Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B2BBC2B5109511F272026E674B0D0AA24CE514F5.cer
File: B2BBC2B5109511F272026E674B0D0AA24CE514F5.cer (raw, json)
Hash identifier: 3htkE1TFsAny7ub0O9qLCONEqOAywnVs+X+SHi0kXRg=
Subject key identifier: B2:BB:C2:B5:10:95:11:F2:72:02:6E:67:4B:0D:0A:A2:4C:E5:14:F5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 66DAED66472B6BCDD0E2538A15AC995654AE3391
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/B2BBC2B5109511F272026E674B0D0AA24CE514F5.mft
caRepository: rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 04 Dec 2023 18:49:45 +0000
Certificate not after: Mon 02 Dec 2024 18:54:45 +0000
Subordinate resources: AS: 263421
IP: 168.121.156.0/22
IP: 168.195.220.0/22
IP: 179.191.240.0/20
IP: 2804:1600::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:da:ed:66:47:2b:6b:cd:d0:e2:53:8a:15:ac:99:56:54:ae:33:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Dec 4 18:49:45 2023 GMT
Not After : Dec 2 18:54:45 2024 GMT
Subject: CN=B2BBC2B5109511F272026E674B0D0AA24CE514F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:9d:78:87:48:e2:66:1b:a5:db:59:85:19:
93:e1:5f:a7:b2:28:ec:6b:9e:ce:6a:52:80:da:6a:
42:ff:51:27:59:fe:fb:d8:dd:fb:45:65:57:fd:39:
2c:02:ef:c3:92:25:d3:75:44:80:38:a1:ba:aa:81:
58:ce:cb:f4:28:5e:83:50:92:cb:f0:93:8a:0f:04:
0a:6c:73:15:b8:b6:c4:50:4c:e2:68:54:b6:84:05:
59:3d:7e:f5:62:f3:cd:2d:77:6c:ad:cf:75:43:17:
13:af:ce:76:31:c2:93:7f:2f:f7:fc:4c:d1:7d:52:
07:eb:05:d7:90:52:bb:af:de:6c:b3:64:8f:bc:d8:
f2:47:b2:8a:0f:05:03:f6:7e:5f:d5:ee:ff:44:3d:
d6:8a:d8:42:56:72:d1:28:93:f4:41:a6:3e:ed:e7:
fa:2b:e9:87:ab:8a:8b:cd:cb:6a:cc:19:cc:4e:4c:
4c:9d:f4:eb:82:e6:26:aa:4f:96:af:49:1a:c7:19:
2e:e6:b1:f3:45:ae:b7:66:70:bb:1b:df:60:f7:5d:
82:09:36:90:86:c2:24:ac:e6:b1:4d:b6:41:d2:40:
bc:ed:2a:99:d4:86:6b:6b:19:93:09:b0:97:b9:01:
43:01:3a:60:08:98:54:5d:93:f6:4e:62:ed:93:3b:
2f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B2:BB:C2:B5:10:95:11:F2:72:02:6E:67:4B:0D:0A:A2:4C:E5:14:F5
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/B2BBC2B5109511F272026E674B0D0AA24CE514F5.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.156.0/22
168.195.220.0/22
179.191.240.0/20
IPv6:
2804:1600::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263421
Signature Algorithm: sha256WithRSAEncryption
a8:41:e1:79:b6:22:63:62:0a:13:18:8e:ee:52:e1:96:40:15:
7e:fc:1e:9e:48:f9:c7:65:eb:0b:29:b9:43:82:c4:94:3c:4c:
27:37:2f:bd:ec:f1:88:93:d0:2a:79:12:81:b2:67:9c:82:be:
d3:7b:66:cd:81:67:d5:f9:b4:59:d6:2f:23:aa:93:80:f3:10:
1d:32:75:9c:2f:52:b7:e2:a5:56:d9:f9:d0:8e:df:1c:c3:79:
62:c4:49:24:32:77:8e:48:13:a3:ea:e5:68:44:eb:22:6b:5e:
32:f2:b3:6a:ad:45:02:c5:48:38:37:07:4b:49:85:fe:c5:6d:
7e:28:55:05:0c:6a:17:96:37:c3:9d:f5:a1:60:b6:13:92:b7:
3a:9f:30:7e:93:6a:61:50:bc:58:60:78:6f:3b:f8:cf:42:10:
40:91:20:98:51:f1:c3:0e:28:2a:9b:0a:f6:e4:13:f7:9a:c5:
89:e0:df:74:27:10:90:ae:84:60:9b:cd:11:39:ce:58:a4:68:
73:7e:ba:ab:dd:4a:c2:c9:0d:83:68:96:fc:b2:f1:52:81:dd:
47:d5:21:7e:81:8f:7a:1b:78:65:0e:43:e3:37:e7:37:c2:3e:
65:75:71:d5:48:c0:49:be:2a:2f:cd:0d:b4:e5:72:0b:77:fb:
c7:44:19:db
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIUZtrtZkcra83Q4lOKFayZVlSuM5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMDQxODQ5NDVaFw0yNDEyMDIxODU0NDVaMDMxMTAvBgNV
BAMTKEIyQkJDMkI1MTA5NTExRjI3MjAyNkU2NzRCMEQwQUEyNENFNTE0RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Gp14h0jiZhul21mFGZPhX6ey
KOxrns5qUoDaakL/USdZ/vvY3ftFZVf9OSwC78OSJdN1RIA4obqqgVjOy/QoXoNQ
ksvwk4oPBApscxW4tsRQTOJoVLaEBVk9fvVi880td2ytz3VDFxOvznYxwpN/L/f8
TNF9UgfrBdeQUruv3myzZI+82PJHsooPBQP2fl/V7v9EPdaK2EJWctEok/RBpj7t
5/or6YeriovNy2rMGcxOTEyd9OuC5iaqT5avSRrHGS7msfNFrrdmcLsb32D3XYIJ
NpCGwiSs5rFNtkHSQLztKpnUhmtrGZMJsJe5AUMBOmAImFRdk/ZOYu2TOy+vAgMB
AAGjggMnMIIDIzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSyu8K1EJUR8nIC
bmdLDQqiTOUU9TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CbndVSHB1NnJXTEJxcHpkRldYVnZVQUVtRllYdng3YW5T
THRXaHFqZ0x5Ri8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQm53VUhwdTZyV0xCcXB6ZEZXWFZ2VUFFbUZZWHZ4N2Fu
U0x0V2hxamdMeUYvMC9CMkJCQzJCNTEwOTUxMUYyNzIwMjZFNjc0QjBEMEFBMjRD
RTUxNEY1Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAKoeZwDBAKow9wDBASz
v/AwDQQCAAIwBwMFACgEFgAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAT9MA0G
CSqGSIb3DQEBCwUAA4IBAQCoQeF5tiJjYgoTGI7uUuGWQBV+/B6eSPnHZesLKblD
gsSUPEwnNy+97PGIk9AqeRKBsmecgr7Te2bNgWfV+bRZ1i8jqpOA8xAdMnWcL1K3
4qVW2fnQjt8cw3lixEkkMneOSBOj6uVoROsia14y8rNqrUUCxUg4NwdLSYX+xW1+
KFUFDGoXljfDnfWhYLYTkrc6nzB+k2phULxYYHhvO/jPQhBAkSCYUfHDDigqmwr2
5BP3msWJ4N90JxCQroRgm80ROc5YpGhzfrqr3UrCyQ2DaJb8svFSgd1H1SF+gY96
G3hlDkPjN+c3wj5ldXHVSMBJviovzQ205XILd/vHRBnb
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org