Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6694014EFDE726CA8D240BB1A4BB23DB7F0F3F21.cer
File: 6694014EFDE726CA8D240BB1A4BB23DB7F0F3F21.cer (raw, json)
Hash identifier: 5Ag6p4UaNJN8hYPiV9ryiIdrZkFvOBqpT3XLfIqzakI=
Subject key identifier: 66:94:01:4E:FD:E7:26:CA:8D:24:0B:B1:A4:BB:23:DB:7F:0F:3F:21
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 377891C8282208D2101F11A5CAE919B4583D14ED
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/0/6694014EFDE726CA8D240BB1A4BB23DB7F0F3F21.mft
caRepository: rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 30 Jan 2024 20:21:28 +0000
Certificate not after: Tue 28 Jan 2025 20:26:28 +0000
Subordinate resources: AS: 52771
IP: 138.186.44.0/22
IP: 168.228.92.0/22
IP: 177.155.208.0/20
IP: 2804:2fa4::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:78:91:c8:28:22:08:d2:10:1f:11:a5:ca:e9:19:b4:58:3d:14:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Jan 30 20:21:28 2024 GMT
Not After : Jan 28 20:26:28 2025 GMT
Subject: CN=6694014EFDE726CA8D240BB1A4BB23DB7F0F3F21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:34:94:2c:af:94:84:b8:4c:51:6e:0e:e3:
09:a7:a7:d4:7a:19:f9:3c:09:85:06:65:c4:81:fb:
95:2c:26:7e:c9:64:79:81:19:63:81:07:ea:a5:ad:
70:1a:75:38:db:de:c1:52:40:37:80:e8:5b:4d:d0:
96:de:79:ff:07:ac:a4:bc:25:2b:82:1a:cf:09:08:
84:27:35:20:11:c4:d0:a2:53:17:fc:ca:3d:57:01:
26:2f:8b:80:a8:d9:42:57:87:72:eb:e1:4c:67:8e:
f7:51:b2:e6:89:f4:6c:eb:31:d3:43:5b:79:53:9e:
da:07:11:da:0f:03:7d:79:73:d7:9f:f7:8f:1f:a4:
0f:14:dc:d8:bf:b1:c4:14:39:ee:5a:0f:a8:c5:bf:
e6:1e:87:d6:ac:26:1e:2d:14:59:b1:c1:7f:71:c6:
54:9d:0a:1e:2a:f3:c2:aa:c5:b7:ef:93:09:4d:89:
0e:d4:15:a8:4f:94:3d:ee:7b:0a:f4:99:7d:f3:8c:
f6:17:a2:10:ba:3c:49:1e:ab:05:d1:3b:d1:2f:5c:
ff:59:c1:4b:bd:e9:0d:ef:29:48:4d:66:ca:eb:02:
96:91:a6:e0:26:4a:ec:df:25:e0:e0:36:fe:10:76:
25:1d:fe:85:c3:6e:93:8c:cc:77:36:49:cb:df:30:
ea:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
66:94:01:4E:FD:E7:26:CA:8D:24:0B:B1:A4:BB:23:DB:7F:0F:3F:21
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/0/6694014EFDE726CA8D240BB1A4BB23DB7F0F3F21.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.44.0/22
168.228.92.0/22
177.155.208.0/20
IPv6:
2804:2fa4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52771
Signature Algorithm: sha256WithRSAEncryption
77:08:99:fe:ac:8e:01:cc:56:1e:ac:7f:02:b7:9c:55:de:c3:
18:f3:96:e9:b9:e6:75:64:89:7e:ee:67:80:c1:4d:ca:20:69:
22:63:58:20:d4:cc:46:fb:5b:82:7a:fd:82:ea:04:bc:88:24:
3e:22:32:3e:70:ae:94:52:8d:ad:ec:f0:88:13:ce:53:9d:57:
b8:13:3a:db:6c:8c:25:e7:cc:2a:c8:49:b4:59:bc:b5:6c:64:
98:e2:01:3f:b8:3e:23:1e:f4:8f:6a:d2:f8:29:3c:90:46:2f:
f8:f8:25:d5:c5:8d:34:a5:61:4f:2a:ef:15:c7:43:4a:5f:ba:
54:23:21:6f:e6:0a:9a:b5:66:f7:b9:29:8f:47:33:01:c9:95:
e5:9d:8e:a5:24:19:02:df:25:61:33:2a:0d:22:38:cc:09:03:
20:4e:ee:05:a5:a6:24:3c:c5:30:58:72:02:f1:4a:b0:bf:af:
e9:d1:c4:40:75:98:f0:d1:ef:71:12:32:b1:72:ad:76:2a:67:
44:1e:a4:95:76:b8:4d:89:f9:69:9b:80:d0:a8:7c:09:fe:94:
a5:d9:9c:cc:39:9b:07:5d:67:e4:55:6c:be:1f:02:cb:46:06:
c2:ac:77:1b:6b:48:e2:b9:3c:c1:60:0a:1e:e2:fa:b3:3f:78:
1d:f4:74:13
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIUN3iRyCgiCNIQHxGlyukZtFg9FO0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMzAyMDIxMjhaFw0yNTAxMjgyMDI2MjhaMDMxMTAvBgNV
BAMTKDY2OTQwMTRFRkRFNzI2Q0E4RDI0MEJCMUE0QkIyM0RCN0YwRjNGMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5xDSULK+UhLhMUW4O4wmnp9R6
Gfk8CYUGZcSB+5UsJn7JZHmBGWOBB+qlrXAadTjb3sFSQDeA6FtN0Jbeef8HrKS8
JSuCGs8JCIQnNSARxNCiUxf8yj1XASYvi4Co2UJXh3Lr4UxnjvdRsuaJ9GzrMdND
W3lTntoHEdoPA315c9ef948fpA8U3Ni/scQUOe5aD6jFv+Yeh9asJh4tFFmxwX9x
xlSdCh4q88KqxbfvkwlNiQ7UFahPlD3uewr0mX3zjPYXohC6PEkeqwXRO9EvXP9Z
wUu96Q3vKUhNZsrrApaRpuAmSuzfJeDgNv4QdiUd/oXDbpOMzHc2ScvfMOrPAgMB
AAGjggMnMIIDIzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRmlAFO/ecmyo0k
C7GkuyPbfw8/ITAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80bUZmM0V0UEpqd3FZWVlEejJvNkRIVHdVS1gxdEZ2OVNE
ODFyMjd3WnI0aS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNG1GZjNFdFBKandxWVlZRHoybzZESFR3VUtYMXRGdjlT
RDgxcjI3d1pyNGkvMC82Njk0MDE0RUZERTcyNkNBOEQyNDBCQjFBNEJCMjNEQjdG
MEYzRjIxLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAKKuiwDBAKo5FwDBASx
m9AwDQQCAAIwBwMFACgEL6QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAM4jMA0G
CSqGSIb3DQEBCwUAA4IBAQB3CJn+rI4BzFYerH8Ct5xV3sMY85bpueZ1ZIl+7meA
wU3KIGkiY1gg1MxG+1uCev2C6gS8iCQ+IjI+cK6UUo2t7PCIE85TnVe4EzrbbIwl
58wqyEm0Wby1bGSY4gE/uD4jHvSPatL4KTyQRi/4+CXVxY00pWFPKu8Vx0NKX7pU
IyFv5gqatWb3uSmPRzMByZXlnY6lJBkC3yVhMyoNIjjMCQMgTu4FpaYkPMUwWHIC
8Uqwv6/p0cRAdZjw0e9xEjKxcq12KmdEHqSVdrhNiflpm4DQqHwJ/pSl2ZzMOZsH
XWfkVWy+HwLLRgbCrHcba0jiuTzBYAoe4vqzP3gd9HQT
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org