Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
File: 5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer (raw, json)
Hash identifier: XEYqaBLFjRwaskYI0XcdRH2zho6+3xfXSD7n20OI3qE=
Subject key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 3027F631701B7BCE762D58AA3DBC444171333950
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.mft
caRepository: rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 24 Oct 2023 12:37:33 +0000
Certificate not after: Tue 22 Oct 2024 12:42:33 +0000
Subordinate resources: AS: 61678
IP: 131.108.164.0/22
IP: 138.122.140.0/22
IP: 168.90.0.0/22
IP: 170.246.236.0/22
IP: 181.191.200.0/22
IP: 2804:1cd4::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:27:f6:31:70:1b:7b:ce:76:2d:58:aa:3d:bc:44:41:71:33:39:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Oct 24 12:37:33 2023 GMT
Not After : Oct 22 12:42:33 2024 GMT
Subject: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:81:45:7e:c3:99:62:1b:a3:35:c7:00:f3:
4c:9c:cc:f4:04:4b:38:6f:5a:e5:a3:d5:39:91:9d:
bf:5d:b6:29:f8:3b:f5:a3:ec:bd:dd:c7:7b:15:42:
12:ec:c4:d6:71:a8:b6:0f:4d:67:72:5f:56:4a:45:
1c:43:14:46:dc:c9:ca:34:2c:67:3c:fd:b3:7d:8a:
8b:57:99:0c:38:24:18:1b:af:cb:2f:01:9c:f9:29:
62:63:7d:ff:67:e4:ce:69:a2:98:bb:41:19:3a:b7:
62:d2:d9:85:89:a0:e4:6a:cc:af:81:2d:d7:f4:71:
2a:69:24:7a:3e:dc:53:52:2f:17:fe:02:c0:bf:f7:
f9:95:59:89:db:94:4e:e7:d6:20:5e:e8:ea:dc:1d:
c9:70:16:0d:b0:09:b1:69:8e:ea:7b:ee:7a:b7:7a:
e1:33:cb:91:72:db:ae:10:57:f1:77:8c:b6:70:5d:
cf:7b:65:d7:70:67:c7:30:a7:78:64:26:b4:20:a9:
71:6d:70:5e:e7:5f:9c:2a:a3:ac:e0:a1:d2:ed:e6:
3e:70:22:ff:8f:bf:fe:e0:99:ab:40:d0:0d:55:da:
23:dd:17:57:3b:78:8b:b4:f0:4b:2d:d1:0f:b1:0d:
c5:c3:44:14:7c:fd:ce:6f:4f:3c:70:84:6c:58:dc:
39:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.164.0/22
138.122.140.0/22
168.90.0.0/22
170.246.236.0/22
181.191.200.0/22
IPv6:
2804:1cd4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61678
Signature Algorithm: sha256WithRSAEncryption
00:b2:52:19:aa:40:49:1b:ae:fb:ef:3e:54:e6:44:c1:64:05:
8c:a7:89:48:3d:1a:dc:90:b4:45:f4:12:48:10:35:f9:6f:2e:
50:81:6e:42:6c:f3:f8:3c:ed:c2:14:9e:0a:e5:da:eb:dd:7f:
52:39:3f:32:5b:85:41:2d:d1:d0:aa:49:4d:bc:00:4c:89:1c:
85:4a:88:37:f9:c2:d4:8b:c3:2f:45:db:09:be:83:f8:76:91:
d0:1a:44:d8:9d:42:57:fc:8b:65:b7:91:49:32:9b:54:92:88:
7a:2b:53:75:90:0a:1e:ec:b2:e5:e4:d1:07:41:21:42:38:09:
bc:d2:2f:18:30:6e:87:04:b7:44:77:aa:3a:eb:b8:7e:04:b5:
72:73:ae:ad:6b:15:4f:75:46:80:a4:a3:b1:e4:c2:69:21:a0:
da:c1:a7:42:78:9e:23:ea:d6:5b:a9:ca:7d:c3:5e:99:42:fb:
91:b5:63:c0:b1:8b:04:b3:17:eb:bd:09:3d:03:7c:c3:2b:64:
b9:ce:97:f0:1d:dd:4d:76:cc:ac:9e:2b:34:d1:64:a6:1e:81:
22:4e:7e:4a:84:38:8e:21:00:41:af:a8:cc:75:41:52:70:ec:
6b:d7:8e:f0:20:1c:47:f2:70:d5:70:4a:46:ee:3e:e4:ab:99:
7a:13:0d:fc
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIUMCf2MXAbe852LViqPbxEQXEzOVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMjQxMjM3MzNaFw0yNDEwMjIxMjQyMzNaMDMxMTAvBgNV
BAMTKDVGRkYxRDNBOTQ3QjhCNUZGNzVERDcxRkYxQ0VENzBENEUzRkEwQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxM4FFfsOZYhujNccA80yczPQE
SzhvWuWj1TmRnb9dtin4O/Wj7L3dx3sVQhLsxNZxqLYPTWdyX1ZKRRxDFEbcyco0
LGc8/bN9iotXmQw4JBgbr8svAZz5KWJjff9n5M5popi7QRk6t2LS2YWJoORqzK+B
Ldf0cSppJHo+3FNSLxf+AsC/9/mVWYnblE7n1iBe6OrcHclwFg2wCbFpjup77nq3
euEzy5Fy264QV/F3jLZwXc97ZddwZ8cwp3hkJrQgqXFtcF7nX5wqo6zgodLt5j5w
Iv+Pv/7gmatA0A1V2iPdF1c7eIu08Est0Q+xDcXDRBR8/c5vTzxwhGxY3DkDAgMB
AAGjggMzMIIDLzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRf/x06lHuLX/dd
1x/xztcNTj+gtDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80VGh4Y01WQm56RlFKaXdwV0IxbUtnTURTenhWUjZoNjFM
OTN5bWJLdjJrOS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNFRoeGNNVkJuekZRSml3cFdCMW1LZ01EU3p4VlI2aDYx
TDkzeW1iS3YyazkvMC81RkZGMUQzQTk0N0I4QjVGRjc1REQ3MUZGMUNFRDcwRDRF
M0ZBMEI0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwRgYIKwYBBQUHAQcBAf8ENzA1MCQEAgABMB4DBAKDbKQDBAKKeowDBAKo
WgADBAKq9uwDBAK1v8gwDQQCAAIwBwMFACgEHNQwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAPDuMA0GCSqGSIb3DQEBCwUAA4IBAQAAslIZqkBJG6777z5U5kTBZAWM
p4lIPRrckLRF9BJIEDX5by5QgW5CbPP4PO3CFJ4K5drr3X9SOT8yW4VBLdHQqklN
vABMiRyFSog3+cLUi8MvRdsJvoP4dpHQGkTYnUJX/Itlt5FJMptUkoh6K1N1kAoe
7LLl5NEHQSFCOAm80i8YMG6HBLdEd6o667h+BLVyc66taxVPdUaApKOx5MJpIaDa
wadCeJ4j6tZbqcp9w16ZQvuRtWPAsYsEsxfrvQk9A3zDK2S5zpfwHd1Ndsysnis0
0WSmHoEiTn5KhDiOIQBBr6jMdUFScOxr147wIBxH8nDVcEpG7j7kq5l6Ew38
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org