Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
File: EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer (raw, json)
Hash identifier: 5DPBVN6BKaup82CgQttAZB+AjBRsBb8cy47ufEri+Mw=
Subject key identifier: EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7CC9D0236B3AE881172A5ACD7C0CEC8A88C380C8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.mft
caRepository: rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 06 Mar 2025 16:36:06 +0000
Certificate not after: Thu 05 Mar 2026 16:41:06 +0000
Subordinate resources: AS: 52916
IP: 143.255.16.0/22
IP: 177.10.20.0/22
IP: 2804:2b10::/32
Validation: Failed, certificate revoked on Thu 01 May 2025 20:44:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:c9:d0:23:6b:3a:e8:81:17:2a:5a:cd:7c:0c:ec:8a:88:c3:80:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 6 16:36:06 2025 GMT
Not After : Mar 5 16:41:06 2026 GMT
Subject: CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:41:bd:33:f2:58:ec:88:44:61:93:15:50:66:
be:1e:55:29:9d:19:3b:c9:ff:af:cc:18:31:a9:d2:
d5:80:8d:f2:d8:24:4a:d5:ca:59:fa:d6:68:df:59:
41:5a:98:79:a8:4b:70:fa:4d:94:c1:6f:34:ac:3f:
9c:06:f6:42:f6:24:93:e9:95:e8:7b:82:61:2b:5b:
6b:20:bc:01:77:c0:eb:22:e1:0e:ab:98:36:8b:5b:
7a:39:24:47:89:a7:75:0d:db:51:40:9c:64:e2:fa:
5b:de:27:ae:13:18:89:5c:49:e5:88:ae:ba:5e:b9:
bf:5c:c2:6a:16:ba:9b:a9:2f:51:34:52:79:80:db:
7a:f1:77:e3:b6:23:a9:cd:a0:20:4d:3a:dc:93:2e:
3e:fe:9d:1d:49:e0:6e:6b:ca:74:6f:54:de:80:55:
b0:c5:6c:07:29:56:76:d8:5b:7e:49:e5:17:a9:f4:
db:05:83:03:c1:83:e2:76:c0:33:a5:d1:ab:3c:05:
23:42:4f:e4:27:5a:a6:a3:a3:b6:d0:d7:b0:9a:09:
42:e2:a8:66:3d:a2:25:7a:6b:a1:77:45:74:be:c4:
ca:9c:5d:ad:7a:7c:63:c9:cd:7a:e8:fb:c1:30:70:
22:d8:64:d7:d4:1d:12:80:5d:d3:cc:bf:f1:32:8b:
17:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.16.0/22
177.10.20.0/22
IPv6:
2804:2b10::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52916
Signature Algorithm: sha256WithRSAEncryption
09:ea:0a:fa:c6:97:3e:a5:b7:a0:e3:9a:31:31:28:84:1f:1c:
b4:7e:93:a3:e2:e4:78:c1:01:70:97:7a:e6:40:d7:ea:69:d5:
0c:67:0c:07:d1:5f:89:bb:e5:ff:4b:a2:0f:af:c1:99:5e:a3:
83:1a:70:17:7d:30:b1:9f:9e:ef:6d:d5:90:01:10:57:63:8b:
55:5f:2a:b5:c4:36:c0:f3:d0:17:53:34:4a:c4:6b:22:1a:a1:
5b:5e:11:ac:05:e7:c7:8d:42:a2:9c:b3:a0:93:16:df:39:f2:
46:74:c5:ef:8a:7d:1d:15:20:74:36:b0:56:04:cf:af:41:c9:
c7:1d:8a:4b:cc:29:c5:99:f3:18:77:c2:de:de:5a:5a:0b:5d:
f3:b8:2f:36:37:8f:a3:8f:13:eb:17:79:1a:cf:5f:76:f8:f3:
cc:51:78:8b:5a:75:b9:61:99:f1:bb:e6:41:b4:ca:6d:ba:7b:
a5:07:d2:1e:4d:49:50:1f:ed:56:05:ef:bc:9b:ef:f3:75:fd:
fa:8a:31:9b:c4:45:2c:22:df:22:fc:09:bd:55:8d:c1:92:25:
30:29:9f:8f:c2:f9:01:c2:0e:d4:b7:b5:b6:14:02:25:6b:e2:
c8:bf:5c:a5:9f:29:bd:ba:2a:f4:ea:75:9b:d4:5e:70:19:9b:
f5:c6:a5:fb
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgIUfMnQI2s66IEXKlrNfAzsiojDgMgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDYxNjM2MDZaFw0yNjAzMDUxNjQxMDZaMDMxMTAvBgNV
BAMTKEVGOTA4QTE3N0ZBRjNFREVFQUYzOUVGMUJDM0IyMDgyMjUzMDJFNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcQb0z8ljsiERhkxVQZr4eVSmd
GTvJ/6/MGDGp0tWAjfLYJErVyln61mjfWUFamHmoS3D6TZTBbzSsP5wG9kL2JJPp
leh7gmErW2sgvAF3wOsi4Q6rmDaLW3o5JEeJp3UN21FAnGTi+lveJ64TGIlcSeWI
rrpeub9cwmoWupupL1E0UnmA23rxd+O2I6nNoCBNOtyTLj7+nR1J4G5rynRvVN6A
VbDFbAcpVnbYW35J5Rep9NsFgwPBg+J2wDOl0as8BSNCT+QnWqajo7bQ17CaCULi
qGY9oiV6a6F3RXS+xMqcXa16fGPJzXro+8EwcCLYZNfUHRKAXdPMv/EyixcNAgMB
AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTvkIoXf68+3urz
nvG8OyCCJTAudzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTFW
OWU4UEs4YWNGcGhrdjJyeEpKVm9hVFI0cjNhVnlDZkhWenJxM3VoNGovMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTFW
OWU4UEs4YWNGcGhrdjJyeEpKVm9hVFI0cjNhVnlDZkhWenJxM3VoNGovMS9FRjkw
OEExNzdGQUYzRURFRUFGMzlFRjFCQzNCMjA4MjI1MzAyRTc3Lm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB
Af8EJTAjMBIEAgABMAwDBAKP/xADBAKxChQwDQQCAAIwBwMFACgEKxAwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDAM60MA0GCSqGSIb3DQEBCwUAA4IBAQAJ6gr6xpc+
pbeg45oxMSiEHxy0fpOj4uR4wQFwl3rmQNfqadUMZwwH0V+Ju+X/S6IPr8GZXqOD
GnAXfTCxn57vbdWQARBXY4tVXyq1xDbA89AXUzRKxGsiGqFbXhGsBefHjUKinLOg
kxbfOfJGdMXvin0dFSB0NrBWBM+vQcnHHYpLzCnFmfMYd8Le3lpaC13zuC82N4+j
jxPrF3kaz192+PPMUXiLWnW5YZnxu+ZBtMptunulB9IeTUlQH+1WBe+8m+/zdf36
ijGbxEUsIt8i/Am9VY3BkiUwKZ+PwvkBwg7Ut7W2FAIla+LIv1ylnym9uir06nWb
1F5wGZv1xqX7
-----END CERTIFICATE-----
Generated at Thu May 15 17:07:05 2025 by rpki-client