Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3BCE948E59955EF881BD1ECD2DE385FE7959F195.cer
File: 3BCE948E59955EF881BD1ECD2DE385FE7959F195.cer (raw, json)
Hash identifier: Jgwx7sJ5vZQKCDrdScqb9vCDEYOzHe6gO2MvLFtGj3M=
Subject key identifier: 3B:CE:94:8E:59:95:5E:F8:81:BD:1E:CD:2D:E3:85:FE:79:59:F1:95
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1C0A036CF4DDFD5C1F975667DD6B1C9D6060C6A9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2/3BCE948E59955EF881BD1ECD2DE385FE7959F195.mft
caRepository: rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 25 Nov 2024 11:15:05 +0000
Certificate not after: Mon 24 Nov 2025 11:20:05 +0000
Subordinate resources: AS: 28343
IP: 45.65.196.0/22
IP: 45.234.184.0/22
IP: 131.72.108.0/22
IP: 131.72.148.0/22
IP: 131.100.92.0/22
IP: 131.161.16.0/22
IP: 131.161.144.0/22
IP: 131.221.88.0/22
IP: 131.221.176.0/22
IP: 132.255.12.0/22
IP: 138.0.200.0/22
IP: 138.36.204.0/22
IP: 138.94.72.0/22
IP: 138.94.188.0/22
IP: 138.97.136.0/22
IP: 138.99.20.0/22
IP: 138.118.28.0/22
IP: 138.118.148.0/22
IP: 138.118.196.0/22
IP: 138.121.188.0/22
IP: 138.122.208.0/22
IP: 138.204.60.0/22
IP: 143.0.212.0/22
IP: 143.208.96.0/22
IP: 143.208.196.0/22
IP: 143.208.212.0/22
IP: 143.255.220.0/22
IP: 167.249.224.0/22
IP: 167.250.176.0/22
IP: 168.0.120.0/22
IP: 168.194.36.0/22
IP: 168.196.132.0/22
IP: 168.232.24.0/22
IP: 168.232.232.0/22
IP: 170.78.198.0/23
IP: 170.78.212.0/22
IP: 170.81.216.0/21
IP: 170.82.176.0/22
IP: 170.82.240.0/22
IP: 170.84.120.0/22
IP: 170.231.24.0/22
IP: 170.238.216.0/22
IP: 170.246.72.0/22
IP: 170.246.200.0/22
IP: 170.254.220.0/22
IP: 177.8.240.0/21
IP: 177.10.96.0/20
IP: 177.22.0.0/20
IP: 177.53.124.0/22
IP: 177.54.0.0/20
IP: 177.66.144.0/22
IP: 177.67.200.0/21
IP: 177.72.40.0/21
IP: 177.73.136.0/21
IP: 177.73.184.0/22
IP: 177.74.208.0/20
IP: 177.74.240.0/20
IP: 177.101.96.0/19
IP: 177.104.0.0/20
IP: 177.107.160.0/20
IP: 177.125.104.0/22
IP: 177.125.232.0/21
IP: 177.129.104.0/22
IP: 177.130.224.0/20
IP: 177.130.248.0/21
IP: 177.136.160.0/21
IP: 177.184.144.0/21
IP: 177.200.192.0/19
IP: 177.221.160.0/20
IP: 177.222.144.0/20
IP: 179.127.160.0/19
IP: 179.190.96.0/19
IP: 186.193.160.0/20
IP: 186.208.16.0/20
IP: 186.209.16.0/20
IP: 186.209.192.0/20
IP: 186.216.240.0/20
IP: 186.225.0.0/20
IP: 186.226.32.0/20
IP: 186.226.144.0/20
IP: 186.227.136.0/21
IP: 186.235.56.0/22
IP: 186.237.144.0/21
IP: 186.249.192.0/20
IP: 186.251.108.0/22
IP: 187.45.64.0/20
IP: 187.85.160.0/19
IP: 187.87.96.0/20
IP: 187.94.96.0/20
IP: 187.102.0.0/20
IP: 187.108.208.0/20
IP: 189.28.192.0/19
IP: 189.45.192.0/20
IP: 189.90.48.0/20
IP: 189.91.192.0/20
IP: 189.113.224.0/19
IP: 189.127.16.0/20
IP: 191.6.88.0/21
IP: 191.37.172.0/22
IP: 191.52.240.0/21
IP: 191.240.216.0/21
IP: 191.253.96.0/19
IP: 200.10.4.0/22
IP: 200.34.224.0/19
IP: 200.50.216.0/22
IP: 201.49.244.0/22
IP: 201.131.80.0/21
IP: 201.131.136.0/21
IP: 201.131.156.0/22
IP: 201.159.248.0/22
IP: 2804:c::/32
IP: 2804:30c::/32
IP: 2804:ed8::/32
IP: 2804:f58::/32
IP: 2804:fe4::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:0a:03:6c:f4:dd:fd:5c:1f:97:56:67:dd:6b:1c:9d:60:60:c6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 25 11:15:05 2024 GMT
Not After : Nov 24 11:20:05 2025 GMT
Subject: CN=3BCE948E59955EF881BD1ECD2DE385FE7959F195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:95:cd:af:41:1f:4d:3d:3d:61:4f:85:e5:d1:
f6:4d:4a:52:8f:36:b3:3b:31:73:4d:91:e7:22:a8:
d7:5a:ff:4b:79:84:7a:5b:65:a3:d9:71:dd:f2:db:
8c:69:21:f6:5c:21:db:31:5e:fa:ed:42:41:ca:03:
0d:11:42:97:f5:65:64:7f:60:1c:52:aa:71:ce:bf:
1e:b1:0b:da:36:c8:27:b1:c5:12:e5:3f:f9:5b:a9:
d7:1e:67:fe:4f:a0:bf:62:4f:cb:51:3b:f0:7d:88:
4e:15:90:82:9c:8b:d4:24:e3:f5:ff:d5:dc:44:86:
2c:2e:b5:34:f2:4a:62:5c:c9:74:fa:82:da:0c:ae:
b8:ef:29:72:3a:85:9f:2f:e6:e7:99:c9:65:b7:20:
42:ba:19:70:4f:c3:f1:3e:16:73:da:75:ec:96:08:
64:b1:6e:49:3f:39:85:3b:27:b6:51:dd:97:91:8e:
2a:28:da:62:2a:48:3d:3b:fe:e7:4a:15:97:46:b7:
da:f7:9e:68:9d:eb:ad:3b:69:ac:ca:5a:31:31:15:
fa:45:35:ec:65:87:e5:c0:f4:4c:c0:ff:4d:a9:b5:
a7:e0:1b:78:3f:33:c7:f4:f7:57:75:ff:82:4a:43:
a3:43:b3:5b:0e:73:2b:19:10:76:45:5d:7e:8c:bb:
6a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3B:CE:94:8E:59:95:5E:F8:81:BD:1E:CD:2D:E3:85:FE:79:59:F1:95
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2/3BCE948E59955EF881BD1ECD2DE385FE7959F195.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.196.0/22
45.234.184.0/22
131.72.108.0/22
131.72.148.0/22
131.100.92.0/22
131.161.16.0/22
131.161.144.0/22
131.221.88.0/22
131.221.176.0/22
132.255.12.0/22
138.0.200.0/22
138.36.204.0/22
138.94.72.0/22
138.94.188.0/22
138.97.136.0/22
138.99.20.0/22
138.118.28.0/22
138.118.148.0/22
138.118.196.0/22
138.121.188.0/22
138.122.208.0/22
138.204.60.0/22
143.0.212.0/22
143.208.96.0/22
143.208.196.0/22
143.208.212.0/22
143.255.220.0/22
167.249.224.0/22
167.250.176.0/22
168.0.120.0/22
168.194.36.0/22
168.196.132.0/22
168.232.24.0/22
168.232.232.0/22
170.78.198.0/23
170.78.212.0/22
170.81.216.0/21
170.82.176.0/22
170.82.240.0/22
170.84.120.0/22
170.231.24.0/22
170.238.216.0/22
170.246.72.0/22
170.246.200.0/22
170.254.220.0/22
177.8.240.0/21
177.10.96.0/20
177.22.0.0/20
177.53.124.0/22
177.54.0.0/20
177.66.144.0/22
177.67.200.0/21
177.72.40.0/21
177.73.136.0/21
177.73.184.0/22
177.74.208.0/20
177.74.240.0/20
177.101.96.0/19
177.104.0.0/20
177.107.160.0/20
177.125.104.0/22
177.125.232.0/21
177.129.104.0/22
177.130.224.0/20
177.130.248.0/21
177.136.160.0/21
177.184.144.0/21
177.200.192.0/19
177.221.160.0/20
177.222.144.0/20
179.127.160.0/19
179.190.96.0/19
186.193.160.0/20
186.208.16.0/20
186.209.16.0/20
186.209.192.0/20
186.216.240.0/20
186.225.0.0/20
186.226.32.0/20
186.226.144.0/20
186.227.136.0/21
186.235.56.0/22
186.237.144.0/21
186.249.192.0/20
186.251.108.0/22
187.45.64.0/20
187.85.160.0/19
187.87.96.0/20
187.94.96.0/20
187.102.0.0/20
187.108.208.0/20
189.28.192.0/19
189.45.192.0/20
189.90.48.0/20
189.91.192.0/20
189.113.224.0/19
189.127.16.0/20
191.6.88.0/21
191.37.172.0/22
191.52.240.0/21
191.240.216.0/21
191.253.96.0/19
200.10.4.0/22
200.34.224.0/19
200.50.216.0/22
201.49.244.0/22
201.131.80.0/21
201.131.136.0/21
201.131.156.0/22
201.159.248.0/22
IPv6:
2804:c::/32
2804:30c::/32
2804:ed8::/32
2804:f58::/32
2804:fe4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28343
Signature Algorithm: sha256WithRSAEncryption
10:06:21:22:cc:9c:d1:d5:ba:0d:45:ab:16:7d:66:5f:69:53:
1b:a5:a0:5c:d9:fd:e8:a0:9b:86:4b:67:6d:03:b3:eb:e9:ac:
31:77:76:1d:b4:c7:b8:24:ab:36:e8:51:8d:d5:6f:af:4e:d5:
67:c5:63:9a:4d:a0:23:b8:43:b9:ef:0f:f8:00:68:c3:24:c6:
71:72:71:09:8c:17:2d:ce:14:ac:71:fb:53:fe:8a:40:f5:eb:
16:60:da:e2:d2:88:61:bb:4e:07:92:7c:2c:be:50:06:1d:a3:
03:1e:dd:04:96:96:d7:97:68:de:61:91:80:9d:27:06:cb:19:
7d:99:69:d1:ad:dd:cd:69:77:7e:04:31:0a:0a:d1:53:37:58:
90:ad:10:12:96:93:db:bd:01:72:3c:78:99:68:46:75:5f:7a:
28:fb:f3:e8:5b:87:c6:05:b6:db:84:a1:68:c8:17:a3:b5:f0:
8f:b4:b1:36:7f:88:69:91:c5:a8:13:e8:9c:68:a6:0f:5b:7f:
9a:4d:06:af:d4:d8:d7:a1:c0:20:ff:b4:1a:87:15:b1:ea:fb:
09:2e:89:31:28:40:fb:4e:37:c0:00:39:f6:39:09:4f:4f:1a:
d4:9c:3a:c9:24:27:42:1a:28:03:f4:94:5d:f4:a9:26:3e:ab:
78:f0:ba:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:24:11 2025 by rpki-client