Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E.cer
File: 68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E.cer (raw, json)
Hash identifier: 4RKJgmgY96LqDdEVzBnRGBXlAsMzEgSzba4pws8B6x0=
Subject key identifier: 68:F7:E0:63:7F:23:C3:E9:F6:44:A9:B6:53:17:04:BB:CB:E7:AA:0E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 633CB0CD050929657243D987D806ACC45B214EB0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E.mft
caRepository: rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 21 Mar 2024 20:47:10 +0000
Certificate not after: Thu 20 Mar 2025 20:52:10 +0000
Subordinate resources: AS: 264881
IP: 168.227.172.0/22
IP: 170.79.20.0/22
IP: 2804:2f44::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:3c:b0:cd:05:09:29:65:72:43:d9:87:d8:06:ac:c4:5b:21:4e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Mar 21 20:47:10 2024 GMT
Not After : Mar 20 20:52:10 2025 GMT
Subject: CN=68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:58:1b:72:75:91:01:bb:bc:d5:d0:fd:1d:6b:
01:f6:ff:6f:02:5b:06:fb:31:b0:ef:d8:9b:bb:37:
94:32:42:3c:89:d2:05:5c:38:d8:13:28:d7:86:1c:
02:6c:55:b6:c9:46:1f:cd:3e:0e:26:6b:84:80:f9:
97:a1:e7:da:78:43:c9:1c:61:5c:09:44:77:24:42:
6b:4e:db:f4:53:de:0c:a9:f6:81:0b:ec:95:5e:d6:
80:c1:08:08:9c:04:38:49:c3:8b:70:df:0a:9c:03:
a2:8d:99:fb:e1:28:52:55:4f:37:99:0e:e7:d7:32:
5c:64:af:c6:cd:74:2f:7b:9e:41:0d:a5:0c:0a:72:
cd:c7:31:73:b8:85:61:24:c5:46:ce:e5:a3:28:32:
a8:08:80:13:a5:d5:84:b6:dc:a1:19:56:59:1e:22:
91:6b:90:f6:43:e8:c4:84:d4:d8:e5:3e:db:7e:90:
3a:20:39:10:cd:3a:ac:05:1e:db:40:70:be:20:e9:
da:57:29:1e:18:be:44:b1:04:0e:68:f4:8e:9f:06:
9d:7b:3f:92:e6:1b:1f:cd:fc:81:57:e2:b9:60:55:
8b:08:29:35:de:2f:3b:5d:9a:ed:e7:2f:86:9d:0d:
c8:66:20:a2:56:c5:8c:93:9c:f4:1c:c2:97:ca:5c:
f8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
68:F7:E0:63:7F:23:C3:E9:F6:44:A9:B6:53:17:04:BB:CB:E7:AA:0E
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.172.0/22
170.79.20.0/22
IPv6:
2804:2f44::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264881
Signature Algorithm: sha256WithRSAEncryption
20:59:76:8e:79:df:a0:a5:e1:b3:ec:5d:03:99:ce:3b:dc:69:
43:87:72:9f:48:d6:4a:21:a9:49:aa:e9:fa:aa:56:9a:b7:8e:
57:4c:f7:a9:f3:6d:e9:f5:10:da:cd:d0:a7:af:09:cb:b6:93:
46:27:cb:81:fc:a4:33:f2:a6:c9:ec:37:d4:d9:cb:c1:2d:cd:
d8:fe:10:c7:1c:b6:d7:6e:ce:45:0e:c6:d8:c0:60:17:a8:66:
b2:8a:d0:7e:6c:62:cf:5f:27:e7:10:83:16:e2:73:ab:0b:8e:
cb:25:09:fb:be:a0:9b:2f:89:49:f1:39:0c:52:74:14:21:2c:
e2:5c:ee:e4:81:5a:92:04:15:76:dd:3e:6f:f9:a1:d2:dc:c3:
4b:2a:03:8c:f4:1f:f6:11:11:93:68:35:ef:ac:c7:25:3e:87:
72:62:a4:ce:52:a1:cb:16:08:78:41:c8:3f:89:c4:93:7f:63:
dd:76:ab:9b:91:5f:e4:80:dc:70:8c:9d:7c:9b:aa:83:0b:46:
28:b9:d7:fa:26:c9:f5:9a:1e:ff:72:ea:94:30:76:b9:6b:8a:
7b:6a:fe:7b:fd:4c:b3:8f:e4:4f:3e:b1:8a:34:18:16:de:b6:
b1:58:8c:5b:23:c0:fc:41:2b:a0:ef:9b:4a:e1:46:ec:cf:25:
6e:b3:48:d2
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUYzywzQUJKWVyQ9mH2AasxFshTrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMjEyMDQ3MTBaFw0yNTAzMjAyMDUyMTBaMDMxMTAvBgNV
BAMTKDY4RjdFMDYzN0YyM0MzRTlGNjQ0QTlCNjUzMTcwNEJCQ0JFN0FBMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMWBtydZEBu7zV0P0dawH2/28C
Wwb7MbDv2Ju7N5QyQjyJ0gVcONgTKNeGHAJsVbbJRh/NPg4ma4SA+Zeh59p4Q8kc
YVwJRHckQmtO2/RT3gyp9oEL7JVe1oDBCAicBDhJw4tw3wqcA6KNmfvhKFJVTzeZ
DufXMlxkr8bNdC97nkENpQwKcs3HMXO4hWEkxUbO5aMoMqgIgBOl1YS23KEZVlke
IpFrkPZD6MSE1NjlPtt+kDogORDNOqwFHttAcL4g6dpXKR4YvkSxBA5o9I6fBp17
P5LmGx/N/IFX4rlgVYsIKTXeLztdmu3nL4adDchmIKJWxYyTnPQcwpfKXPjRAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRo9+BjfyPD6fZE
qbZTFwS7y+eqDjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82U1NxVHBpQ0xFSm5EMWVvNnRvb1NzUTNMcDJMUkwyM3RH
TjczRHJERmdjNi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNlNTcVRwaUNMRUpuRDFlbzZ0b29Tc1EzTHAyTFJMMjN0
R043M0RyREZnYzYvMC82OEY3RTA2MzdGMjNDM0U5RjY0NEE5QjY1MzE3MDRCQkNC
RTdBQTBFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKo46wDBAKqTxQwDQQC
AAIwBwMFACgEL0QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAqxMA0GCSqGSIb3
DQEBCwUAA4IBAQAgWXaOed+gpeGz7F0Dmc473GlDh3KfSNZKIalJqun6qlaat45X
TPep823p9RDazdCnrwnLtpNGJ8uB/KQz8qbJ7DfU2cvBLc3Y/hDHHLbXbs5FDsbY
wGAXqGayitB+bGLPXyfnEIMW4nOrC47LJQn7vqCbL4lJ8TkMUnQUISziXO7kgVqS
BBV23T5v+aHS3MNLKgOM9B/2ERGTaDXvrMclPodyYqTOUqHLFgh4Qcg/icSTf2Pd
dqubkV/kgNxwjJ18m6qDC0Youdf6Jsn1mh7/cuqUMHa5a4p7av57/Uyzj+RPPrGK
NBgW3raxWIxbI8D8QSug75tK4UbszyVus0jS
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org