Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
File: 5CE1A38052225798A7C5A259269033FC6D8B53A4.cer (raw, json)
Hash identifier: JfEZmv4DbIzBupbIvCrRaY1F1wtP+ZPMYiLHlV6jicQ=
Subject key identifier: 5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 6EE68E01544BCCB537DAEDA3464711F607A18DFE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.mft
caRepository: rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 20 Jun 2023 13:47:58 +0000
Certificate not after: Tue 18 Jun 2024 13:52:58 +0000
Subordinate resources: AS: 262765
IP: 131.221.56.0/22
IP: 138.121.252.0/22
IP: 168.232.72.0/22
IP: 170.80.152.0/22
IP: 186.227.0.0/20
IP: 2804:1dfc::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:e6:8e:01:54:4b:cc:b5:37:da:ed:a3:46:47:11:f6:07:a1:8d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Jun 20 13:47:58 2023 GMT
Not After : Jun 18 13:52:58 2024 GMT
Subject: CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1d:1e:89:d3:69:5d:10:b6:5e:71:a1:8a:3d:
5d:44:51:5d:88:9a:f8:fd:f0:a9:17:51:44:a9:ff:
32:46:a3:3d:9c:50:b7:b6:3f:7c:32:ee:95:68:30:
03:a7:94:cf:ed:31:8b:d9:12:3a:2b:1b:a1:3a:7b:
e1:ea:c8:04:ed:b7:29:13:21:54:cd:a6:b7:62:9c:
2d:67:7d:c3:fe:48:21:67:09:6c:d0:96:bd:6d:98:
68:f8:e3:59:48:7a:6e:dc:2b:df:98:02:c7:6b:cc:
6a:40:b9:d6:eb:f6:e9:8e:3a:56:7f:94:f7:70:46:
7e:a1:16:90:50:38:2d:31:10:ef:4a:9a:21:81:60:
4e:be:95:f9:d3:84:93:51:29:2b:b5:29:68:0e:ad:
6d:e8:11:c7:0d:bf:73:02:68:28:7b:7f:be:28:4d:
30:36:77:01:76:3a:fa:f8:20:a3:36:73:d4:4f:ec:
5c:4e:7a:95:65:e2:43:d0:22:09:3a:f3:3c:bd:3e:
a1:e0:39:8f:30:7e:07:cd:95:6c:ac:e7:c6:a1:c8:
02:87:8f:da:c6:45:23:0f:e8:b6:5a:5a:5e:b2:7f:
94:19:1a:a6:b6:2e:8d:c1:fb:3d:f1:2d:c2:62:f2:
e0:0c:8b:5d:4c:ff:df:0f:2d:f3:2a:09:74:88:6c:
7e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.56.0/22
138.121.252.0/22
168.232.72.0/22
170.80.152.0/22
186.227.0.0/20
IPv6:
2804:1dfc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262765
Signature Algorithm: sha256WithRSAEncryption
b7:cd:72:c7:02:2c:20:c8:40:04:ea:61:1a:89:42:28:ba:8f:
ab:ab:48:e7:5c:8f:fb:e9:f4:8d:e3:3b:cb:84:23:dc:fe:5a:
ed:6a:8d:c8:e2:5f:87:8b:cc:ba:ca:6f:2a:62:63:e5:cd:d3:
e0:57:b8:c3:ce:ca:ab:2d:b0:16:94:c6:33:7b:6b:f5:e0:80:
73:d3:ea:18:39:b5:3f:6e:89:b4:a0:01:de:7a:d2:c6:ad:f7:
97:30:af:06:b5:b1:61:fa:3d:21:2c:67:1f:51:98:ae:59:5f:
1c:08:65:1c:c8:76:ff:b5:ab:39:23:8b:eb:69:0a:3f:87:da:
12:d4:30:0c:8b:3b:20:9d:98:89:26:a0:ac:b8:f5:3b:18:21:
d1:39:a0:c6:51:d2:fb:79:73:9f:bc:dd:75:16:62:e3:bb:95:
03:44:26:55:c3:40:11:e1:3f:8e:ed:79:49:c3:b9:d9:f1:e4:
01:55:56:f1:99:46:3d:bd:d9:4d:60:be:e8:c6:5f:e7:b5:d6:
0c:8c:91:16:0e:38:dc:b7:96:06:0b:f9:37:79:c5:3a:e7:25:
5a:ba:0b:34:c8:e8:c8:c8:44:ea:0e:ba:89:c0:db:1b:bb:06:
c1:2d:be:08:1e:a7:72:5b:ac:e3:44:a2:9d:15:9f:21:b2:a3:
1c:37:2b:7d
-----BEGIN CERTIFICATE-----
MIIGJzCCBQ+gAwIBAgIUbuaOAVRLzLU32u2jRkcR9gehjf4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MjAxMzQ3NThaFw0yNDA2MTgxMzUyNThaMDMxMTAvBgNV
BAMTKDVDRTFBMzgwNTIyMjU3OThBN0M1QTI1OTI2OTAzM0ZDNkQ4QjUzQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjHR6J02ldELZecaGKPV1EUV2I
mvj98KkXUUSp/zJGoz2cULe2P3wy7pVoMAOnlM/tMYvZEjorG6E6e+HqyATttykT
IVTNprdinC1nfcP+SCFnCWzQlr1tmGj441lIem7cK9+YAsdrzGpAudbr9umOOlZ/
lPdwRn6hFpBQOC0xEO9KmiGBYE6+lfnThJNRKSu1KWgOrW3oEccNv3MCaCh7f74o
TTA2dwF2Ovr4IKM2c9RP7FxOepVl4kPQIgk68zy9PqHgOY8wfgfNlWys58ahyAKH
j9rGRSMP6LZaWl6yf5QZGqa2Lo3B+z3xLcJi8uAMi11M/98PLfMqCXSIbH53AgMB
AAGjggMxMIIDLTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRc4aOAUiJXmKfF
olkmkDP8bYtTpDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9qcHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdu
alV0ODNMSzlYLzAvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9qcHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdu
alV0ODNMSzlYLzAvNUNFMUEzODA1MjIyNTc5OEE3QzVBMjU5MjY5MDMzRkM2RDhC
NTNBNC5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCg904AwQCinn8AwQCqOhI
AwQCqlCYAwQEuuMAMA0EAgACMAcDBQAoBB38MBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwQCbTANBgkqhkiG9w0BAQsFAAOCAQEAt81yxwIsIMhABOphGolCKLqPq6tI
51yP++n0jeM7y4Qj3P5a7WqNyOJfh4vMuspvKmJj5c3T4Fe4w87Kqy2wFpTGM3tr
9eCAc9PqGDm1P26JtKAB3nrSxq33lzCvBrWxYfo9ISxnH1GYrllfHAhlHMh2/7Wr
OSOL62kKP4faEtQwDIs7IJ2YiSagrLj1Oxgh0TmgxlHS+3lzn7zddRZi47uVA0Qm
VcNAEeE/ju15ScO52fHkAVVW8ZlGPb3ZTWC+6MZf57XWDIyRFg443LeWBgv5N3nF
OuclWroLNMjoyMhE6g66icDbG7sGwS2+CB6nclus40SinRWfIbKjHDcrfQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org