Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.cer
File: 420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.cer (raw, json)
Hash identifier: QVVjUZh7TlqOmmeW6/49fhGnTPOnpRLQkCSltAG3KOs=
Subject key identifier: 42:07:34:A5:28:D0:DD:1E:A0:9F:6B:B5:91:E3:B0:23:ED:B9:ED:DA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 14D7C9EBB6C788FD6ADB23AC31C682515214C39A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.mft
caRepository: rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 05 Sep 2023 13:59:28 +0000
Certificate not after: Tue 03 Sep 2024 14:04:28 +0000
Subordinate resources: AS: 268616
IP: 45.164.128.0/22
IP: 2804:53ec::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:d7:c9:eb:b6:c7:88:fd:6a:db:23:ac:31:c6:82:51:52:14:c3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Sep 5 13:59:28 2023 GMT
Not After : Sep 3 14:04:28 2024 GMT
Subject: CN=420734A528D0DD1EA09F6BB591E3B023EDB9EDDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:07:e0:68:cf:36:5c:5b:59:f5:e1:ad:fa:
79:70:17:44:92:14:46:70:e5:4a:9c:f5:11:81:be:
bd:81:8f:6e:1d:e2:ed:d5:86:50:95:9a:45:5c:fd:
f3:0e:01:2c:ec:03:6c:18:bd:0c:ec:54:aa:f7:d5:
9a:18:ce:87:ed:de:c4:95:29:a7:7e:64:a1:3d:dd:
3a:f9:f3:ce:5f:06:00:c5:09:42:bd:bc:e4:9a:0b:
33:8a:64:20:60:8c:3f:ef:32:52:c3:ed:0a:df:01:
36:7f:09:85:26:57:1e:c0:5c:ca:ad:da:13:fa:a9:
f9:ba:68:df:a7:9d:b9:ef:4c:14:51:46:d2:f8:19:
99:ec:15:06:ee:55:02:58:80:f6:48:1d:dc:a0:28:
d2:ae:ff:94:e6:db:06:e2:97:db:3f:76:38:f3:1e:
b7:80:a4:97:d4:d0:8d:b1:40:b8:e3:b9:df:a6:86:
08:8b:7a:fb:9d:41:34:3e:54:9b:74:e5:b2:ac:2d:
be:95:28:f6:48:59:9a:69:de:36:d1:f8:a0:74:07:
a5:a2:39:fb:24:b7:06:a8:15:aa:9e:23:7c:4a:05:
e7:4b:5a:34:84:7f:07:cf:a0:a3:56:81:a8:53:f4:
b9:9b:3a:2a:bc:13:c1:42:4d:22:f5:72:7b:f5:78:
29:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
42:07:34:A5:28:D0:DD:1E:A0:9F:6B:B5:91:E3:B0:23:ED:B9:ED:DA
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.164.128.0/22
IPv6:
2804:53ec::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268616
Signature Algorithm: sha256WithRSAEncryption
16:96:be:36:73:eb:9f:84:90:88:61:bc:ee:ca:bd:e1:d6:75:
db:c8:53:7e:fb:ce:49:15:8d:95:df:f7:d3:4e:13:86:a6:d7:
fe:88:56:de:de:af:7c:7b:84:80:b2:ae:c1:de:a9:96:98:86:
7e:f7:3e:41:76:7a:df:3c:d3:d3:ac:12:cf:b1:26:44:8b:f1:
d1:e6:eb:da:0a:15:36:f3:07:31:95:bf:b5:8f:87:49:04:ea:
82:ea:3c:33:9a:29:8d:72:62:1a:0c:2f:aa:36:fb:01:16:ca:
33:20:93:4e:71:be:08:d1:c3:2a:07:e4:f7:d5:fc:bc:83:fc:
09:cc:76:e9:c0:90:90:69:42:b4:cf:7c:9b:f8:91:4f:ae:cb:
c2:e3:85:9a:b8:d8:de:d1:d5:17:23:f1:64:64:6c:70:8a:81:
b9:4b:7e:a0:14:4e:5f:43:e8:0b:98:5a:03:56:1d:70:b6:b1:
03:ee:f3:f9:a6:09:46:ec:cc:00:8f:de:df:71:dc:10:d1:b6:
33:c8:18:00:bd:e0:f6:ae:a9:52:f3:a4:24:a6:8b:48:00:50:
a2:23:11:49:6e:34:74:02:35:75:92:1a:b0:8e:55:46:1d:1a:
5c:58:c0:53:f6:96:99:ed:9a:dd:17:86:df:0f:5a:20:b8:a8:
5c:f7:59:c5
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUFNfJ67bHiP1q2yOsMcaCUVIUw5owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MDUxMzU5MjhaFw0yNDA5MDMxNDA0MjhaMDMxMTAvBgNV
BAMTKDQyMDczNEE1MjhEMEREMUVBMDlGNkJCNTkxRTNCMDIzRURCOUVEREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyhgfgaM82XFtZ9eGt+nlwF0SS
FEZw5Uqc9RGBvr2Bj24d4u3VhlCVmkVc/fMOASzsA2wYvQzsVKr31ZoYzoft3sSV
Kad+ZKE93Tr5885fBgDFCUK9vOSaCzOKZCBgjD/vMlLD7QrfATZ/CYUmVx7AXMqt
2hP6qfm6aN+nnbnvTBRRRtL4GZnsFQbuVQJYgPZIHdygKNKu/5Tm2wbil9s/djjz
HreApJfU0I2xQLjjud+mhgiLevudQTQ+VJt05bKsLb6VKPZIWZpp3jbR+KB0B6Wi
OfsktwaoFaqeI3xKBedLWjSEfwfPoKNWgahT9LmbOiq8E8FCTSL1cnv1eCl3AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRCBzSlKNDdHqCf
a7WR47Aj7bnt2jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81ZzNuSEU0czRBeXhMTTFFamtqTjF0emMyb01vaTVZOVg0
bUtVZ2RuVlQ5Yy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNWczbkhFNHM0QXl4TE0xRWprak4xdHpjMm9Nb2k1WTlY
NG1LVWdkblZUOWMvMC80MjA3MzRBNTI4RDBERDFFQTA5RjZCQjU5MUUzQjAyM0VE
QjlFRERBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItpIAwDQQCAAIwBwMF
ACgEU+wwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBlIMA0GCSqGSIb3DQEBCwUA
A4IBAQAWlr42c+ufhJCIYbzuyr3h1nXbyFN++85JFY2V3/fTThOGptf+iFbe3q98
e4SAsq7B3qmWmIZ+9z5BdnrfPNPTrBLPsSZEi/HR5uvaChU28wcxlb+1j4dJBOqC
6jwzmimNcmIaDC+qNvsBFsozIJNOcb4I0cMqB+T31fy8g/wJzHbpwJCQaUK0z3yb
+JFPrsvC44WauNje0dUXI/FkZGxwioG5S36gFE5fQ+gLmFoDVh1wtrED7vP5pglG
7MwAj97fcdwQ0bYzyBgAveD2rqlS86QkpotIAFCiIxFJbjR0AjV1khqwjlVGHRpc
WMBT9paZ7ZrdF4bfD1oguKhc91nF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org