Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D706C8F00E4FFE2B27EE47EE63FE099D298A55A3.cer
File: D706C8F00E4FFE2B27EE47EE63FE099D298A55A3.cer (raw, json)
Hash identifier: iBEbpmMfrRR5c4h5zD7rUOwgmkwUF+DqBSkxxUbPFvE=
Subject key identifier: D7:06:C8:F0:0E:4F:FE:2B:27:EE:47:EE:63:FE:09:9D:29:8A:55:A3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0648F2BB7E965860DFCEDFE0DADFE562C886A918
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/1/D706C8F00E4FFE2B27EE47EE63FE099D298A55A3.mft
caRepository: rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 10:43:40 +0000
Certificate not after: Thu 03 Apr 2025 10:48:40 +0000
Subordinate resources: AS: 270439
IP: 200.11.120.0/22
IP: 2804:6c00::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:48:f2:bb:7e:96:58:60:df:ce:df:e0:da:df:e5:62:c8:86:a9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 10:43:40 2024 GMT
Not After : Apr 3 10:48:40 2025 GMT
Subject: CN=D706C8F00E4FFE2B27EE47EE63FE099D298A55A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:38:ba:02:97:ea:8e:ff:57:d5:e6:fe:9a:a3:
3f:e2:27:94:2f:3b:c9:35:51:20:a8:81:54:0e:58:
92:c5:2a:37:12:25:cb:db:c2:e8:df:f3:ed:45:48:
eb:b4:ff:c4:39:d9:35:b2:c4:f4:e6:dd:c5:56:f0:
01:ac:4d:05:d1:3f:a2:ac:e1:e8:73:6c:91:6e:57:
a1:54:0c:90:99:b5:70:c8:c9:29:e2:83:44:d5:94:
7a:48:43:7c:30:68:18:9f:1d:72:95:07:f2:d5:e4:
55:40:df:78:68:3d:ba:03:2d:d2:25:35:3c:1f:74:
a5:17:36:f4:c9:42:fb:5e:74:3d:2a:7a:45:8f:ae:
a2:16:7d:e1:d6:64:55:72:32:55:1c:66:42:6b:ee:
2d:8f:6b:4f:88:06:46:5c:7f:18:62:21:dd:4e:e6:
7f:e3:e6:90:07:6d:eb:7f:36:de:04:30:ed:22:12:
4e:1b:9c:e1:54:43:2a:7e:0d:1b:f9:2e:b8:24:87:
ef:6f:03:47:41:8b:95:9a:ae:29:3a:0b:f5:fe:bf:
6e:49:8f:a2:07:aa:af:55:04:04:be:4f:db:74:56:
21:ca:68:c4:d3:c3:10:91:18:9d:83:f9:0a:87:b4:
5a:d7:b1:dd:14:56:df:28:8a:d1:1d:e9:e3:5e:12:
e0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D7:06:C8:F0:0E:4F:FE:2B:27:EE:47:EE:63:FE:09:9D:29:8A:55:A3
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/1/D706C8F00E4FFE2B27EE47EE63FE099D298A55A3.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.11.120.0/22
IPv6:
2804:6c00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270439
Signature Algorithm: sha256WithRSAEncryption
7d:e8:ac:35:d9:90:f5:c9:6d:28:f6:00:8a:c3:1c:01:58:ad:
f9:a4:1f:4f:2f:1d:99:8a:56:8a:69:03:ac:21:4a:e9:4e:d3:
aa:62:ee:6e:8e:80:db:a6:6b:c4:a1:5e:09:d6:f2:b9:ab:76:
fb:e0:60:9b:99:83:82:24:59:fe:fe:c8:dd:61:4b:09:80:f6:
ac:77:1a:00:66:df:66:fd:73:53:71:5e:fd:7e:c8:4a:63:8f:
04:8e:51:e7:30:54:c9:45:cf:bc:a7:d0:9d:46:90:ea:9d:db:
2c:3c:25:cf:00:4e:96:60:db:94:5b:9e:23:df:d5:9e:f0:75:
20:76:6c:8b:77:0d:24:e3:04:15:e5:41:db:8c:2f:13:9f:88:
0c:c6:b3:8d:72:3e:f3:60:53:ec:c0:56:de:d6:9b:4c:a4:ec:
73:89:f4:38:0f:a1:a2:e3:b2:73:72:c4:53:1a:e8:87:1a:e5:
98:91:77:0b:fc:73:3d:fb:95:ea:f5:9c:c9:2c:8b:c8:4d:51:
ea:e0:f9:96:48:0d:49:93:85:fe:18:65:59:09:69:5b:d0:86:
62:0c:73:9a:3b:92:db:d7:6d:0e:91:b9:e5:b5:5a:72:e5:3c:
be:8d:4d:c9:13:76:3c:b6:6a:b0:11:90:32:4c:37:f3:b6:96:
b6:54:fd:7e
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUBkjyu36WWGDfzt/g2t/lYsiGqRgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxMDQzNDBaFw0yNTA0MDMxMDQ4NDBaMDMxMTAvBgNV
BAMTKEQ3MDZDOEYwMEU0RkZFMkIyN0VFNDdFRTYzRkUwOTlEMjk4QTU1QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhOLoCl+qO/1fV5v6aoz/iJ5Qv
O8k1USCogVQOWJLFKjcSJcvbwujf8+1FSOu0/8Q52TWyxPTm3cVW8AGsTQXRP6Ks
4ehzbJFuV6FUDJCZtXDIySnig0TVlHpIQ3wwaBifHXKVB/LV5FVA33hoPboDLdIl
NTwfdKUXNvTJQvtedD0qekWPrqIWfeHWZFVyMlUcZkJr7i2Pa0+IBkZcfxhiId1O
5n/j5pAHbet/Nt4EMO0iEk4bnOFUQyp+DRv5Lrgkh+9vA0dBi5Warik6C/X+v25J
j6IHqq9VBAS+T9t0ViHKaMTTwxCRGJ2D+QqHtFrXsd0UVt8oitEd6eNeEuBnAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTXBsjwDk/+Kyfu
R+5j/gmdKYpVozAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNkZ1
MW9TdXhGYnBXTmVidXRyd2sxcko1c3RjeXQ0WlJmZFNLdHRlazd5RWIvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZG
dTFvU3V4RmJwV05lYnV0cndrMXJKNXN0Y3l0NFpSZmRTS3R0ZWs3eUViLzEvRDcw
NkM4RjAwRTRGRkUyQjI3RUU0N0VFNjNGRTA5OUQyOThBNTVBMy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyAt4MA0EAgACMAcDBQAoBGwAMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQgZzANBgkqhkiG9w0BAQsFAAOCAQEAfeisNdmQ9cltKPYA
isMcAVit+aQfTy8dmYpWimkDrCFK6U7TqmLubo6A26ZrxKFeCdbyuat2++Bgm5mD
giRZ/v7I3WFLCYD2rHcaAGbfZv1zU3Fe/X7ISmOPBI5R5zBUyUXPvKfQnUaQ6p3b
LDwlzwBOlmDblFueI9/VnvB1IHZsi3cNJOMEFeVB24wvE5+IDMazjXI+82BT7MBW
3tabTKTsc4n0OA+houOyc3LEUxrohxrlmJF3C/xzPfuV6vWcySyLyE1R6uD5lkgN
SZOF/hhlWQlpW9CGYgxzmjuS29dtDpG55bVacuU8vo1NyRN2PLZqsBGQMkw387aW
tlT9fg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:34:23 2025 by rpki-client