Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6.cer
File: F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6.cer (raw, json)
Hash identifier: oSMUdPMTlfH5fz2E7PsJbR9xiqYUm8WeczBoEa8Dh0A=
Subject key identifier: F2:0B:D1:92:CB:C1:DA:E1:97:78:FB:E5:38:B8:AC:B4:BF:16:A5:C6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5C0CCA85886BA0B430F56DD41C223873284FB2E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6.mft
caRepository: rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 23 Apr 2025 14:45:58 +0000
Certificate not after: Wed 22 Apr 2026 14:50:58 +0000
Subordinate resources: AS: 262820
IP: 138.117.120.0/22
IP: 186.251.0.0/21
IP: 2804:288::/32
Validation: Failed, certificate revoked on Mon 30 Jun 2025 09:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:0c:ca:85:88:6b:a0:b4:30:f5:6d:d4:1c:22:38:73:28:4f:b2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 23 14:45:58 2025 GMT
Not After : Apr 22 14:50:58 2026 GMT
Subject: CN=F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:68:3e:ac:ce:3a:4d:2b:01:8a:9a:4c:77:
07:bb:e6:4c:f0:9f:55:71:68:b7:d9:38:5d:2b:9e:
a0:03:b9:45:48:d7:88:a5:86:07:e6:5b:87:9e:25:
78:2e:56:40:31:df:c5:49:b7:cb:65:b8:58:31:07:
ba:9a:5f:d4:7e:6b:89:35:ff:8d:74:50:0a:c0:f6:
c8:87:c9:b6:b9:5a:7a:18:1f:06:d4:78:b1:ef:e4:
b1:6f:0c:d5:21:d3:c5:be:e7:96:f0:6e:5d:dc:fc:
94:a8:6a:83:39:f0:78:d7:96:ac:09:e1:0a:d0:ac:
0c:0b:f7:d1:d3:0b:b4:ba:b6:f4:76:48:c7:89:c9:
ac:e7:35:17:8d:5b:19:40:f8:cd:90:a3:25:21:64:
a4:f9:6e:24:0c:67:49:0e:21:d5:44:70:e5:10:e3:
be:d9:ff:80:54:52:68:fb:c9:af:85:05:80:d1:61:
f3:04:e3:3d:14:78:73:e1:10:e6:48:78:6c:36:1f:
14:55:b3:46:37:b9:8f:b9:9c:58:81:0f:82:a2:ae:
e4:21:b3:39:fb:9e:9e:6e:98:f9:62:ad:f4:60:fe:
09:a0:52:de:b9:da:41:5d:b4:86:ca:7f:bf:20:fa:
d2:9a:fd:a7:a3:13:f1:3e:f3:0e:3b:6c:02:94:dd:
50:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F2:0B:D1:92:CB:C1:DA:E1:97:78:FB:E5:38:B8:AC:B4:BF:16:A5:C6
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.120.0/22
186.251.0.0/21
IPv6:
2804:288::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262820
Signature Algorithm: sha256WithRSAEncryption
92:1d:2c:db:34:b5:4e:3b:68:63:7b:40:d2:23:8a:0d:2f:8a:
ce:27:51:09:17:da:55:55:08:ec:c5:c6:de:4f:e6:6d:1c:1d:
11:e3:21:4f:61:e3:56:b1:55:8f:fe:6f:b3:87:2d:08:dc:0d:
b5:66:46:cd:66:f7:92:74:fb:81:55:b7:2f:df:c4:a3:3f:b5:
d6:38:16:60:72:83:1f:47:d8:fc:56:0f:d6:cd:b7:cf:b3:ec:
12:2b:5a:cb:84:fe:e5:74:11:54:3e:66:ac:70:16:ef:ed:bc:
38:4a:7d:3d:12:ce:18:ff:fb:72:b0:6b:b7:e0:cf:d7:0e:ec:
dc:27:0d:1c:40:16:c6:ce:fb:c2:85:69:07:87:b7:e5:c6:f1:
d8:73:83:19:33:1e:85:e0:c2:a1:53:31:eb:cb:c6:fa:e1:90:
0c:25:31:87:c7:d3:87:76:88:aa:a0:54:b2:d7:a6:83:0e:f6:
e5:c0:0a:87:92:97:cd:35:6c:f6:ec:3b:b5:25:69:66:43:45:
39:8c:fa:69:eb:78:60:8c:74:e1:68:84:b9:54:32:b1:ef:4a:
c1:ec:e0:4f:97:16:85:02:7f:a8:13:f8:6f:66:f4:51:78:c8:
58:db:73:6d:32:01:ef:24:4d:d4:81:30:10:63:ff:79:b1:99:
78:df:9e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:12:48 2025 by rpki-client