Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9DB7933DE9EE262E270C410D7467CADE800DC88F.cer
File: 9DB7933DE9EE262E270C410D7467CADE800DC88F.cer (raw, json)
Hash identifier: fa9EGIl/HrbQJVeHXi3rFgFipUHH1Ys6trQt9HdQXPc=
Subject key identifier: 9D:B7:93:3D:E9:EE:26:2E:27:0C:41:0D:74:67:CA:DE:80:0D:C8:8F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 0A28C18E4C9986C8979914E696E258E31BAD7EBA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/9DB7933DE9EE262E270C410D7467CADE800DC88F.mft
caRepository: rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 16 May 2023 13:14:01 +0000
Certificate not after: Tue 14 May 2024 13:19:01 +0000
Subordinate resources: AS: 262296
IP: 168.181.196.0/22
IP: 170.81.0.0/22
IP: 177.11.120.0/21
IP: 177.85.76.0/22
IP: 2804:a84::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:28:c1:8e:4c:99:86:c8:97:99:14:e6:96:e2:58:e3:1b:ad:7e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: May 16 13:14:01 2023 GMT
Not After : May 14 13:19:01 2024 GMT
Subject: CN=9DB7933DE9EE262E270C410D7467CADE800DC88F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:db:7d:d7:b2:00:05:6b:33:ad:be:b4:67:07:
68:fa:48:58:3b:8b:68:f4:48:e7:6b:60:8a:25:fd:
1c:ad:9e:e6:52:fd:fb:a3:e0:77:98:31:b9:26:42:
d1:57:e2:b2:93:45:ab:ea:68:a1:ba:c6:a5:4f:27:
8a:ba:34:ad:41:e9:87:c7:ab:a0:36:b6:4f:2e:26:
4a:cc:94:4b:7b:f1:c7:22:e6:f2:89:79:34:c2:25:
dd:ff:e8:c8:32:32:fb:0e:1e:0c:cf:40:9d:c4:d1:
41:3e:f9:7d:ff:22:7e:6d:08:be:00:77:c4:94:ac:
fc:cf:81:9b:5d:1f:9c:93:4a:79:bf:09:64:22:af:
b3:98:3f:b0:5f:55:a2:ea:3c:66:2a:7c:d2:bf:25:
1e:3f:cc:0d:84:a6:79:0c:42:b8:37:18:a8:c1:2e:
4a:45:7c:be:63:63:ac:00:16:e7:0b:91:0b:5c:b8:
95:21:ac:de:26:cb:36:4c:19:01:22:55:cb:7c:dd:
c0:f2:3f:a6:f4:79:11:f2:2c:c0:ea:81:47:4e:64:
4e:03:7c:21:1f:86:a5:7a:2f:68:90:2c:e2:e9:e1:
d7:66:91:d5:f2:db:9c:af:f1:14:a5:de:4c:88:a9:
58:76:74:57:43:99:08:6e:e3:88:db:10:12:ee:29:
96:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9D:B7:93:3D:E9:EE:26:2E:27:0C:41:0D:74:67:CA:DE:80:0D:C8:8F
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/9DB7933DE9EE262E270C410D7467CADE800DC88F.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.181.196.0/22
170.81.0.0/22
177.11.120.0/21
177.85.76.0/22
IPv6:
2804:a84::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262296
Signature Algorithm: sha256WithRSAEncryption
01:f3:4d:8b:d2:f1:47:fe:7d:3a:16:87:de:db:5b:78:4d:b0:
32:7b:5e:42:45:97:61:09:d3:a6:d6:cc:76:05:37:7c:7b:9d:
f6:11:b7:9a:8a:7b:f9:3b:d0:e1:1c:2b:35:2e:ee:e3:d8:f6:
b1:71:a3:03:85:70:4c:ee:62:68:9a:01:c9:6e:9a:05:7b:88:
48:d2:77:d6:52:69:0a:46:c9:c2:e0:e1:91:3e:25:9a:2a:86:
33:25:b1:62:9f:55:83:74:8d:e2:91:7c:6b:12:a4:c2:d8:28:
da:4e:49:6e:16:ea:e4:26:0f:ab:17:16:e4:e9:bb:d5:dd:58:
cc:d4:c8:20:3b:37:eb:cc:b6:e7:88:ac:a1:c2:ca:1b:6f:9f:
49:12:ea:a4:3b:bc:17:49:9b:76:e1:aa:d2:1e:5e:97:45:0d:
8d:fa:af:e0:a8:80:1d:9c:90:c1:74:a6:75:71:a6:d2:16:81:
24:87:5c:15:ef:e1:67:31:3b:ba:c7:0a:87:f5:3f:1d:52:2e:
a6:6b:44:1b:c4:54:05:04:a3:e9:eb:36:f1:02:ef:ec:c6:f5:
f7:15:6f:00:4f:2a:b2:85:4c:1e:4c:0d:98:c7:19:6c:fb:27:
5c:05:18:17:47:e3:c9:4f:d5:31:9a:b9:6a:d5:c7:ce:0b:bb:
f0:d4:4f:3c
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUCijBjkyZhsiXmRTmluJY4xutfrowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MTYxMzE0MDFaFw0yNDA1MTQxMzE5MDFaMDMxMTAvBgNV
BAMTKDlEQjc5MzNERTlFRTI2MkUyNzBDNDEwRDc0NjdDQURFODAwREM4OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj233XsgAFazOtvrRnB2j6SFg7
i2j0SOdrYIol/RytnuZS/fuj4HeYMbkmQtFX4rKTRavqaKG6xqVPJ4q6NK1B6YfH
q6A2tk8uJkrMlEt78cci5vKJeTTCJd3/6MgyMvsOHgzPQJ3E0UE++X3/In5tCL4A
d8SUrPzPgZtdH5yTSnm/CWQir7OYP7BfVaLqPGYqfNK/JR4/zA2EpnkMQrg3GKjB
LkpFfL5jY6wAFucLkQtcuJUhrN4myzZMGQEiVct83cDyP6b0eRHyLMDqgUdOZE4D
fCEfhqV6L2iQLOLp4ddmkdXy25yv8RSl3kyIqVh2dFdDmQhu44jbEBLuKZbDAgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSdt5M96e4mLicM
QQ10Z8regA3IjzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zTk02bnl5WkRSV1JSNzFKMmN4eDZ4UnNWWHkyS2oxa0FH
WTZvQ2dnTGl5Ny8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zTk02bnl5WkRSV1JSNzFKMmN4eDZ4UnNWWHkyS2oxa0FH
WTZvQ2dnTGl5Ny8wLzlEQjc5MzNERTlFRTI2MkUyNzBDNDEwRDc0NjdDQURFODAw
REM4OEYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjBABggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAqi1xAMEAqpRAAMEA7EL
eAMEArFVTDANBAIAAjAHAwUAKAQKhDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
AJgwDQYJKoZIhvcNAQELBQADggEBAAHzTYvS8Uf+fToWh97bW3hNsDJ7XkJFl2EJ
06bWzHYFN3x7nfYRt5qKe/k70OEcKzUu7uPY9rFxowOFcEzuYmiaAclumgV7iEjS
d9ZSaQpGycLg4ZE+JZoqhjMlsWKfVYN0jeKRfGsSpMLYKNpOSW4W6uQmD6sXFuTp
u9XdWMzUyCA7N+vMtueIrKHCyhtvn0kS6qQ7vBdJm3bhqtIeXpdFDY36r+CogB2c
kMF0pnVxptIWgSSHXBXv4WcxO7rHCof1Px1SLqZrRBvEVAUEo+nrNvEC7+zG9fcV
bwBPKrKFTB5MDZjHGWz7J1wFGBdH48lP1TGauWrVx84Lu/DUTzw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org