Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer
File: 0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer (raw, json)
Hash identifier: 40HPSkjCatyO5rC7akQAqATbTzG7xMTEerpJ3fUgJ64=
Subject key identifier: 0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 6E9AFEDB821F0DB8CCCC67B1B0DFFD5202E0F51D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.mft
caRepository: rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 27 Jan 2024 23:06:14 +0000
Certificate not after: Sat 25 Jan 2025 23:11:14 +0000
Subordinate resources: AS: 52873
IP: 138.219.244.0/22
IP: 177.128.208.0/21
IP: 200.229.220.0/22
IP: 2804:890::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:9a:fe:db:82:1f:0d:b8:cc:cc:67:b1:b0:df:fd:52:02:e0:f5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Jan 27 23:06:14 2024 GMT
Not After : Jan 25 23:11:14 2025 GMT
Subject: CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:94:e4:0e:f0:1c:2a:5a:b1:e2:97:ff:99:
4d:e8:7c:81:b5:2e:7a:a6:77:ae:ad:f2:96:78:42:
72:49:78:4b:02:b9:bf:d7:29:ae:74:25:3c:2c:e8:
f2:33:7d:4a:27:3f:e3:f1:ba:38:b4:4c:c3:62:2e:
f3:40:9a:6b:14:f3:b6:4b:2d:c5:a4:44:22:11:6a:
c7:5b:22:d2:8e:8c:cb:fb:29:f1:7a:80:f7:0c:71:
b8:2d:19:1c:a4:27:36:84:11:0a:a3:0c:16:fc:61:
64:43:f8:45:fb:7b:93:22:df:58:3f:67:50:73:40:
d8:7b:42:6f:c0:20:af:61:88:c5:78:0c:d0:0e:01:
14:30:02:50:2d:f6:90:fb:8b:49:9b:7e:95:b9:05:
8b:d4:34:1b:15:7c:08:7c:60:2b:4d:22:fe:1a:28:
22:a3:8c:0a:99:22:5c:27:e7:68:1e:14:f0:2e:ea:
6e:b7:d1:64:ff:48:e5:b0:66:ad:52:ab:a9:cc:0d:
45:5c:da:13:b1:49:54:a4:73:59:8d:02:7e:75:83:
1c:c2:44:a2:e6:88:56:5a:33:f2:2f:f4:ab:ca:b1:
5b:64:b0:4e:04:3f:de:5c:54:6b:ea:13:57:2a:2d:
13:91:7b:7b:f0:b9:f3:b8:73:f4:9c:19:24:0f:9b:
91:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.244.0/22
177.128.208.0/21
200.229.220.0/22
IPv6:
2804:890::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52873
Signature Algorithm: sha256WithRSAEncryption
a3:7e:87:32:e0:5f:b7:e2:a2:9c:c5:48:d2:51:11:90:c6:96:
fb:25:fe:4d:16:44:3a:79:ce:fd:6c:75:44:e5:58:68:e2:87:
1f:62:0c:6a:e8:24:4d:d9:2b:9c:e9:93:33:ea:d4:f9:8c:33:
71:0a:b8:92:99:fa:23:63:b3:e9:6a:30:13:b7:74:5d:c5:d3:
f2:3b:0c:5b:8f:c9:4f:67:af:37:16:3f:f3:d2:8a:db:f8:88:
8c:5b:61:90:cc:6d:4a:b6:52:00:e7:cf:88:32:9e:89:f6:f9:
77:88:ac:66:ab:bb:a7:a0:de:cf:6d:d9:42:fc:4a:6b:64:d5:
9f:dc:5f:af:3c:06:b4:7a:36:74:1e:05:e2:cf:c9:87:21:17:
e0:09:60:4f:e5:8e:1e:a1:e7:5f:14:b3:02:cb:c8:24:e3:60:
d5:66:d5:02:c0:65:20:7b:44:0c:d8:5d:5a:db:82:34:f1:df:
c1:79:8e:d5:be:79:32:da:af:77:30:97:c6:39:ad:c1:84:6d:
66:49:45:12:5f:af:18:ea:55:fe:e8:77:8d:5b:a2:44:89:29:
bf:64:6c:d4:0c:a9:3f:0b:cd:20:74:30:be:33:07:55:18:98:
7b:2f:dc:ec:ce:e2:24:66:15:4b:80:83:fb:3a:3b:8a:8b:82:
2f:1d:35:32
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIUbpr+24IfDbjMzGexsN/9UgLg9R0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMjcyMzA2MTRaFw0yNTAxMjUyMzExMTRaMDMxMTAvBgNV
BAMTKDBEOUVBQ0RBODFGOURGOTA3RTJFRUZDRTBDQTZCNDE0M0U0RkZFMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnSJTkDvAcKlqx4pf/mU3ofIG1
Lnqmd66t8pZ4QnJJeEsCub/XKa50JTws6PIzfUonP+Pxuji0TMNiLvNAmmsU87ZL
LcWkRCIRasdbItKOjMv7KfF6gPcMcbgtGRykJzaEEQqjDBb8YWRD+EX7e5Mi31g/
Z1BzQNh7Qm/AIK9hiMV4DNAOARQwAlAt9pD7i0mbfpW5BYvUNBsVfAh8YCtNIv4a
KCKjjAqZIlwn52geFPAu6m630WT/SOWwZq1Sq6nMDUVc2hOxSVSkc1mNAn51gxzC
RKLmiFZaM/Iv9KvKsVtksE4EP95cVGvqE1cqLRORe3vwufO4c/ScGSQPm5HtAgMB
AAGjggMnMIIDIzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNnqzagfnfkH4u
784MprQUPk/+GDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Eb2p1OEZMbWNpSEdCRTdTUVlnanA0OXluSFp1ZFJSWE45
MVFWUnU0bkd5RS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRG9qdThGTG1jaUhHQkU3U1FZZ2pwNDl5bkhadWRSUlhO
OTFRVlJ1NG5HeUUvMC8wRDlFQUNEQTgxRjlERjkwN0UyRUVGQ0UwQ0E2QjQxNDNF
NEZGRTE4Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAKK2/QDBAOxgNADBALI
5dwwDQQCAAIwBwMFACgECJAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAM6JMA0G
CSqGSIb3DQEBCwUAA4IBAQCjfocy4F+34qKcxUjSURGQxpb7Jf5NFkQ6ec79bHVE
5Vho4ocfYgxq6CRN2Suc6ZMz6tT5jDNxCriSmfojY7PpajATt3RdxdPyOwxbj8lP
Z683Fj/z0orb+IiMW2GQzG1KtlIA58+IMp6J9vl3iKxmq7unoN7PbdlC/EprZNWf
3F+vPAa0ejZ0HgXiz8mHIRfgCWBP5Y4eoedfFLMCy8gk42DVZtUCwGUge0QM2F1a
24I08d/BeY7Vvnky2q93MJfGOa3BhG1mSUUSX68Y6lX+6HeNW6JEiSm/ZGzUDKk/
C80gdDC+MwdVGJh7L9zszuIkZhVLgIP7OjuKi4IvHTUy
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org