Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/90524BFE16E4163C4B4EB6424540F3989155006C.cer
File: 90524BFE16E4163C4B4EB6424540F3989155006C.cer (raw, json)
Hash identifier: SkWvaax6l+pms/3r26nLnUNlXtsWdNLi1+x6aqBFAXc=
Subject key identifier: 90:52:4B:FE:16:E4:16:3C:4B:4E:B6:42:45:40:F3:98:91:55:00:6C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 37418E21232461AF56AC0D336EBEF7C93DE5195F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/3H2oaUkSYJ6y2aZYr8g3S5bE7LsQbDpQeRFd2XFYMgdg/0/90524BFE16E4163C4B4EB6424540F3989155006C.mft
caRepository: rsync://rpki-repo.registro.br/repo/3H2oaUkSYJ6y2aZYr8g3S5bE7LsQbDpQeRFd2XFYMgdg/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 21 Sep 2023 20:15:17 +0000
Certificate not after: Thu 19 Sep 2024 20:20:17 +0000
Subordinate resources: AS: 263042
IP: 138.59.156.0/22
IP: 143.137.184.0/22
IP: 170.0.64.0/22
IP: 177.129.160.0/22
IP: 191.240.164.0/22
IP: 2804:dfc::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:41:8e:21:23:24:61:af:56:ac:0d:33:6e:be:f7:c9:3d:e5:19:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Sep 21 20:15:17 2023 GMT
Not After : Sep 19 20:20:17 2024 GMT
Subject: CN=90524BFE16E4163C4B4EB6424540F3989155006C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:b5:07:9e:b8:1b:e5:79:f9:bb:fb:e2:71:
a9:b3:36:8d:fe:5b:14:27:fc:b9:d0:f4:9c:fe:12:
d5:80:43:56:a7:a4:40:cc:ea:a2:e9:3a:4b:20:93:
48:72:50:5c:d7:0b:33:9c:e0:28:a9:f7:ab:72:06:
fa:2a:dd:0b:9a:23:01:8a:5f:63:f7:ca:37:9d:36:
07:c5:cf:83:fc:a8:f6:2c:c3:7c:9d:ca:8a:f1:f2:
9c:5d:ce:b2:39:44:b1:d2:4c:89:c3:89:d8:48:9e:
88:e1:b3:85:1f:30:96:48:6d:55:0b:34:5c:4a:b2:
46:f3:6d:03:e1:f4:56:30:5b:1a:a2:32:5a:e8:6d:
61:c6:b5:ff:bd:e8:5b:98:7b:fb:24:45:82:a2:c1:
b3:1f:fd:ad:ad:da:bc:0a:e2:12:fa:02:ff:df:59:
38:50:0c:2f:fa:75:f2:af:00:04:27:a4:ac:1a:3d:
5b:12:48:27:94:7c:4e:dc:fa:80:7d:94:e9:59:10:
25:b1:58:bd:ad:4c:6a:02:b5:68:5a:cf:be:a0:d7:
6d:b9:43:66:7c:3e:0e:7f:25:33:b1:43:a8:49:fa:
e2:d8:f6:ac:e4:5d:52:ed:d2:dd:07:32:5f:dd:6e:
e7:94:ea:2f:56:ac:f0:e6:c6:8c:62:4b:e8:b4:77:
c0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
90:52:4B:FE:16:E4:16:3C:4B:4E:B6:42:45:40:F3:98:91:55:00:6C
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3H2oaUkSYJ6y2aZYr8g3S5bE7LsQbDpQeRFd2XFYMgdg/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3H2oaUkSYJ6y2aZYr8g3S5bE7LsQbDpQeRFd2XFYMgdg/0/90524BFE16E4163C4B4EB6424540F3989155006C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.156.0/22
143.137.184.0/22
170.0.64.0/22
177.129.160.0/22
191.240.164.0/22
IPv6:
2804:dfc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263042
Signature Algorithm: sha256WithRSAEncryption
24:6d:36:d6:68:87:84:19:12:8e:25:79:1e:66:90:4c:5e:95:
43:9a:97:c5:3c:76:7d:f1:c3:29:ee:8f:ad:f1:c0:3e:d2:3c:
ac:24:4b:59:24:30:e0:c8:ef:5e:42:54:bc:61:49:c4:70:8f:
d2:e5:9c:5a:7c:be:78:c0:2b:0a:9c:72:04:06:29:d5:7c:10:
3e:89:af:98:84:bb:1a:18:1c:64:ec:0b:ca:19:ef:ed:a1:07:
98:12:32:da:1d:1f:ca:41:20:2a:35:e8:cc:b5:16:83:01:c2:
cf:1c:50:d0:b3:d9:f3:c6:28:ed:f0:0d:e3:87:10:c1:d3:82:
78:03:75:92:f4:f0:aa:50:0f:81:c8:e8:87:82:ec:9e:32:ce:
ba:39:02:70:83:21:0c:d7:4e:e3:bc:83:20:e3:11:24:72:cc:
4c:43:8f:8a:86:8e:82:42:03:3c:37:3b:19:0f:3d:e0:09:3d:
e6:67:67:38:b4:61:bf:41:4e:d6:bb:a2:3c:c6:9d:2a:09:e1:
34:52:8b:70:09:e9:c1:04:2c:93:92:75:91:b7:f7:f9:c4:7a:
72:09:8c:c1:ef:1d:22:2d:76:67:22:93:0d:6d:dd:d3:b7:6b:
63:fb:8f:33:cf:8f:56:1d:9e:03:37:30:51:56:f9:5a:66:0d:
97:e7:31:20
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIUN0GOISMkYa9WrA0zbr73yT3lGV8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MjEyMDE1MTdaFw0yNDA5MTkyMDIwMTdaMDMxMTAvBgNV
BAMTKDkwNTI0QkZFMTZFNDE2M0M0QjRFQjY0MjQ1NDBGMzk4OTE1NTAwNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7mbUHnrgb5Xn5u/vicamzNo3+
WxQn/LnQ9Jz+EtWAQ1anpEDM6qLpOksgk0hyUFzXCzOc4Cip96tyBvoq3QuaIwGK
X2P3yjedNgfFz4P8qPYsw3ydyorx8pxdzrI5RLHSTInDidhInojhs4UfMJZIbVUL
NFxKskbzbQPh9FYwWxqiMlrobWHGtf+96FuYe/skRYKiwbMf/a2t2rwK4hL6Av/f
WThQDC/6dfKvAAQnpKwaPVsSSCeUfE7c+oB9lOlZECWxWL2tTGoCtWhaz76g1225
Q2Z8Pg5/JTOxQ6hJ+uLY9qzkXVLt0t0HMl/dbueU6i9WrPDmxoxiS+i0d8C5AgMB
AAGjggMzMIIDLzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSQUkv+FuQWPEtO
tkJFQPOYkVUAbDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zSDJvYVVrU1lKNnkyYVpZcjhnM1M1YkU3THNRYkRwUWVS
RmQyWEZZTWdkZy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vM0gyb2FVa1NZSjZ5MmFaWXI4ZzNTNWJFN0xzUWJEcFFl
UkZkMlhGWU1nZGcvMC85MDUyNEJGRTE2RTQxNjNDNEI0RUI2NDI0NTQwRjM5ODkx
NTUwMDZDLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwRgYIKwYBBQUHAQcBAf8ENzA1MCQEAgABMB4DBAKKO5wDBAKPibgDBAKq
AEADBAKxgaADBAK/8KQwDQQCAAIwBwMFACgEDfwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDBAOCMA0GCSqGSIb3DQEBCwUAA4IBAQAkbTbWaIeEGRKOJXkeZpBMXpVD
mpfFPHZ98cMp7o+t8cA+0jysJEtZJDDgyO9eQlS8YUnEcI/S5ZxafL54wCsKnHIE
BinVfBA+ia+YhLsaGBxk7AvKGe/toQeYEjLaHR/KQSAqNejMtRaDAcLPHFDQs9nz
xijt8A3jhxDB04J4A3WS9PCqUA+ByOiHguyeMs66OQJwgyEM107jvIMg4xEkcsxM
Q4+Kho6CQgM8NzsZDz3gCT3mZ2c4tGG/QU7Wu6I8xp0qCeE0UotwCenBBCyTknWR
t/f5xHpyCYzB7x0iLXZnIpMNbd3Tt2tj+48zz49WHZ4DNzBRVvlaZg2X5zEg
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org