Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer
File: C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer (raw, json)
Hash identifier: LydEoKFHdNATS4a6/BDOEVKVx/lYnQjxPD23dT5mkbQ=
Subject key identifier: C9:C8:FE:4C:4B:95:AA:80:D3:B7:3D:CD:13:6D:A1:E1:B8:36:56:D9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 58D511E782C9C57B50D2452C40554E4CA14AF66E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.mft
caRepository: rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 18:05:10 +0000
Certificate not after: Thu 03 Apr 2025 18:10:10 +0000
Subordinate resources: AS: 28346
IP: 189.126.136.0/23
IP: 2001:12a4::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:d5:11:e7:82:c9:c5:7b:50:d2:45:2c:40:55:4e:4c:a1:4a:f6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 18:05:10 2024 GMT
Not After : Apr 3 18:10:10 2025 GMT
Subject: CN=C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:fc:e0:59:6c:63:cc:18:2b:41:8c:8c:21:
eb:84:c2:cd:6e:f3:23:3e:41:25:6e:bb:ec:75:49:
72:4c:da:ce:6c:99:e0:cf:11:17:f2:97:36:59:50:
38:40:9f:70:16:0f:fe:f6:ce:03:71:e2:b0:e1:73:
99:45:fa:3e:38:86:a7:f9:e2:9e:2c:be:30:de:6d:
33:4a:41:58:2c:85:dc:a1:81:50:a2:98:de:58:1c:
3e:22:b1:5a:56:73:c6:04:25:05:fe:46:69:97:eb:
0d:3b:89:f9:14:91:f2:f4:78:90:e7:86:91:5a:c7:
79:b4:17:16:db:f1:ec:58:a5:e5:cb:8d:5e:69:07:
b5:90:dc:b6:a7:df:66:8a:13:c7:b3:f4:28:5a:cf:
37:02:ec:1a:d1:4a:89:fd:3d:41:2c:b2:a4:e7:b2:
a5:e9:00:00:65:8e:23:b1:50:5d:6b:af:08:40:ac:
45:7b:9b:8f:c6:34:a2:f8:77:ac:27:fc:bf:58:5f:
45:e7:69:63:c5:66:f9:76:55:90:88:b9:9e:4a:dd:
25:bb:98:97:41:16:22:aa:81:6c:f4:31:53:a3:fb:
29:0f:5a:c5:16:28:9c:14:8a:f7:15:47:1a:49:5e:
d2:00:7d:43:c9:e5:e1:c2:16:b3:e2:a5:f6:87:31:
4e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C9:C8:FE:4C:4B:95:AA:80:D3:B7:3D:CD:13:6D:A1:E1:B8:36:56:D9
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.126.136.0/23
IPv6:
2001:12a4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28346
Signature Algorithm: sha256WithRSAEncryption
91:49:17:ab:80:c7:15:92:e3:c4:c3:7b:42:75:e7:fc:0c:e0:
23:67:a0:62:63:df:e4:f9:28:01:d5:2b:e7:e0:73:67:b4:94:
8a:ca:66:6c:93:65:4f:6e:8b:c9:0b:90:87:87:62:d5:bf:20:
53:9d:51:86:d9:14:a5:d5:c6:42:02:24:47:1e:0b:ca:05:96:
3d:71:bd:7d:4d:ba:19:02:68:df:45:ff:b8:0a:da:f4:ed:f9:
d3:dd:8b:1e:26:46:da:2e:d4:0b:c3:c3:40:af:c8:e8:c1:1b:
b3:e5:e2:0e:b7:11:0c:14:54:20:af:a4:72:49:78:7c:c9:29:
8f:88:51:52:0e:b3:9d:5d:55:46:46:8d:0a:ab:fb:ee:f9:f8:
1f:a7:c3:12:45:1d:df:0e:5e:52:74:49:5b:1d:6e:1a:e6:66:
16:e9:1b:29:2c:3c:e4:f4:9b:a4:d6:45:fa:4c:d1:df:ad:50:
32:ae:4c:23:51:86:4c:0e:16:a5:7a:77:c4:ba:d1:b1:f4:d3:
11:f9:a1:f0:e2:7b:68:24:45:b3:b0:a3:16:03:b1:3a:be:87:
87:b5:2f:eb:ed:46:54:be:19:c4:a4:88:59:2a:68:cf:22:e7:
20:db:2d:62:ce:05:cd:a3:5e:1b:06:51:33:17:13:fb:05:eb:
4f:0e:3e:db
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUWNUR54LJxXtQ0kUsQFVOTKFK9m4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxODA1MTBaFw0yNTA0MDMxODEwMTBaMDMxMTAvBgNV
BAMTKEM5QzhGRTRDNEI5NUFBODBEM0I3M0RDRDEzNkRBMUUxQjgzNjU2RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6YvzgWWxjzBgrQYyMIeuEws1u
8yM+QSVuu+x1SXJM2s5smeDPERfylzZZUDhAn3AWD/72zgNx4rDhc5lF+j44hqf5
4p4svjDebTNKQVgshdyhgVCimN5YHD4isVpWc8YEJQX+RmmX6w07ifkUkfL0eJDn
hpFax3m0Fxbb8exYpeXLjV5pB7WQ3Lan32aKE8ez9ChazzcC7BrRSon9PUEssqTn
sqXpAABljiOxUF1rrwhArEV7m4/GNKL4d6wn/L9YX0XnaWPFZvl2VZCIuZ5K3SW7
mJdBFiKqgWz0MVOj+ykPWsUWKJwUivcVRxpJXtIAfUPJ5eHCFrPipfaHMU7rAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTJyP5MS5WqgNO3
Pc0TbaHhuDZW2TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHBi
SzEzVHpxZFdLZlhwck1ESEh4OUtaQ0o2d3Z2WUcyR2ROdGZwZkRiWFAvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Rw
YksxM1R6cWRXS2ZYcHJNREhIeDlLWkNKNnd2dllHMkdkTnRmcGZEYlhQLzEvQzlD
OEZFNEM0Qjk1QUE4MEQzQjczRENEMTM2REExRTFCODM2NTZEOS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQBvX6IMA0EAgACMAcDBQAgARKkMBkGCCsGAQUFBwEI
AQH/BAowCKAGMAQCAm66MA0GCSqGSIb3DQEBCwUAA4IBAQCRSRergMcVkuPEw3tC
def8DOAjZ6BiY9/k+SgB1Svn4HNntJSKymZsk2VPbovJC5CHh2LVvyBTnVGG2RSl
1cZCAiRHHgvKBZY9cb19TboZAmjfRf+4Ctr07fnT3YseJkbaLtQLw8NAr8jowRuz
5eIOtxEMFFQgr6RySXh8ySmPiFFSDrOdXVVGRo0Kq/vu+fgfp8MSRR3fDl5SdElb
HW4a5mYW6RspLDzk9Juk1kX6TNHfrVAyrkwjUYZMDhalenfEutGx9NMR+aHw4nto
JEWzsKMWA7E6voeHtS/r7UZUvhnEpIhZKmjPIucg2y1izgXNo14bBlEzFxP7BetP
Dj7b
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:05:23 2025 by rpki-client