Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2.cer
File: 3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2.cer (raw, json)
Hash identifier: Dip7yaYiMmO0QHkT2NBCfvxLYaKS5Tr0CXcfMg9VnA8=
Subject key identifier: 32:11:CA:82:DA:F2:01:FF:0C:1B:58:4C:F7:EA:98:A1:B6:F0:EC:D2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 3434815A7D279E0848E0FD84023F2FB2F1D957F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2.mft
caRepository: rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 19 Dec 2023 12:42:35 +0000
Certificate not after: Tue 17 Dec 2024 12:47:35 +0000
Subordinate resources: AS: 263441
IP: 138.255.120.0/22
IP: 170.233.168.0/22
IP: 177.91.128.0/22
IP: 200.225.108.0/22
IP: 2804:11d0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:34:81:5a:7d:27:9e:08:48:e0:fd:84:02:3f:2f:b2:f1:d9:57:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Dec 19 12:42:35 2023 GMT
Not After : Dec 17 12:47:35 2024 GMT
Subject: CN=3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:65:34:47:f6:51:3e:d0:34:91:56:a7:61:3f:
c5:61:66:17:58:e7:0e:66:1e:34:53:90:50:0b:d6:
bf:3b:96:97:73:f5:64:16:83:6c:9c:d8:40:7c:df:
a2:f4:a3:23:53:f5:97:84:57:ff:07:1c:78:1e:2f:
ed:d7:90:4c:1e:a1:2e:13:fb:d9:6c:85:ce:4f:65:
fe:f5:22:30:6b:b5:40:73:af:89:c1:33:d4:b7:ba:
f5:52:0e:56:d5:99:2b:64:58:92:6a:84:64:12:65:
60:3a:83:01:90:10:1c:0e:92:79:9e:54:a5:3c:ba:
d8:cf:9e:ec:78:b5:0f:52:fa:64:e8:f0:9e:39:14:
83:b8:c6:e5:fa:a8:4f:4f:ae:3b:17:d9:5e:29:d7:
1e:8b:90:99:13:aa:e1:e6:ab:b8:b4:74:a1:32:b5:
8e:e1:07:47:8c:50:a4:55:28:3d:cc:d1:06:4c:9b:
ea:e2:35:6a:7e:56:43:0b:d0:10:8a:2f:a9:6c:9e:
04:53:c9:a7:03:84:c8:2e:e3:62:7a:0d:80:13:8a:
fa:fb:ed:1f:3e:a9:c6:04:3d:85:1a:76:7f:71:94:
62:60:0c:c0:dd:f9:49:22:45:b1:fe:57:fd:9e:66:
ef:9a:3a:3a:cf:d5:c9:8b:2c:5c:eb:3c:9b:19:5d:
6b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
32:11:CA:82:DA:F2:01:FF:0C:1B:58:4C:F7:EA:98:A1:B6:F0:EC:D2
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3211CA82DAF201FF0C1B584CF7EA98A1B6F0ECD2.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.120.0/22
170.233.168.0/22
177.91.128.0/22
200.225.108.0/22
IPv6:
2804:11d0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263441
Signature Algorithm: sha256WithRSAEncryption
26:3b:0a:ad:69:5a:e1:f2:14:d8:30:51:e8:45:38:59:f9:08:
a8:eb:79:41:06:d9:c2:51:b7:08:b8:0b:c0:f6:24:d4:f2:9e:
55:ca:c3:85:06:22:ea:d5:9a:8d:6a:37:7f:91:e9:67:9d:71:
bd:60:26:25:68:0c:75:bb:44:58:77:b5:72:01:52:15:d6:cb:
35:ed:a9:1e:c9:8c:f5:9b:d5:38:20:b9:66:39:14:60:1a:e8:
72:1a:32:fa:56:34:59:5e:f4:98:a9:e6:76:36:d5:95:d4:45:
fd:df:83:c0:25:c3:d9:51:dc:a0:b1:98:2f:99:f4:d6:0f:7e:
0a:65:0c:2d:3e:03:45:ca:24:d4:d9:13:88:37:1c:47:43:3d:
03:90:32:4d:81:be:87:73:c3:72:36:26:05:a0:f9:0a:e8:bb:
a4:02:0c:c2:f3:17:0e:be:31:13:08:79:56:71:7a:9d:8c:5c:
e9:1e:29:2f:63:87:9e:f2:97:02:b8:be:2a:69:83:64:19:46:
26:06:64:60:d9:fc:0a:bc:0a:67:23:59:af:4a:83:8c:cc:23:
d8:0f:00:0f:10:c0:3b:96:58:4f:ff:31:a5:b9:98:9a:5d:71:
84:89:fa:91:33:87:ce:b3:ca:25:c1:82:8e:5c:52:94:58:6c:
96:18:a2:26
-----BEGIN CERTIFICATE-----
MIIGIzCCBQugAwIBAgIUNDSBWn0nnghI4P2EAj8vsvHZV/gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMTkxMjQyMzVaFw0yNDEyMTcxMjQ3MzVaMDMxMTAvBgNV
BAMTKDMyMTFDQTgyREFGMjAxRkYwQzFCNTg0Q0Y3RUE5OEExQjZGMEVDRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKZTRH9lE+0DSRVqdhP8VhZhdY
5w5mHjRTkFAL1r87lpdz9WQWg2yc2EB836L0oyNT9ZeEV/8HHHgeL+3XkEweoS4T
+9lshc5PZf71IjBrtUBzr4nBM9S3uvVSDlbVmStkWJJqhGQSZWA6gwGQEBwOknme
VKU8utjPnux4tQ9S+mTo8J45FIO4xuX6qE9PrjsX2V4p1x6LkJkTquHmq7i0dKEy
tY7hB0eMUKRVKD3M0QZMm+riNWp+VkML0BCKL6lsngRTyacDhMgu42J6DYATivr7
7R8+qcYEPYUadn9xlGJgDMDd+UkiRbH+V/2eZu+aOjrP1cmLLFzrPJsZXWvTAgMB
AAGjggMtMIIDKTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQyEcqC2vIB/wwb
WEz36pihtvDs0jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GY3JpellWOVA2VEx3VHJobjlMOFpXUmt6d01YcTdQVWVm
QVdOTWIzdzV6ZC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRmNyaXpZVjlQNlRMd1RyaG45TDhaV1JrendNWHE3UFVl
ZkFXTk1iM3c1emQvMC8zMjExQ0E4MkRBRjIwMUZGMEMxQjU4NENGN0VBOThBMUI2
RjBFQ0QyLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAKK/3gDBAKq6agDBAKx
W4ADBALI4WwwDQQCAAIwBwMFACgEEdAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
BAURMA0GCSqGSIb3DQEBCwUAA4IBAQAmOwqtaVrh8hTYMFHoRThZ+Qio63lBBtnC
UbcIuAvA9iTU8p5VysOFBiLq1ZqNajd/kelnnXG9YCYlaAx1u0RYd7VyAVIV1ss1
7akeyYz1m9U4ILlmORRgGuhyGjL6VjRZXvSYqeZ2NtWV1EX934PAJcPZUdygsZgv
mfTWD34KZQwtPgNFyiTU2ROINxxHQz0DkDJNgb6Hc8NyNiYFoPkK6LukAgzC8xcO
vjETCHlWcXqdjFzpHikvY4ee8pcCuL4qaYNkGUYmBmRg2fwKvApnI1mvSoOMzCPY
DwAPEMA7llhP/zGluZiaXXGEifqRM4fOs8olwYKOXFKUWGyWGKIm
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org