Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer
File: 0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer (raw, json)
Hash identifier: CYQpETfbIUjdlt0GynhPlGwqmZ341JWFLHNsK/rcQas=
Subject key identifier: 0D:74:BF:A3:D0:BD:CC:2C:C6:2E:DD:9E:FB:11:FC:02:83:74:37:65
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 404AC1C4F113CEF4C52BE2B85841A7EBF9CB68A5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft
caRepository: rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:25:17 +0000
Certificate not after: Wed 02 Apr 2025 18:30:17 +0000
Subordinate resources: AS: 61779
IP: 201.148.220.0/22
IP: 2801:80:ae0::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:4a:c1:c4:f1:13:ce:f4:c5:2b:e2:b8:58:41:a7:eb:f9:cb:68:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:25:17 2024 GMT
Not After : Apr 2 18:30:17 2025 GMT
Subject: CN=0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:fb:61:5b:29:94:04:30:7e:8e:17:e0:d2:
6c:11:de:b3:6a:e3:ba:c0:15:64:e3:5f:a2:86:5d:
29:8a:98:b6:c7:f7:65:f9:df:f6:b9:a3:c0:96:7e:
85:7e:22:2f:2a:64:d6:2c:66:6b:1b:82:73:47:d7:
b1:36:1e:f8:10:20:58:f7:1a:b3:e6:c3:2e:ee:ce:
18:89:f8:22:72:0a:ad:6f:e7:99:58:18:2f:56:05:
97:cc:7a:35:2e:6c:83:cd:00:d4:54:98:71:e3:21:
ee:52:7f:be:67:7c:c0:29:3c:7d:e0:33:6e:30:78:
ca:2e:7b:5a:fa:12:ae:b0:66:2b:8a:a3:a3:75:f1:
19:d8:5f:8c:6d:04:8b:54:d4:fa:29:14:45:4d:56:
4a:6d:fa:07:43:a1:f4:29:be:56:23:95:f5:4e:3e:
14:cb:92:a3:a5:a1:2b:3a:91:6b:98:4d:0b:be:36:
da:b9:81:0a:b3:c4:b9:3d:9a:be:40:68:48:17:5b:
eb:f8:3a:e5:62:34:6e:d4:4b:5c:7c:ad:b8:4c:ed:
87:dc:89:88:b4:74:14:35:aa:86:a3:e7:b3:47:b2:
90:3d:e6:18:8b:60:1a:1f:84:d2:b5:19:aa:6b:45:
2a:a6:25:67:df:1f:13:b3:02:a6:27:ef:aa:71:1d:
f9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0D:74:BF:A3:D0:BD:CC:2C:C6:2E:DD:9E:FB:11:FC:02:83:74:37:65
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.148.220.0/22
IPv6:
2801:80:ae0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61779
Signature Algorithm: sha256WithRSAEncryption
3e:d5:78:90:c0:73:33:b9:b8:e6:33:4a:0f:42:49:20:27:b5:
69:c8:a2:35:bd:73:70:28:47:c2:0e:da:f2:e0:df:cf:74:e3:
c3:10:78:5c:78:2f:34:90:bd:fa:f6:18:1a:bf:30:6a:5c:96:
e3:36:35:98:91:2a:63:63:a5:c0:50:9d:ae:b6:26:2f:4e:92:
22:19:cf:09:e9:26:e5:3a:9d:b6:10:94:f6:98:ee:58:d1:c2:
8c:10:5c:80:dc:9d:26:52:62:db:07:ed:db:32:2b:e5:26:c3:
ed:e7:9c:7d:85:0f:e7:ac:0b:da:2c:dc:01:fb:7c:42:61:30:
e5:7a:6a:40:83:c2:c5:57:2d:9b:be:80:04:09:7e:d7:bc:56:
35:8c:61:45:22:af:e6:e4:d6:c7:c2:3c:e8:b7:d5:e8:a5:e9:
a4:78:d1:87:6d:bd:ea:2f:33:59:0a:f2:54:9c:b7:10:12:70:
b7:e1:e5:a0:5f:75:0e:3c:7f:ef:ec:a0:5a:c2:8e:89:4c:29:
35:5f:cb:e0:c3:83:e2:ee:73:01:21:25:56:bd:5c:a5:e6:60:
3c:8f:a3:88:b7:29:a7:ea:0a:bc:43:26:67:5f:b1:9c:9c:52:
6e:3d:e8:1a:ff:9e:7d:35:80:a9:1e:dd:0a:63:ba:08:96:eb:
b6:1d:70:06
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIUQErBxPETzvTFK+K4WEGn6/nLaKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxODI1MTdaFw0yNTA0MDIxODMwMTdaMDMxMTAvBgNV
BAMTKDBENzRCRkEzRDBCRENDMkNDNjJFREQ5RUZCMTFGQzAyODM3NDM3NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtp/thWymUBDB+jhfg0mwR3rNq
47rAFWTjX6KGXSmKmLbH92X53/a5o8CWfoV+Ii8qZNYsZmsbgnNH17E2HvgQIFj3
GrPmwy7uzhiJ+CJyCq1v55lYGC9WBZfMejUubIPNANRUmHHjIe5Sf75nfMApPH3g
M24weMoue1r6Eq6wZiuKo6N18RnYX4xtBItU1PopFEVNVkpt+gdDofQpvlYjlfVO
PhTLkqOloSs6kWuYTQu+Ntq5gQqzxLk9mr5AaEgXW+v4OuViNG7US1x8rbhM7Yfc
iYi0dBQ1qoaj57NHspA95hiLYBofhNK1GaprRSqmJWffHxOzAqYn76pxHfmDAgMB
AAGjggM7MIIDNzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNdL+j0L3MLMYu
3Z77EfwCg3Q3ZTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM0ZZ
OFFKRWV4cWN6NHNmbnJVaUpudHFEaFVTVThMU1V1bXJBTGNzMUthUjUvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM0ZZ
OFFKRWV4cWN6NHNmbnJVaUpudHFEaFVTVThMU1V1bXJBTGNzMUthUjUvMS8wRDc0
QkZBM0QwQkRDQzJDQzYyRUREOUVGQjExRkMwMjgzNzQzNzY1Lm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcB
Af8EITAfMAwEAgABMAYDBALJlNwwDwQCAAIwCQMHACgBAIAK4DAaBggrBgEFBQcB
CAEB/wQLMAmgBzAFAgMA8VMwDQYJKoZIhvcNAQELBQADggEBAD7VeJDAczO5uOYz
Sg9CSSAntWnIojW9c3AoR8IO2vLg389048MQeFx4LzSQvfr2GBq/MGpcluM2NZiR
KmNjpcBQna62Ji9OkiIZzwnpJuU6nbYQlPaY7ljRwowQXIDcnSZSYtsH7dsyK+Um
w+3nnH2FD+esC9os3AH7fEJhMOV6akCDwsVXLZu+gAQJfte8VjWMYUUir+bk1sfC
POi31eil6aR40YdtveovM1kK8lSctxAScLfh5aBfdQ48f+/soFrCjolMKTVfy+DD
g+LucwEhJVa9XKXmYDyPo4i3KafqCrxDJmdfsZycUm496Br/nn01gKke3QpjugiW
67YdcAY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:50:48 2025 by rpki-client