Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.cer
File: C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.cer (raw, json)
Hash identifier: vBC728eNpiNPSAatkuOuKnd89+HLfbi5TLy7Z/z82qE=
Subject key identifier: C8:87:AD:3E:36:7B:5D:37:C5:E8:3C:1D:AB:5E:A5:C7:D1:56:76:9D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4224F2C25208C2CE8A5456CD43BBE481E510BEED
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.mft
caRepository: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 01 Apr 2025 13:07:48 +0000
Certificate not after: Tue 31 Mar 2026 13:12:48 +0000
Subordinate resources: AS: 52721
AS: 264088
IP: 138.185.108.0/22
IP: 143.208.4.0/22
IP: 170.246.96.0/22
IP: 177.84.108.0/22
IP: 2804:2664::/32
IP: 2804:2aa8::/32
Validation: Failed, certificate revoked on Mon 14 Apr 2025 22:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:24:f2:c2:52:08:c2:ce:8a:54:56:cd:43:bb:e4:81:e5:10:be:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 1 13:07:48 2025 GMT
Not After : Mar 31 13:12:48 2026 GMT
Subject: CN=C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a5:fe:66:87:11:85:14:01:74:df:49:e0:00:
99:1e:e6:ac:3e:15:ed:dd:8e:c2:3c:71:57:4c:04:
86:0f:64:57:94:1b:8a:12:76:68:aa:bf:58:0f:91:
ce:83:ee:cf:07:8a:1e:06:a6:f0:7f:e4:a7:92:63:
12:93:81:05:cc:22:bd:d0:bb:25:49:d5:06:fc:15:
c1:c3:c0:c2:67:06:8b:46:d1:5b:bf:ef:35:d5:93:
44:9a:52:7c:5a:69:e0:f3:16:42:41:94:63:4a:e5:
85:15:60:a2:90:d1:be:38:96:00:a0:01:ce:35:d8:
dd:79:86:63:06:53:af:16:9e:2b:96:fc:db:b2:84:
4a:37:31:93:41:4a:b5:96:35:bf:66:c3:10:cd:12:
ae:5d:98:40:9f:6c:47:8e:c5:9a:01:9a:3d:19:6f:
d8:b7:2c:2d:c1:5d:2a:94:74:61:4e:9d:d2:67:95:
a6:c6:75:05:2b:33:d0:ef:27:8d:ea:59:3c:6e:fa:
24:4f:44:3c:c2:1e:2c:40:79:69:05:a0:06:63:63:
de:4d:ae:bb:d7:f9:17:fe:a3:4f:a8:6a:f6:46:00:
0d:5b:9b:ae:26:99:5f:a5:a4:3a:0e:54:6f:61:1a:
14:72:06:1f:a6:2b:fe:07:0b:21:a0:b0:b3:46:42:
b5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C8:87:AD:3E:36:7B:5D:37:C5:E8:3C:1D:AB:5E:A5:C7:D1:56:76:9D
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.108.0/22
143.208.4.0/22
170.246.96.0/22
177.84.108.0/22
IPv6:
2804:2664::/32
2804:2aa8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52721
264088
Signature Algorithm: sha256WithRSAEncryption
a8:83:e1:2c:10:7e:0d:f8:7f:72:35:c9:8a:d7:91:19:b1:0e:
b7:e7:a4:cf:b7:f9:c3:25:a6:92:89:75:04:98:79:46:3c:c1:
10:ec:88:f0:c9:e1:9f:76:19:f3:13:34:5b:f7:e1:3d:26:be:
09:da:5c:56:f6:df:e8:b6:d1:3d:c5:ab:54:01:4e:70:a4:5c:
19:bb:d8:df:ee:23:dd:22:fb:33:d7:a3:72:fb:b4:c7:d7:a6:
04:56:69:12:8e:5c:51:08:ce:eb:d2:0d:5d:91:c5:8d:a8:7d:
50:da:a6:31:4a:28:de:9e:5b:48:3d:41:4a:b7:f1:7e:bc:07:
78:a8:28:ef:f2:22:33:f7:24:b3:f1:af:50:a9:0b:56:bd:b6:
c5:ff:96:45:0c:6a:a1:d7:d5:a6:a4:91:09:f6:17:8a:59:8c:
69:a7:72:cd:c0:b7:cf:f0:e9:05:4c:4d:ef:f9:b4:6c:eb:65:
7c:22:31:44:31:b6:8b:bc:d3:73:e2:9c:df:1e:9b:1e:6f:f4:
32:0c:1a:11:01:de:93:4a:1f:d9:0b:70:4c:79:66:ea:13:88:
24:de:23:f5:35:32:7b:27:e9:fa:64:f6:69:2e:c0:eb:12:3a:
a6:56:c4:cf:93:2b:4e:48:69:a0:65:51:fe:cf:c9:77:fd:56:
73:b8:73:68
-----BEGIN CERTIFICATE-----
MIIGTjCCBTagAwIBAgIUQiTywlIIws6KVFbNQ7vkgeUQvu0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA0MDExMzA3NDhaFw0yNjAzMzExMzEyNDhaMDMxMTAvBgNV
BAMTKEM4ODdBRDNFMzY3QjVEMzdDNUU4M0MxREFCNUVBNUM3RDE1Njc2OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIpf5mhxGFFAF030ngAJke5qw+
Fe3djsI8cVdMBIYPZFeUG4oSdmiqv1gPkc6D7s8Hih4GpvB/5KeSYxKTgQXMIr3Q
uyVJ1Qb8FcHDwMJnBotG0Vu/7zXVk0SaUnxaaeDzFkJBlGNK5YUVYKKQ0b44lgCg
Ac412N15hmMGU68WniuW/NuyhEo3MZNBSrWWNb9mwxDNEq5dmECfbEeOxZoBmj0Z
b9i3LC3BXSqUdGFOndJnlabGdQUrM9DvJ43qWTxu+iRPRDzCHixAeWkFoAZjY95N
rrvX+Rf+o0+oavZGAA1bm64mmV+lpDoOVG9hGhRyBh+mK/4HCyGgsLNGQrWPAgMB
AAGjggNYMIIDVDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTIh60+NntdN8Xo
PB2rXqXH0VZ2nTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlJS
elB1MjNaM2FkSkM5ZHF2ZVdLc2pSaHVyVnpXem1iNEphQm9BQlhZcWUvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJS
UnpQdTIzWjNhZEpDOWRxdmVXS3NqUmh1clZ6V3ptYjRKYUJvQUJYWXFlLzAvQzg4
N0FEM0UzNjdCNUQzN0M1RTgzQzFEQUI1RUE1QzdEMTU2NzY5RC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEH
AQH/BDgwNjAeBAIAATAYAwQCirlsAwQCj9AEAwQCqvZgAwQCsVRsMBQEAgACMA4D
BQAoBCZkAwUAKAQqqDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAzfECAwQHmDAN
BgkqhkiG9w0BAQsFAAOCAQEAqIPhLBB+Dfh/cjXJiteRGbEOt+ekz7f5wyWmkol1
BJh5RjzBEOyI8Mnhn3YZ8xM0W/fhPSa+CdpcVvbf6LbRPcWrVAFOcKRcGbvY3+4j
3SL7M9ejcvu0x9emBFZpEo5cUQjO69INXZHFjah9UNqmMUoo3p5bSD1BSrfxfrwH
eKgo7/IiM/cks/GvUKkLVr22xf+WRQxqodfVpqSRCfYXilmMaadyzcC3z/DpBUxN
7/m0bOtlfCIxRDG2i7zTc+Kc3x6bHm/0MgwaEQHek0of2QtwTHlm6hOIJN4j9TUy
eyfp+mT2aS7A6xI6plbEz5MrTkhpoGVR/s/Jd/1Wc7hzaA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:54 2025 by rpki-client