Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AF8669C40A1705DDF9FF8B1C94EE047AB500F37E.cer
File: AF8669C40A1705DDF9FF8B1C94EE047AB500F37E.cer (raw, json)
Hash identifier: hK3TYAV+UunwLtPywBhmemtOlUKaPJw+9/pWMD9uTxo=
Subject key identifier: AF:86:69:C4:0A:17:05:DD:F9:FF:8B:1C:94:EE:04:7A:B5:00:F3:7E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 4745C6A008747A30F56B7568CEBA27122FD20870
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/0/AF8669C40A1705DDF9FF8B1C94EE047AB500F37E.mft
caRepository: rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/0
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 08 Apr 2024 14:39:31 +0000
Certificate not after: Mon 07 Apr 2025 14:44:31 +0000
Subordinate resources: AS: 61856
IP: 131.0.40.0/22
IP: 138.117.208.0/22
IP: 143.208.120.0/22
IP: 170.245.252.0/22
IP: 2804:1a5c::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:45:c6:a0:08:74:7a:30:f5:6b:75:68:ce:ba:27:12:2f:d2:08:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Apr 8 14:39:31 2024 GMT
Not After : Apr 7 14:44:31 2025 GMT
Subject: CN=AF8669C40A1705DDF9FF8B1C94EE047AB500F37E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b0:be:e6:4c:26:65:e5:6b:f3:80:85:8b:99:
44:ed:71:a8:ad:36:af:b7:66:12:b3:bb:b0:33:35:
de:f7:2e:ed:cf:0c:1e:2f:c2:83:52:34:aa:13:52:
2f:b3:a5:f2:a0:f3:ac:77:16:22:2b:82:b0:c6:91:
c1:ae:31:b7:37:c2:cf:2a:3d:1f:2e:97:3e:13:a5:
79:62:27:7b:72:f1:c5:77:60:f4:31:44:bb:72:33:
dc:60:bf:96:49:b2:1b:9a:0a:e4:dd:25:4d:0f:22:
f3:38:2c:fc:c4:f2:a1:97:4f:71:d8:f3:f0:38:f5:
40:86:fb:6a:c4:3d:20:ea:a4:ef:ca:86:81:14:b9:
b7:ae:b9:4b:c8:e0:ff:ee:ad:90:b7:4d:83:38:35:
59:3d:68:57:e4:38:c8:21:e8:a2:66:2f:85:be:03:
e3:75:13:f5:4d:21:2a:f8:cb:e2:d9:5e:3c:6e:94:
c2:37:41:9a:20:1c:a9:51:49:e0:12:d7:de:27:5c:
5f:d6:dc:c0:89:cb:cf:72:a1:dd:e7:bc:b2:d3:f7:
cf:15:4a:05:98:ed:f6:42:08:4a:9e:ef:9b:dd:94:
76:f3:22:db:70:20:56:49:18:ee:54:6f:43:fa:7e:
1e:7b:04:ca:33:fc:75:c4:da:32:d4:71:35:53:82:
6c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AF:86:69:C4:0A:17:05:DD:F9:FF:8B:1C:94:EE:04:7A:B5:00:F3:7E
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/0/AF8669C40A1705DDF9FF8B1C94EE047AB500F37E.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.40.0/22
138.117.208.0/22
143.208.120.0/22
170.245.252.0/22
IPv6:
2804:1a5c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61856
Signature Algorithm: sha256WithRSAEncryption
17:61:11:9e:77:18:ff:ad:9b:ba:19:33:23:cb:c5:e2:cc:06:
8d:1e:a3:56:ee:f6:7f:4a:e4:7c:4c:16:0a:a7:c8:ea:c7:e1:
e1:b9:9f:4d:31:39:43:f3:32:65:39:7a:15:c9:e5:88:b0:a4:
fd:17:0b:f3:cc:77:62:99:74:c6:c8:34:ce:64:ff:9e:5c:7e:
48:fd:c8:d2:32:d9:2f:4b:af:48:ee:d4:33:81:35:e2:aa:00:
2f:94:52:82:de:6e:78:d9:d7:79:f9:3b:d7:a2:2e:40:fd:c2:
e6:36:65:4c:8c:aa:06:d1:86:e2:69:10:73:c7:9c:0b:4c:25:
55:49:02:f7:99:e6:9e:b7:b1:42:17:2d:39:4a:bd:fb:30:82:
dc:93:2e:38:f6:07:d7:3b:a0:29:91:7b:00:fa:d7:e1:b3:a7:
10:ca:96:0d:d5:b2:b5:33:05:61:c8:3a:2b:6d:f0:46:d5:cd:
0a:b5:04:0e:8e:8f:95:c0:d0:e0:a0:89:23:bc:72:e7:ef:ed:
ce:28:1c:aa:bb:df:ee:50:9a:36:d9:f7:1c:cc:23:1f:e5:5d:
e6:88:c4:1c:9f:e9:d9:05:dd:e6:96:05:c0:17:0a:b5:8a:50:
e8:7a:ea:e0:d3:4e:46:2f:a8:c9:6d:2c:43:85:76:ad:66:8c:
45:39:f5:0c
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUR0XGoAh0ejD1a3VozronEi/SCHAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDA0MDgxNDM5MzFaFw0yNTA0MDcxNDQ0MzFaMDMxMTAvBgNV
BAMTKEFGODY2OUM0MEExNzA1RERGOUZGOEIxQzk0RUUwNDdBQjUwMEYzN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCusL7mTCZl5WvzgIWLmUTtcait
Nq+3ZhKzu7AzNd73Lu3PDB4vwoNSNKoTUi+zpfKg86x3FiIrgrDGkcGuMbc3ws8q
PR8ulz4TpXliJ3ty8cV3YPQxRLtyM9xgv5ZJshuaCuTdJU0PIvM4LPzE8qGXT3HY
8/A49UCG+2rEPSDqpO/KhoEUubeuuUvI4P/urZC3TYM4NVk9aFfkOMgh6KJmL4W+
A+N1E/VNISr4y+LZXjxulMI3QZogHKlRSeAS194nXF/W3MCJy89yod3nvLLT988V
SgWY7fZCCEqe75vdlHbzIttwIFZJGO5Ub0P6fh57BMoz/HXE2jLUcTVTgmxHAgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSvhmnEChcF3fn/
ixyU7gR6tQDzfjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Bc2o3Yzg1VW5ndWZaV1VXMUFMdXZ1emplcHZOd1FwQjdK
YmJmeWpRdTVrcS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Bc2o3Yzg1VW5ndWZaV1VXMUFMdXZ1emplcHZOd1FwQjdK
YmJmeWpRdTVrcS8wL0FGODY2OUM0MEExNzA1RERGOUZGOEIxQzk0RUUwNDdBQjUw
MEYzN0UubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjBABggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAoMAKAMEAop10AMEAo/Q
eAMEAqr1/DANBAIAAjAHAwUAKAQaXDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA
8aAwDQYJKoZIhvcNAQELBQADggEBABdhEZ53GP+tm7oZMyPLxeLMBo0eo1bu9n9K
5HxMFgqnyOrH4eG5n00xOUPzMmU5ehXJ5YiwpP0XC/PMd2KZdMbINM5k/55cfkj9
yNIy2S9Lr0ju1DOBNeKqAC+UUoLebnjZ13n5O9eiLkD9wuY2ZUyMqgbRhuJpEHPH
nAtMJVVJAveZ5p63sUIXLTlKvfswgtyTLjj2B9c7oCmRewD61+GzpxDKlg3VsrUz
BWHIOitt8EbVzQq1BA6Oj5XA0OCgiSO8cufv7c4oHKq73+5QmjbZ9xzMIx/lXeaI
xByf6dkF3eaWBcAXCrWKUOh66uDTTkYvqMltLEOFdq1mjEU59Qw=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org