Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5BFC39650228FBA6E4AB02D4FBE650F085BBDE86.cer
File: 5BFC39650228FBA6E4AB02D4FBE650F085BBDE86.cer (raw, json)
Hash identifier: cG1m9ftn8V8BUdwElV1cWcQC2z7JAry+LYCTh4ecruQ=
Subject key identifier: 5B:FC:39:65:02:28:FB:A6:E4:AB:02:D4:FB:E6:50:F0:85:BB:DE:86
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 7C5ED18CFD951406497E7F59E8953EC7C4C0EB91
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/0/5BFC39650228FBA6E4AB02D4FBE650F085BBDE86.mft
caRepository: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 14 Apr 2023 18:21:34 +0000
Certificate not after: Fri 12 Apr 2024 18:26:34 +0000
Subordinate resources: AS: 53062
IP: 45.7.128.0/22
IP: 168.90.168.0/22
IP: 170.150.236.0/22
IP: 177.36.176.0/20
IP: 177.75.160.0/20
IP: 177.155.128.0/20
IP: 186.211.96.0/20
IP: 187.85.144.0/20
IP: 2804:3b0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:5e:d1:8c:fd:95:14:06:49:7e:7f:59:e8:95:3e:c7:c4:c0:eb:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Apr 14 18:21:34 2023 GMT
Not After : Apr 12 18:26:34 2024 GMT
Subject: CN=5BFC39650228FBA6E4AB02D4FBE650F085BBDE86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:00:b3:10:39:69:79:af:ea:9c:bb:8e:4f:
f9:0c:f2:13:d0:33:3c:24:97:f2:ca:ea:58:c8:58:
9c:80:cf:8d:65:f3:2e:f6:54:62:30:5e:21:62:1f:
bb:d1:e9:41:79:fd:94:d8:14:46:e3:3b:87:72:26:
f0:e5:e9:54:6c:86:d8:5d:8d:8a:45:7c:45:0b:aa:
b4:6b:c0:64:d2:f9:98:cb:bb:ac:cc:aa:2d:4a:81:
ee:82:17:7a:89:92:4e:71:ad:d1:a9:d5:b9:63:a2:
ac:3b:6d:e9:ff:e9:2a:87:dc:41:bb:c8:25:20:27:
c2:70:37:bf:75:8a:dd:2b:b4:36:ff:f3:a5:32:92:
5f:f0:6d:a9:45:48:34:47:df:41:f9:70:41:d4:be:
4a:7e:ce:a5:47:b6:a6:54:c5:37:44:48:b0:d0:c6:
43:13:c5:c8:97:26:ac:a0:3b:20:7b:b3:4d:e5:4c:
93:fe:e6:9e:45:83:e0:f0:1f:b0:82:3f:cd:8c:bf:
96:24:bc:e8:02:5b:70:d1:80:5c:f7:1f:93:b4:fb:
7b:ec:9c:a5:c3:2a:e4:0c:66:a6:62:22:17:dd:d3:
68:92:aa:7e:e9:bf:46:1f:a8:0c:6d:a3:6e:d4:9a:
b2:fb:1b:21:5a:74:8b:fb:f1:15:92:45:09:3d:5c:
9d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5B:FC:39:65:02:28:FB:A6:E4:AB:02:D4:FB:E6:50:F0:85:BB:DE:86
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/0/5BFC39650228FBA6E4AB02D4FBE650F085BBDE86.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.128.0/22
168.90.168.0/22
170.150.236.0/22
177.36.176.0/20
177.75.160.0/20
177.155.128.0/20
186.211.96.0/20
187.85.144.0/20
IPv6:
2804:3b0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
53062
Signature Algorithm: sha256WithRSAEncryption
aa:84:88:f5:8e:fe:7c:00:e5:8d:fa:66:be:de:bb:86:92:9f:
20:28:f4:9a:ad:13:34:0d:20:8c:14:b8:74:80:bb:a6:71:c9:
90:0e:b5:5a:db:ce:56:cf:9d:64:ec:1d:39:13:b9:b4:94:89:
4e:6d:f3:e0:5a:ca:c1:16:80:24:db:33:e2:5b:ba:97:01:93:
4a:3b:58:47:8e:5b:aa:8d:a3:8f:c9:46:5e:f2:13:03:7c:37:
b3:0d:92:2d:97:5d:74:f1:2b:16:0f:5e:09:eb:8a:31:52:d6:
b4:2b:d5:e3:13:60:81:4e:41:99:0f:00:c4:f0:9c:f6:11:8f:
69:9f:38:5c:df:bf:b7:a2:51:fb:a4:06:0b:94:58:23:2f:91:
7f:75:ee:5e:f5:6a:9c:2f:6b:ab:f3:8c:69:d9:d5:94:58:1c:
ee:0b:20:00:17:68:24:21:70:f2:13:bf:f5:c2:e8:ef:1b:dc:
60:dc:d1:6c:26:74:69:af:16:b0:f9:a2:e6:9b:f5:c0:73:09:
0d:9c:96:c5:ff:ca:4a:a4:3a:e7:64:37:d0:f2:00:b3:1d:63:
56:2b:70:ea:a8:c6:0e:25:f6:8a:35:16:9c:46:95:5b:5d:be:
2a:56:8a:b7:02:27:e7:6b:48:ce:47:1d:3e:e3:60:48:e7:35:
63:67:dd:b1
-----BEGIN CERTIFICATE-----
MIIGODCCBSCgAwIBAgIUfF7RjP2VFAZJfn9Z6JU+x8TA65EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA0MTQxODIxMzRaFw0yNDA0MTIxODI2MzRaMDMxMTAvBgNV
BAMTKDVCRkMzOTY1MDIyOEZCQTZFNEFCMDJENEZCRTY1MEYwODVCQkRFODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9tACzEDlpea/qnLuOT/kM8hPQ
Mzwkl/LK6ljIWJyAz41l8y72VGIwXiFiH7vR6UF5/ZTYFEbjO4dyJvDl6VRshthd
jYpFfEULqrRrwGTS+ZjLu6zMqi1Kge6CF3qJkk5xrdGp1bljoqw7ben/6SqH3EG7
yCUgJ8JwN791it0rtDb/86Uykl/wbalFSDRH30H5cEHUvkp+zqVHtqZUxTdESLDQ
xkMTxciXJqygOyB7s03lTJP+5p5Fg+DwH7CCP82Mv5YkvOgCW3DRgFz3H5O0+3vs
nKXDKuQMZqZiIhfd02iSqn7pv0YfqAxto27UmrL7GyFadIv78RWSRQk9XJ1HAgMB
AAGjggNCMIIDPjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRb/DllAij7puSr
AtT75lDwhbvehjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPQYIKwYB
BQUHAQsEggEvMIIBKzBcBggrBgEFBQcwBYZQcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FaGdEV0FBWjc0alloMTlMVTZ2N0FScVN4TlY0anZkRWlE
Rlc5Mjl3dXZwLzAwgYkGCCsGAQUFBzAKhn1yc3luYzovL3Jwa2ktcmVwby5yZWdp
c3Ryby5ici9yZXBvL0VoZ0RXQUFaNzRqWWgxOUxVNnY3QVJxU3hOVjRqdmRFaURG
VzkyOXd1dnAvMC81QkZDMzk2NTAyMjhGQkE2RTRBQjAyRDRGQkU2NTBGMDg1QkJE
RTg2Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8u
YnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwWAYIKwYBBQUHAQcBAf8ESTBHMDYEAgABMDADBAItB4ADBAKoWqgDBAKqluwD
BASxJLADBASxS6ADBASxm4ADBAS602ADBAS7VZAwDQQCAAIwBwMFACgEA7AwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDAM9GMA0GCSqGSIb3DQEBCwUAA4IBAQCqhIj1
jv58AOWN+ma+3ruGkp8gKPSarRM0DSCMFLh0gLumccmQDrVa285Wz51k7B05E7m0
lIlObfPgWsrBFoAk2zPiW7qXAZNKO1hHjluqjaOPyUZe8hMDfDezDZItl1108SsW
D14J64oxUta0K9XjE2CBTkGZDwDE8Jz2EY9pnzhc37+3olH7pAYLlFgjL5F/de5e
9WqcL2ur84xp2dWUWBzuCyAAF2gkIXDyE7/1wujvG9xg3NFsJnRprxaw+aLmm/XA
cwkNnJbF/8pKpDrnZDfQ8gCzHWNWK3DqqMYOJfaKNRacRpVbXb4qVoq3Aifna0jO
Rx0+42BI5zVjZ92x
-----END CERTIFICATE-----
Generated at Mon Apr 7 22:19:09 2025 by rpki-client