
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CA36D3D4BA1F362E7EB6F08E51BF32534223C60B.cer
File: CA36D3D4BA1F362E7EB6F08E51BF32534223C60B.cer (raw, json)
Hash identifier: kiasQZWOmLSlseIWKgqYfj8visaC4AYTplDTUtaGPvQ=
Subject key identifier: CA:36:D3:D4:BA:1F:36:2E:7E:B6:F0:8E:51:BF:32:53:42:23:C6:0B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 470AB55D96598BD6C5F1BA5568570FB6D4D65A29
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/CA36D3D4BA1F362E7EB6F08E51BF32534223C60B.mft
caRepository: rsync://rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 08 Apr 2025 14:29:52 +0000
Certificate not after: Tue 07 Apr 2026 14:34:52 +0000
Subordinate resources: AS: 265131
IP: 143.208.220.0/22
IP: 2804:2b04::/32
Validation: Failed, certificate revoked on Tue 15 Apr 2025 12:59:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:0a:b5:5d:96:59:8b:d6:c5:f1:ba:55:68:57:0f:b6:d4:d6:5a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 8 14:29:52 2025 GMT
Not After : Apr 7 14:34:52 2026 GMT
Subject: CN=CA36D3D4BA1F362E7EB6F08E51BF32534223C60B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:e6:8f:93:2f:76:01:25:26:c5:04:63:22:
ff:57:c6:91:59:99:8a:78:a7:50:54:d5:e4:5a:6a:
cb:80:16:2e:ef:72:a8:14:a5:98:2b:68:14:ee:7d:
71:cc:07:16:37:6a:e0:05:c9:e8:08:1f:c8:36:27:
c3:d8:85:f4:39:66:c7:a5:52:5e:a4:21:1a:e6:e0:
22:ab:0f:22:75:f8:0a:79:17:b0:54:cd:e7:34:c7:
6f:0d:91:fd:27:ae:6e:ea:96:a1:4a:fb:82:35:98:
b9:ae:bc:be:f5:c9:56:88:31:64:a4:54:9c:33:f1:
19:c9:d2:fa:30:97:3f:ca:f3:a1:c1:46:f2:27:21:
b4:56:07:a0:6b:fe:93:59:28:3a:c0:ad:4a:45:90:
d1:81:59:78:65:96:5d:33:09:f9:93:cb:53:a0:63:
fd:49:2c:5a:5f:a4:c6:e3:0c:d3:ca:c6:c6:34:ed:
ec:2f:ad:02:3d:65:fa:e5:92:e2:c4:19:db:d6:c8:
93:a2:f5:5a:a3:2e:26:27:a5:41:de:8b:5f:18:f6:
aa:11:f0:62:1a:75:3e:6f:b7:74:04:36:4a:f8:00:
76:af:15:95:da:a0:4d:ad:ce:1b:3c:85:1b:6c:e4:
d2:12:4d:35:1a:3b:82:0a:44:b3:b3:fd:17:33:5e:
63:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CA:36:D3:D4:BA:1F:36:2E:7E:B6:F0:8E:51:BF:32:53:42:23:C6:0B
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/CA36D3D4BA1F362E7EB6F08E51BF32534223C60B.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.220.0/22
IPv6:
2804:2b04::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265131
Signature Algorithm: sha256WithRSAEncryption
b2:42:27:91:37:67:71:be:93:0a:c0:e4:36:99:ec:fa:c8:d3:
53:3a:78:c9:19:cb:6e:eb:5e:1a:a0:72:0c:2d:6c:47:9a:e7:
9d:b9:4b:c5:05:18:05:b1:2f:41:3b:63:56:95:c4:5d:8b:62:
03:a5:f7:45:15:69:c3:a3:97:15:aa:3a:31:81:ba:c0:d6:95:
6b:58:e8:7b:ac:26:a4:16:04:af:9e:9d:20:e3:36:b4:11:18:
91:3b:71:68:0d:47:cb:50:05:7b:7b:93:c5:ea:b2:5b:4b:16:
f1:8c:c3:9f:d1:17:73:03:db:65:3a:ed:be:c9:f0:88:e1:80:
e9:c7:37:5f:7b:2d:27:bd:e9:4e:e2:20:65:48:52:d4:f2:7d:
f3:5b:9f:75:99:c4:35:67:bb:9d:04:d8:28:c1:ec:43:8b:3e:
c5:54:10:e5:d8:28:55:b5:91:41:f8:52:d1:48:78:68:93:2a:
60:80:27:e9:03:73:85:42:84:7a:28:d2:14:f1:00:ae:2e:e5:
32:13:98:4e:40:d2:ae:59:05:e6:99:1f:0a:52:f1:9a:5c:85:
7c:82:bf:bb:c7:ba:d7:66:eb:c7:6f:d8:a7:a0:66:01:b2:26:
e3:e8:e6:64:3c:ee:e3:81:fb:c6:bd:09:73:18:3b:80:75:b9:
3b:60:80:02
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIURwq1XZZZi9bF8bpVaFcPttTWWikwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA0MDgxNDI5NTJaFw0yNjA0MDcxNDM0NTJaMDMxMTAvBgNV
BAMTKENBMzZEM0Q0QkExRjM2MkU3RUI2RjA4RTUxQkYzMjUzNDIyM0M2MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ5eaPky92ASUmxQRjIv9XxpFZ
mYp4p1BU1eRaasuAFi7vcqgUpZgraBTufXHMBxY3auAFyegIH8g2J8PYhfQ5Zsel
Ul6kIRrm4CKrDyJ1+Ap5F7BUzec0x28Nkf0nrm7qlqFK+4I1mLmuvL71yVaIMWSk
VJwz8RnJ0vowlz/K86HBRvInIbRWB6Br/pNZKDrArUpFkNGBWXhlll0zCfmTy1Og
Y/1JLFpfpMbjDNPKxsY07ewvrQI9ZfrlkuLEGdvWyJOi9VqjLiYnpUHei18Y9qoR
8GIadT5vt3QENkr4AHavFZXaoE2tzhs8hRts5NISTTUaO4IKRLOz/RczXmORAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTKNtPUuh82Ln62
8I5RvzJTQiPGCzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR3Ez
WXRhb2N0bzdFRDZaUW9uYjhHODhrVkN5MXByeUhTb1NHdVRWVnI2RGUvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dx
M1l0YW9jdG83RUQ2WlFvbmI4Rzg4a1ZDeTFwcnlIU29TR3VUVlZyNkRlLzAvQ0Ez
NkQzRDRCQTFGMzYyRTdFQjZGMDhFNTFCRjMyNTM0MjIzQzYwQi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCj9DcMA0EAgACMAcDBQAoBCsEMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQLqzANBgkqhkiG9w0BAQsFAAOCAQEAskInkTdncb6TCsDk
Npns+sjTUzp4yRnLbuteGqByDC1sR5rnnblLxQUYBbEvQTtjVpXEXYtiA6X3RRVp
w6OXFao6MYG6wNaVa1joe6wmpBYEr56dIOM2tBEYkTtxaA1Hy1AFe3uTxeqyW0sW
8YzDn9EXcwPbZTrtvsnwiOGA6cc3X3stJ73pTuIgZUhS1PJ981ufdZnENWe7nQTY
KMHsQ4s+xVQQ5dgoVbWRQfhS0Uh4aJMqYIAn6QNzhUKEeijSFPEAri7lMhOYTkDS
rlkF5pkfClLxmlyFfIK/u8e612brx2/Yp6BmAbIm4+jmZDzu44H7xr0Jcxg7gHW5
O2CAAg==
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:32 2025 by rpki-client on console.sobornost.net