A5:16:69:AB:68:FE:57:18:C2:DF:3E:1A:F6:74
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/B90C4665B62CA51669AB68FE5718C2DF3E1AF674.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.204.0/22
187.49.0.0/21
187.49.11.0-187.49.15.255
IPv6:
2804:d4::/32
2804:1c54::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28138
61650
Signature Algorithm: sha256WithRSAEncryption
ad:ad:b8:35:99:c5:0a:07:06:88:cb:5a:31:56:b7:e3:23:24:
84:2d:a6:c3:2e:3f:b2:4b:2f:48:41:81:4c:24:a5:a4:59:72:
a2:f0:6e:a7:06:14:9d:c1:66:96:34:8d:d2:c9:07:85:40:92:
d8:c0:08:98:72:ba:41:a9:f7:d8:4c:f5:97:ea:8e:35:e3:c1:
a7:2c:b9:d7:94:65:0e:cf:a4:65:57:71:5b:92:66:47:d2:28:
be:17:76:79:f6:65:20:25:9d:4c:bc:dd:e1:b1:a5:57:67:24:
00:35:2d:65:a2:57:ed:eb:c2:2a:8e:5c:68:33:f2:7c:6b:59:
a3:7d:a5:27:0a:3a:7c:af:49:d7:cd:5f:d2:bf:06:49:ed:ce:
ab:bd:85:7e:ec:56:39:b4:af:95:d4:00:2c:ce:9a:9a:9b:8a:
8e:d4:a1:97:cf:97:86:24:c4:ee:30:0b:bb:6c:99:cb:e0:2a:
dc:36:7d:13:ad:8e:08:76:e9:30:57:ce:25:b7:17:0a:04:31:
ad:ca:d7:aa:ed:64:79:42:1b:5a:1c:31:16:b1:06:66:a4:fc:
61:dc:3b:e4:77:1a:8c:75:70:16:9d:35:59:68:c6:d1:c8:f1:
15:36:d2:d7:01:47:ac:53:77:57:b6:b5:47:a2:7b:6b:fa:53:
7e:38:1b:2d
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUQ3EzT+N6qvl9df3hcQL//xBblg0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMzEyMDI5MDZaFw0yNjAzMzAyMDM0MDZaMDMxMTAvBgNV
BAMTKEI5MEM0NjY1QjYyQ0E1MTY2OUFCNjhGRTU3MThDMkRGM0UxQUY2NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFN6+pBvA3HINZ7u55IuyMgYM1
xL2pZDxPpRIOU9ubtF1HaGU/hz5as1xqapR+C3THR3+NnjNNGXmm9OAXx22wdT/V
zZrdsVS8IohiTaweN8ZjKVsyC+Nje9YBleyZXL9/EOoxxKNJTmtT2OjN31NmoyyR
x/O7vdk2ZHSGc5MJO5S5KNvEL7DAJkw7a3u1SbcXZQoxnSsJqTw3a2KH17CikYdS
I8td5qXBv0q0trv97jTB99D+/CE7IF+sKi2ti2LqwWW7+A+fuk1iV9vNgt7Se+MB
d6h+07LEudQH1Q5l1dMevkyd9jtZoLHQdLsjSnxxr6Z24xUPfgSi69y9q/kXAgMB
AAGjggNZMIIDVTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS5DEZltiylFmmr
aP5XGMLfPhr2dDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRlF6
V01IVzRkTDhzcnpvN2FIMUZuM3NlWlFMcVJzczcyVzRyOFViUlJRRzkvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZR
eldNSFc0ZEw4c3J6bzdhSDFGbjNzZVpRTHFSc3M3Mlc0cjhVYlJSUUc5LzAvQjkw
QzQ2NjVCNjJDQTUxNjY5QUI2OEZFNTcxOEMyREYzRTFBRjY3NC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEH
AQH/BDowODAgBAIAATAaAwQCg2TMAwQDuzEAMAwDBAC7MQsDBAS7MQAwFAQCAAIw
DgMFACgEANQDBQAoBBxUMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAm3qAgMA8NIw
DQYJKoZIhvcNAQELBQADggEBAK2tuDWZxQoHBojLWjFWt+MjJIQtpsMuP7JLL0hB
gUwkpaRZcqLwbqcGFJ3BZpY0jdLJB4VAktjACJhyukGp99hM9ZfqjjXjwacsudeU
ZQ7PpGVXcVuSZkfSKL4Xdnn2ZSAlnUy83eGxpVdnJAA1LWWiV+3rwiqOXGgz8nxr
WaN9pScKOnyvSdfNX9K/Bkntzqu9hX7sVjm0r5XUACzOmpqbio7UoZfPl4YkxO4w
C7tsmcvgKtw2fROtjgh26TBXziW3FwoEMa3K16rtZHlCG1ocMRaxBmak/GHcO+R3
Gox1cBadNVloxtHI8RU20tcBR6xTd1e2tUeie2v6U344Gy0=
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:33:33 2025 by rpki-client