Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2CEE2DD5B785A4A3E2BCF7C2B954050AD9152E15.cer
File: 2CEE2DD5B785A4A3E2BCF7C2B954050AD9152E15.cer (raw, json)
Hash identifier: Y+EQKjmsEwfv5XhWV5CwVwwiSR2gxLPmvzZg9mef6Og=
Subject key identifier: 2C:EE:2D:D5:B7:85:A4:A3:E2:BC:F7:C2:B9:54:05:0A:D9:15:2E:15
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 5CFAFAD09B5BB8DA1EFDE3512E23B6C76CA5E5B2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/0/2CEE2DD5B785A4A3E2BCF7C2B954050AD9152E15.mft
caRepository: rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 30 Mar 2023 17:21:01 +0000
Certificate not after: Thu 28 Mar 2024 17:26:01 +0000
Subordinate resources: AS: 11993
IP: 170.66.0.0/16
IP: 198.184.161.0/24
IP: 201.33.144.0/20
IP: 2801:8e::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:fa:fa:d0:9b:5b:b8:da:1e:fd:e3:51:2e:23:b6:c7:6c:a5:e5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Mar 30 17:21:01 2023 GMT
Not After : Mar 28 17:26:01 2024 GMT
Subject: CN=2CEE2DD5B785A4A3E2BCF7C2B954050AD9152E15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:29:25:e8:88:3b:12:95:83:c4:e8:e4:1c:39:
7b:3c:49:d3:a8:68:84:26:8d:b5:b7:bb:6c:45:47:
8f:03:11:75:b8:84:d5:c1:b7:d2:66:d4:d1:93:91:
85:70:fc:7e:63:b3:36:5b:11:54:6c:50:b0:da:5c:
01:d1:2c:73:b2:35:c1:5a:86:31:30:0a:d2:ea:84:
7c:67:51:cc:37:23:0d:85:af:b5:84:72:22:10:3e:
df:2b:a3:3e:2f:fa:c7:e9:9f:4a:d8:d7:d5:ee:73:
fa:b2:fb:5b:d2:48:ee:7d:a9:77:95:20:3b:63:09:
ce:c6:80:55:a9:60:b0:ed:6b:fa:71:c3:77:ed:e7:
d1:cc:d7:08:7e:ac:a2:c7:b1:e3:94:5c:1f:b4:16:
46:cb:92:03:58:f1:61:7d:89:3d:ba:94:f7:52:62:
ed:2d:31:6a:9b:75:99:94:0e:2d:26:75:73:52:8f:
39:d6:0f:eb:95:d7:60:ee:02:ee:79:35:1e:a8:e6:
ee:d1:bd:8d:1d:01:b1:2c:f3:1e:c4:8a:5a:0b:e6:
e9:a0:f8:ed:21:0f:64:75:e1:1f:5e:8c:39:82:fc:
b9:56:73:c8:c8:a3:1e:fa:3d:b3:1e:36:b4:0a:19:
5a:77:00:bd:19:db:36:80:f5:c7:21:60:8c:5a:cc:
de:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2C:EE:2D:D5:B7:85:A4:A3:E2:BC:F7:C2:B9:54:05:0A:D9:15:2E:15
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/0/2CEE2DD5B785A4A3E2BCF7C2B954050AD9152E15.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.66.0.0/16
198.184.161.0/24
201.33.144.0/20
IPv6:
2801:8e::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11993
Signature Algorithm: sha256WithRSAEncryption
88:0d:ad:da:14:6b:a3:86:a9:d3:72:99:5f:b1:30:03:5f:12:
f7:f1:5c:f5:b3:26:3b:a9:20:de:e8:dc:36:88:da:34:ba:8b:
8f:a0:a2:65:09:d7:dd:c9:bb:e5:74:31:89:ac:45:5d:d3:8a:
37:ad:7d:4e:6e:29:3f:c5:45:b3:a3:26:47:a1:92:0f:07:ff:
8c:a6:55:a7:ba:18:73:b0:69:2d:7d:8c:c5:0a:cf:65:3c:3f:
20:80:3a:cc:1b:29:0d:ad:fc:67:44:5b:6b:4d:0e:c9:e1:3f:
65:2b:35:d0:57:b0:d8:c4:7e:2a:83:b6:69:50:4c:2f:e2:b7:
0f:7d:0e:cb:95:89:98:d4:3d:0d:94:d4:cb:cf:08:17:71:41:
cd:c6:c0:d5:67:ff:ea:2c:01:f2:3b:f5:40:6b:c2:9a:6b:65:
d1:b5:c3:57:c1:08:88:e1:c5:da:48:cf:f2:17:68:98:5e:2b:
25:f4:4d:9b:cd:49:5e:f3:87:e9:97:e1:13:3f:82:7f:d2:4f:
4f:b4:8f:17:a7:46:7e:37:dd:c4:37:7d:16:ba:97:6d:af:ed:
e4:4f:14:9e:ba:a2:9d:e3:87:c5:b3:71:22:9e:fd:4b:21:4a:
05:a5:cc:af:a7:3c:2d:db:ed:41:2c:29:21:3e:75:3d:fc:f6:
2f:2c:45:64
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIUXPr60JtbuNoe/eNRLiO2x2yl5bIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMzAxNzIxMDFaFw0yNDAzMjgxNzI2MDFaMDMxMTAvBgNV
BAMTKDJDRUUyREQ1Qjc4NUE0QTNFMkJDRjdDMkI5NTQwNTBBRDkxNTJFMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+KSXoiDsSlYPE6OQcOXs8SdOo
aIQmjbW3u2xFR48DEXW4hNXBt9Jm1NGTkYVw/H5jszZbEVRsULDaXAHRLHOyNcFa
hjEwCtLqhHxnUcw3Iw2Fr7WEciIQPt8roz4v+sfpn0rY19Xuc/qy+1vSSO59qXeV
IDtjCc7GgFWpYLDta/pxw3ft59HM1wh+rKLHseOUXB+0FkbLkgNY8WF9iT26lPdS
Yu0tMWqbdZmUDi0mdXNSjznWD+uV12DuAu55NR6o5u7RvY0dAbEs8x7EiloL5umg
+O0hD2R14R9ejDmC/LlWc8jIox76PbMeNrQKGVp3AL0Z2zaA9cchYIxazN7PAgMB
AAGjggMkMIIDIDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQs7i3Vt4Wko+K8
98K5VAUK2RUuFTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80S3M3TGZZcHd3eUNqUllSTVFta0NDSjIyNjdkWjVja2hl
VjdIS1JSUkVKWS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80S3M3TGZZcHd3eUNqUllSTVFta0NDSjIyNjdkWjVja2hl
VjdIS1JSUkVKWS8wLzJDRUUyREQ1Qjc4NUE0QTNFMkJDRjdDMkI5NTQwNTBBRDkx
NTJFMTUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA5BggrBgEFBQcBBwEB/wQqMCgwFwQCAAEwEQMDAKpCAwQAxrihAwQEySGQ
MA0EAgACMAcDBQAoAQCOMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAi7ZMA0GCSqG
SIb3DQEBCwUAA4IBAQCIDa3aFGujhqnTcplfsTADXxL38Vz1syY7qSDe6Nw2iNo0
uouPoKJlCdfdybvldDGJrEVd04o3rX1Obik/xUWzoyZHoZIPB/+MplWnuhhzsGkt
fYzFCs9lPD8ggDrMGykNrfxnRFtrTQ7J4T9lKzXQV7DYxH4qg7ZpUEwv4rcPfQ7L
lYmY1D0NlNTLzwgXcUHNxsDVZ//qLAHyO/VAa8Kaa2XRtcNXwQiI4cXaSM/yF2iY
Xisl9E2bzUle84fpl+ETP4J/0k9PtI8Xp0Z+N93EN30Wupdtr+3kTxSeuqKd44fF
s3Einv1LIUoFpcyvpzwt2+1BLCkhPnU9/PYvLEVk
-----END CERTIFICATE-----
Generated at Tue Apr 22 23:29:03 2025 by rpki-client