
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AABCA739AD2EC3C35CC470A886CE5C2C87353AFF.cer
File: AABCA739AD2EC3C35CC470A886CE5C2C87353AFF.cer (raw, json)
Hash identifier: UU7J686xOjl/DFYS9Ihxcgx4x6Hzb2HqfOReiQFQfdY=
Subject key identifier: AA:BC:A7:39:AD:2E:C3:C3:5C:C4:70:A8:86:CE:5C:2C:87:35:3A:FF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 75FBEA3A44C3DF6A9B04C0E08D4460977BB87E27
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/1/AABCA739AD2EC3C35CC470A886CE5C2C87353AFF.mft
caRepository: rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 30 Apr 2025 15:17:38 +0000
Certificate not after: Wed 29 Apr 2026 15:22:38 +0000
Subordinate resources: AS: 268056
IP: 45.168.88.0/22
IP: 2804:5748::/32
Validation: Failed, certificate revoked on Wed 30 Apr 2025 17:40:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:fb:ea:3a:44:c3:df:6a:9b:04:c0:e0:8d:44:60:97:7b:b8:7e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 30 15:17:38 2025 GMT
Not After : Apr 29 15:22:38 2026 GMT
Subject: CN=AABCA739AD2EC3C35CC470A886CE5C2C87353AFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:64:85:6a:50:a6:39:e5:7f:7f:b7:bf:91:a1:
23:8c:93:42:70:04:0d:48:8a:6f:0c:72:39:b5:7e:
87:ad:1f:7a:a9:75:9c:fd:d4:b5:6f:c7:72:26:a2:
f8:0b:85:fc:b9:c1:c4:04:36:37:8f:65:8b:d1:42:
17:c3:81:ba:a5:4e:e2:fa:e3:77:d0:c9:fd:1f:82:
fa:17:c2:31:a7:1a:ce:6a:79:41:fc:69:85:59:fd:
1b:49:ae:d3:2e:dc:f3:6c:c1:55:6c:32:c0:46:8e:
0f:ad:5d:a8:ce:60:68:56:c2:cc:2c:f0:f0:da:35:
de:bd:08:2f:ce:b4:22:42:1d:b8:f5:c3:51:7f:03:
f4:79:26:f8:0f:a0:5a:9d:15:86:3e:c1:da:69:77:
b0:62:f4:f8:62:f8:54:c6:5c:37:f9:b4:46:d6:d1:
81:1d:0f:61:3a:5c:85:92:ee:cf:fd:9b:fb:c3:66:
84:93:2c:50:27:34:57:7f:99:a9:89:f0:97:19:84:
2b:2c:a5:4b:a7:5c:99:5d:34:b3:7a:21:52:85:84:
d0:64:58:6f:c0:9e:f7:77:32:2a:49:45:24:9f:98:
65:71:d0:b1:0f:dd:19:ac:d7:c2:df:ac:4e:87:ab:
b7:bb:9f:82:71:a2:69:ba:9b:af:66:d0:0e:2e:6b:
83:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AA:BC:A7:39:AD:2E:C3:C3:5C:C4:70:A8:86:CE:5C:2C:87:35:3A:FF
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/1/AABCA739AD2EC3C35CC470A886CE5C2C87353AFF.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.88.0/22
IPv6:
2804:5748::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268056
Signature Algorithm: sha256WithRSAEncryption
39:9c:a2:f5:f9:e0:bb:fa:cd:eb:60:d3:ea:3b:84:0d:37:9a:
97:60:f2:fb:8c:10:d3:d5:77:4d:ab:a2:57:7a:d2:d7:9f:80:
ca:07:a1:86:d9:72:3b:59:8d:a4:74:06:72:4e:73:4f:28:c7:
89:ff:b5:7c:b0:20:44:1f:df:ed:ac:ac:70:f8:c8:93:8a:69:
b4:1b:28:c3:6b:c5:05:bd:16:ff:1c:3c:35:55:eb:d5:b8:81:
34:6c:a3:b9:f0:4e:fc:35:e0:9c:7f:65:bf:cb:ec:8c:58:2d:
c7:de:9f:57:55:e5:75:fb:3c:b0:50:25:5b:7a:ff:91:f2:be:
a1:89:5d:04:58:79:7f:52:f3:a0:1f:22:0f:99:be:5a:bc:32:
50:75:bd:49:c2:93:c9:25:41:1b:74:ef:bd:15:ee:04:c8:2b:
cc:1c:8a:5c:0b:e4:73:0f:4b:5c:2f:50:1b:44:91:a6:be:c7:
99:7e:45:7e:48:b6:a3:b1:53:43:d7:14:74:46:2b:d0:05:3a:
60:34:44:45:46:f0:00:58:5d:ee:95:0a:84:03:77:0d:d3:81:
e9:db:49:c7:ea:c8:32:ba:2c:75:c2:7b:24:25:cf:c9:f3:26:
ae:cd:a0:5a:e5:3a:57:84:55:5e:50:05:56:ab:ce:cd:e5:df:
75:64:d1:9c
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUdfvqOkTD32qbBMDgjURgl3u4ficwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA0MzAxNTE3MzhaFw0yNjA0MjkxNTIyMzhaMDMxMTAvBgNV
BAMTKEFBQkNBNzM5QUQyRUMzQzM1Q0M0NzBBODg2Q0U1QzJDODczNTNBRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPZIVqUKY55X9/t7+RoSOMk0Jw
BA1Iim8Mcjm1foetH3qpdZz91LVvx3ImovgLhfy5wcQENjePZYvRQhfDgbqlTuL6
43fQyf0fgvoXwjGnGs5qeUH8aYVZ/RtJrtMu3PNswVVsMsBGjg+tXajOYGhWwsws
8PDaNd69CC/OtCJCHbj1w1F/A/R5JvgPoFqdFYY+wdppd7Bi9Phi+FTGXDf5tEbW
0YEdD2E6XIWS7s/9m/vDZoSTLFAnNFd/mamJ8JcZhCsspUunXJldNLN6IVKFhNBk
WG/Anvd3MipJRSSfmGVx0LEP3Rms18LfrE6Hq7e7n4Jxomm6m69m0A4ua4ObAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSqvKc5rS7Dw1zE
cKiGzlwshzU6/zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR1px
Rm9DS3ZYd0VpQzZOZWVuY3o2RHdRekp6S25GdVFjMlFKaTQ3V3VnRmEvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0da
cUZvQ0t2WHdFaUM2TmVlbmN6NkR3UXpKektuRnVRYzJRSmk0N1d1Z0ZhLzEvQUFC
Q0E3MzlBRDJFQzNDMzVDQzQ3MEE4ODZDRTVDMkM4NzM1M0FGRi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLahYMA0EAgACMAcDBQAoBFdIMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQXGDANBgkqhkiG9w0BAQsFAAOCAQEAOZyi9fngu/rN62DT
6juEDTeal2Dy+4wQ09V3TauiV3rS15+AygehhtlyO1mNpHQGck5zTyjHif+1fLAg
RB/f7ayscPjIk4pptBsow2vFBb0W/xw8NVXr1biBNGyjufBO/DXgnH9lv8vsjFgt
x96fV1Xldfs8sFAlW3r/kfK+oYldBFh5f1LzoB8iD5m+WrwyUHW9ScKTySVBG3Tv
vRXuBMgrzByKXAvkcw9LXC9QG0SRpr7HmX5Ffki2o7FTQ9cUdEYr0AU6YDRERUbw
AFhd7pUKhAN3DdOB6dtJx+rIMrosdcJ7JCXPyfMmrs2gWuU6V4RVXlAFVqvOzeXf
dWTRnA==
-----END CERTIFICATE-----
Generated at Wed May 14 18:40:02 2025 by rpki-client