
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.cer
File: A28F0C1ED18F48A669C76BA34CD72F2A1456A418.cer (raw, json)
Hash identifier: Ww16mc8lDHiZopx/9on7YT09B0AeCmTxZb/wehwSY/s=
Subject key identifier: A2:8F:0C:1E:D1:8F:48:A6:69:C7:6B:A3:4C:D7:2F:2A:14:56:A4:18
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 032FC2576AEA908595134EECC86A1B2835E55AB0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.mft
caRepository: rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 11:18:13 +0000
Certificate not after: Thu 03 Apr 2025 11:23:13 +0000
Subordinate resources: AS: 266387
IP: 170.81.20.0/22
IP: 191.37.140.0/22
IP: 2804:3710::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:2f:c2:57:6a:ea:90:85:95:13:4e:ec:c8:6a:1b:28:35:e5:5a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 11:18:13 2024 GMT
Not After : Apr 3 11:23:13 2025 GMT
Subject: CN=A28F0C1ED18F48A669C76BA34CD72F2A1456A418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f0:f0:66:21:d7:63:40:b4:8e:20:ce:4d:62:
3e:60:45:76:22:5a:09:07:bb:b9:dc:ac:a3:1e:f8:
4b:36:b3:0f:88:07:3d:e6:c4:ac:23:4c:4a:29:97:
bf:7a:4e:a5:a3:ad:af:d7:03:0c:e6:61:ba:ae:ff:
51:04:87:23:a8:58:81:d3:2e:2e:c7:5a:a5:bb:d9:
c1:7d:25:24:45:ee:64:a9:4a:5c:66:c1:59:e5:9f:
25:ef:8b:09:8e:cb:9a:fb:72:7c:be:23:9b:18:12:
52:06:6c:b4:25:b9:a0:37:d0:cb:51:c2:6a:27:d6:
be:0f:07:b9:e0:bf:f1:7d:d3:31:aa:8e:d9:8a:d0:
58:e2:05:66:61:89:27:91:ac:bd:12:c9:d4:b9:2c:
58:63:8e:3a:27:bc:27:e7:47:d9:8d:ee:0c:ba:2a:
28:a0:5e:c4:2b:e7:fe:03:37:91:f0:39:24:81:8e:
39:f9:5a:a6:ef:46:14:92:d7:7e:5b:4e:7e:e9:0e:
36:ef:db:05:e5:23:2a:22:c4:b9:c9:27:27:3d:1b:
93:9c:a1:a1:ad:b0:1e:af:bf:74:ee:20:a3:c7:d8:
85:35:59:85:3c:ca:94:c3:e7:62:bc:8e:da:7b:f2:
66:04:82:4c:b6:f6:14:7b:2a:7c:07:49:de:5d:1b:
70:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A2:8F:0C:1E:D1:8F:48:A6:69:C7:6B:A3:4C:D7:2F:2A:14:56:A4:18
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.20.0/22
191.37.140.0/22
IPv6:
2804:3710::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266387
Signature Algorithm: sha256WithRSAEncryption
0d:a2:2c:31:96:27:77:8d:13:89:e0:39:5d:aa:82:06:ad:18:
de:4d:bb:2e:7a:16:bc:58:d3:89:ad:e5:17:e1:f1:23:28:09:
56:81:d6:83:ae:7a:27:4c:dc:72:2b:f3:fc:1d:3b:db:28:30:
ea:8d:35:cc:2f:b2:b9:2a:60:5e:d6:57:32:fd:15:f7:0c:35:
6f:42:07:f9:12:d2:00:73:f3:73:b6:1e:c6:a0:68:d0:98:86:
5e:74:b5:48:0d:93:7e:7c:0e:18:18:f6:5f:2a:7d:10:0e:37:
a5:32:73:b9:16:f1:16:23:21:82:7d:4c:d3:48:8d:dd:a9:be:
46:f9:b4:46:bd:2c:e7:bb:b4:3e:64:27:49:d4:5e:5b:7b:ed:
36:3d:bc:19:35:31:41:26:90:46:56:5f:04:af:f4:1e:16:0a:
f5:67:6f:b3:f7:30:2b:2f:34:a6:c9:5f:cf:42:f5:a3:9f:49:
23:5a:92:6f:d6:98:64:84:a6:af:45:cd:63:e5:7b:57:dc:68:
f1:67:80:8a:76:19:10:53:4f:30:44:5d:0f:c0:4a:94:f6:55:
86:42:0b:98:35:a4:f7:f3:60:bb:31:a8:d3:55:d6:92:97:d2:
fc:82:64:73:cb:87:1e:eb:d5:b9:8f:f8:00:b4:10:de:55:d6:
5b:35:8e:71
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUAy/CV2rqkIWVE07syGobKDXlWrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxMTE4MTNaFw0yNTA0MDMxMTIzMTNaMDMxMTAvBgNV
BAMTKEEyOEYwQzFFRDE4RjQ4QTY2OUM3NkJBMzRDRDcyRjJBMTQ1NkE0MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw8PBmIddjQLSOIM5NYj5gRXYi
WgkHu7ncrKMe+Es2sw+IBz3mxKwjTEopl796TqWjra/XAwzmYbqu/1EEhyOoWIHT
Li7HWqW72cF9JSRF7mSpSlxmwVnlnyXviwmOy5r7cny+I5sYElIGbLQluaA30MtR
wmon1r4PB7ngv/F90zGqjtmK0FjiBWZhiSeRrL0SydS5LFhjjjonvCfnR9mN7gy6
KiigXsQr5/4DN5HwOSSBjjn5WqbvRhSS135bTn7pDjbv2wXlIyoixLnJJyc9G5Oc
oaGtsB6vv3TuIKPH2IU1WYU8ypTD52K8jtp78mYEgky29hR7KnwHSd5dG3BBAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSijwwe0Y9IpmnH
a6NM1y8qFFakGDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHZH
alJYcm1hN2pOR2FqczZtQUNTYjVrQmZZczZrdUd0NXJUVjNleGp2SDkvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0R2
R2pSWHJtYTdqTkdhanM2bUFDU2I1a0JmWXM2a3VHdDVyVFYzZXhqdkg5LzEvQTI4
RjBDMUVEMThGNDhBNjY5Qzc2QkEzNENENzJGMkExNDU2QTQxOC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCqlEUAwQCvyWMMA0EAgACMAcDBQAoBDcQMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQQkzANBgkqhkiG9w0BAQsFAAOCAQEADaIsMZYn
d40TieA5XaqCBq0Y3k27LnoWvFjTia3lF+HxIygJVoHWg656J0zccivz/B072ygw
6o01zC+yuSpgXtZXMv0V9ww1b0IH+RLSAHPzc7YexqBo0JiGXnS1SA2TfnwOGBj2
Xyp9EA43pTJzuRbxFiMhgn1M00iN3am+Rvm0Rr0s57u0PmQnSdReW3vtNj28GTUx
QSaQRlZfBK/0HhYK9Wdvs/cwKy80pslfz0L1o59JI1qSb9aYZISmr0XNY+V7V9xo
8WeAinYZEFNPMERdD8BKlPZVhkILmDWk9/NguzGo01XWkpfS/IJkc8uHHuvVuY/4
ALQQ3lXWWzWOcQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:14:08 2025 by rpki-client