Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/432A4804EE3C7AD366295759AA7AD69DA8653366.cer
File: 432A4804EE3C7AD366295759AA7AD69DA8653366.cer (raw, json)
Hash identifier: be3283YKl5OBIOIxGE9mnerSNhfWtizrbQYvNlCIffk=
Subject key identifier: 43:2A:48:04:EE:3C:7A:D3:66:29:57:59:AA:7A:D6:9D:A8:65:33:66
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 6868407D0D28CAE53B0E01790B76C01DD09606AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/432A4804EE3C7AD366295759AA7AD69DA8653366.mft
caRepository: rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 07 Mar 2024 22:16:05 +0000
Certificate not after: Thu 06 Mar 2025 22:21:05 +0000
Subordinate resources: AS: 264281
IP: 138.121.52.0/22
IP: 170.233.172.0/22
IP: 170.244.12.0/22
IP: 2804:2570::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:68:40:7d:0d:28:ca:e5:3b:0e:01:79:0b:76:c0:1d:d0:96:06:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Mar 7 22:16:05 2024 GMT
Not After : Mar 6 22:21:05 2025 GMT
Subject: CN=432A4804EE3C7AD366295759AA7AD69DA8653366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:77:09:c8:c4:59:73:1f:4d:04:a1:13:55:
fd:ad:c4:2e:da:9a:eb:ff:4c:32:ac:5d:85:9a:5b:
71:ab:30:eb:df:28:c0:ca:a2:b0:ef:61:c2:0f:9a:
3c:78:0a:e5:f6:8b:63:81:1f:63:03:b0:0c:cf:60:
68:ff:97:04:5d:e1:2e:c0:fe:b4:87:07:89:b8:dc:
0c:46:41:73:52:fa:ff:10:89:9e:3d:ac:2a:fc:8e:
6b:85:e0:32:4f:85:87:80:16:4a:cb:db:51:ea:9d:
3b:df:24:ba:88:71:61:cc:9f:1d:cd:79:3b:74:ec:
a9:b2:75:89:e8:e7:05:06:3b:e8:96:67:2f:45:23:
a1:bc:d4:cd:c3:6f:21:81:8a:ef:fc:00:77:4d:4c:
79:97:e5:29:b4:64:64:0d:ea:10:05:50:e5:77:4c:
47:0c:76:6d:c6:12:ad:3d:fa:06:11:1b:a5:59:87:
15:5f:64:0d:5a:b8:aa:99:31:2f:76:fc:09:cf:79:
1b:0f:3e:e4:6e:9a:e1:a1:0a:ca:53:95:4d:61:8a:
e1:ed:42:d0:39:63:ce:c4:6d:52:08:fa:d1:63:0e:
10:4a:a2:0c:c6:bb:9f:5b:2d:1f:50:93:52:de:8e:
8d:df:1b:1e:6d:80:ab:13:61:a2:92:ba:51:b4:b5:
bd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
43:2A:48:04:EE:3C:7A:D3:66:29:57:59:AA:7A:D6:9D:A8:65:33:66
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/432A4804EE3C7AD366295759AA7AD69DA8653366.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.52.0/22
170.233.172.0/22
170.244.12.0/22
IPv6:
2804:2570::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264281
Signature Algorithm: sha256WithRSAEncryption
5b:ca:6f:0c:d9:7a:9e:f8:50:d9:3c:75:9e:a8:95:f4:65:b9:
7f:7c:ee:ec:13:4b:11:e9:af:fe:5f:01:06:9f:03:48:76:cd:
51:66:10:5b:59:e9:24:a6:78:ca:55:d9:52:ad:36:04:86:f7:
d2:98:c4:5e:9e:1e:e6:b9:cd:88:83:33:08:86:ec:e6:50:e3:
87:e0:d2:1f:0a:ef:05:2d:02:7b:f0:2a:4f:6f:74:12:57:a0:
7c:e7:70:2b:1b:c1:7e:7a:2c:a0:4b:17:ee:ac:a0:43:aa:7a:
a7:07:45:d2:e1:0d:c1:5e:8e:54:f6:f9:2c:3f:cd:fe:0c:33:
7b:bd:ca:9a:bc:d4:79:f2:d9:a6:41:a6:d9:c5:78:73:d1:a3:
cd:83:68:7c:be:5f:eb:92:76:fd:56:6a:1c:cf:0b:56:2e:67:
dd:17:ef:c7:02:8e:84:54:65:f9:90:e8:01:56:cb:02:31:b5:
ba:da:b1:23:5e:93:78:84:03:6c:f0:f2:f4:35:73:e2:dd:00:
bb:33:64:d9:7e:a5:92:10:6d:c8:17:c6:e6:39:cb:a4:0b:d4:
14:fb:c8:ba:2c:c7:b4:a0:84:5c:df:b3:ae:32:92:92:1f:87:
a0:4d:a2:94:27:74:53:e0:61:6e:0a:8b:2b:e5:88:7c:21:6a:
76:a6:d7:b0
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIUaGhAfQ0oyuU7DgF5C3bAHdCWBq0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMDcyMjE2MDVaFw0yNTAzMDYyMjIxMDVaMDMxMTAvBgNV
BAMTKDQzMkE0ODA0RUUzQzdBRDM2NjI5NTc1OUFBN0FENjlEQTg2NTMzNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI5ncJyMRZcx9NBKETVf2txC7a
muv/TDKsXYWaW3GrMOvfKMDKorDvYcIPmjx4CuX2i2OBH2MDsAzPYGj/lwRd4S7A
/rSHB4m43AxGQXNS+v8QiZ49rCr8jmuF4DJPhYeAFkrL21HqnTvfJLqIcWHMnx3N
eTt07KmydYno5wUGO+iWZy9FI6G81M3DbyGBiu/8AHdNTHmX5Sm0ZGQN6hAFUOV3
TEcMdm3GEq09+gYRG6VZhxVfZA1auKqZMS92/AnPeRsPPuRumuGhCspTlU1hiuHt
QtA5Y87EbVII+tFjDhBKogzGu59bLR9Qk1Lejo3fGx5tgKsTYaKSulG0tb3LAgMB
AAGjggMnMIIDIzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRDKkgE7jx602Yp
V1mqetadqGUzZjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80OU1XSFNQR2pRZVVuVG5TYnk4bnJrdHdKbVdWZWZmaTlp
V2k0anFuelFXMi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNDlNV0hTUEdqUWVVblRuU2J5OG5ya3R3Sm1XVmVmZmk5
aVdpNGpxbnpRVzIvMC80MzJBNDgwNEVFM0M3QUQzNjYyOTU3NTlBQTdBRDY5REE4
NjUzMzY2Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAKKeTQDBAKq6awDBAKq
9AwwDQQCAAIwBwMFACgEJXAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAhZMA0G
CSqGSIb3DQEBCwUAA4IBAQBbym8M2Xqe+FDZPHWeqJX0Zbl/fO7sE0sR6a/+XwEG
nwNIds1RZhBbWekkpnjKVdlSrTYEhvfSmMRenh7muc2IgzMIhuzmUOOH4NIfCu8F
LQJ78CpPb3QSV6B853ArG8F+eiygSxfurKBDqnqnB0XS4Q3BXo5U9vksP83+DDN7
vcqavNR58tmmQabZxXhz0aPNg2h8vl/rknb9VmoczwtWLmfdF+/HAo6EVGX5kOgB
VssCMbW62rEjXpN4hANs8PL0NXPi3QC7M2TZfqWSEG3IF8bmOcukC9QU+8i6LMe0
oIRc37OuMpKSH4egTaKUJ3RT4GFuCosr5Yh8IWp2ptew
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org