Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D7F9A5F1DEF91840838A45D3C3174E077F15F3DA.cer
File: D7F9A5F1DEF91840838A45D3C3174E077F15F3DA.cer (raw, json)
Hash identifier: HBqBtuoGMzKGSjr6TR1YGK6wlJ34IsK+nowJT0ahzzc=
Subject key identifier: D7:F9:A5:F1:DE:F9:18:40:83:8A:45:D3:C3:17:4E:07:7F:15:F3:DA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 30DAF61EE1FA09CE7DCB62C04F72DC4BB3F8B37D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/D7F9A5F1DEF91840838A45D3C3174E077F15F3DA.mft
caRepository: rsync://rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 02 Jul 2022 02:08:05 +0000
Certificate not after: Sat 01 Jul 2023 02:13:05 +0000
Subordinate resources: AS: 266555
IP: 138.122.236.0/22
IP: 160.238.220.0/22
IP: 168.232.116.0/22
IP: 177.70.128.0/20
IP: 201.149.120.0/22
IP: 2804:3dd0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:da:f6:1e:e1:fa:09:ce:7d:cb:62:c0:4f:72:dc:4b:b3:f8:b3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Jul 2 02:08:05 2022 GMT
Not After : Jul 1 02:13:05 2023 GMT
Subject: CN=D7F9A5F1DEF91840838A45D3C3174E077F15F3DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8f:5e:9a:31:59:2a:70:dc:b7:27:b1:0d:78:
52:79:94:63:76:d4:ff:91:54:a2:c2:05:ef:72:55:
aa:cd:bc:c8:54:aa:ec:83:b7:4c:85:6c:e9:78:dd:
87:96:7e:e0:01:68:a6:80:4e:37:5f:ba:13:6f:1c:
75:85:3c:e4:d2:c2:72:ef:be:82:94:93:1b:e7:64:
a2:6c:e5:e2:9a:75:fb:ce:bf:5b:28:e2:4d:09:8b:
e9:92:3b:33:1c:d6:f3:ff:9c:01:58:ec:56:ec:0d:
54:52:0b:a5:f4:98:91:f0:41:ba:70:f6:ad:ab:5c:
4c:ef:a4:75:fd:9c:80:fc:99:4c:ed:31:24:23:31:
4f:53:79:f3:e8:82:a9:8b:75:86:3b:2b:aa:7d:38:
61:28:6b:c3:bb:23:09:3e:99:b7:61:bf:cc:e7:fa:
48:f5:f2:d5:93:53:61:d7:a7:a1:92:5a:f7:80:ca:
5e:e2:9f:7d:4f:28:4e:bf:40:c5:51:55:ea:24:34:
21:eb:e3:b2:7f:d3:af:88:c2:f9:41:74:46:2f:e0:
3c:d7:7d:0f:69:ca:4b:65:1a:40:0c:7b:06:e4:ea:
ee:d6:4a:bc:0a:0a:ca:5a:32:f2:53:e4:9a:81:88:
63:bf:e6:1c:1a:f5:e0:c9:7b:21:4d:80:ea:d5:58:
66:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D7:F9:A5:F1:DE:F9:18:40:83:8A:45:D3:C3:17:4E:07:7F:15:F3:DA
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/D7F9A5F1DEF91840838A45D3C3174E077F15F3DA.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.236.0/22
160.238.220.0/22
168.232.116.0/22
177.70.128.0/20
201.149.120.0/22
IPv6:
2804:3dd0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266555
Signature Algorithm: sha256WithRSAEncryption
08:97:ff:6f:00:1c:2e:8a:9d:39:95:ff:1a:cc:71:5e:83:fa:
cc:23:f5:39:87:c4:f2:3c:df:03:c5:40:7a:f2:5c:8a:17:4c:
4d:b4:1f:61:af:96:49:75:9e:7d:20:82:f4:f0:14:c3:75:d5:
46:9a:92:42:59:f2:8d:cc:31:3b:bd:77:53:8f:58:7b:d7:85:
83:b4:bc:d7:40:01:0c:51:22:40:37:1e:62:d2:3a:38:8b:e3:
d7:15:c7:9b:63:65:9a:7a:6f:77:11:b8:bb:54:36:69:9f:10:
f7:33:e2:82:3d:99:a1:fc:66:6c:7d:6a:90:29:51:56:87:10:
ab:db:36:df:ab:44:c8:ab:b8:77:c1:7b:77:91:6d:b1:c1:88:
7c:09:f6:6d:37:c6:a9:74:20:f8:f1:30:6d:c8:17:70:71:66:
0d:d4:77:54:c4:56:ad:6e:74:71:83:a8:72:f8:ff:56:06:bf:
b6:54:12:7e:3d:a2:63:a9:f3:67:3e:b1:da:d1:b0:57:bf:94:
11:41:5b:fe:31:22:fe:85:7c:f9:8e:f4:32:95:e0:a3:74:fd:
1a:f7:a7:91:ec:4a:e4:07:f8:cc:f6:d5:08:6c:9c:0c:6d:25:
64:01:ae:69:fe:25:b8:48:4e:ef:3f:5e:a6:eb:6a:1d:d8:07:
26:73:6b:e8
-----BEGIN CERTIFICATE-----
MIIGKDCCBRCgAwIBAgIUMNr2HuH6Cc59y2LAT3LcS7P4s30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA3MDIwMjA4MDVaFw0yMzA3MDEwMjEzMDVaMDMxMTAvBgNV
BAMTKEQ3RjlBNUYxREVGOTE4NDA4MzhBNDVEM0MzMTc0RTA3N0YxNUYzREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2j16aMVkqcNy3J7ENeFJ5lGN2
1P+RVKLCBe9yVarNvMhUquyDt0yFbOl43YeWfuABaKaATjdfuhNvHHWFPOTSwnLv
voKUkxvnZKJs5eKadfvOv1so4k0Ji+mSOzMc1vP/nAFY7FbsDVRSC6X0mJHwQbpw
9q2rXEzvpHX9nID8mUztMSQjMU9TefPogqmLdYY7K6p9OGEoa8O7Iwk+mbdhv8zn
+kj18tWTU2HXp6GSWveAyl7in31PKE6/QMVRVeokNCHr47J/06+IwvlBdEYv4DzX
fQ9pyktlGkAMewbk6u7WSrwKCspaMvJT5JqBiGO/5hwa9eDJeyFNgOrVWGb1AgMB
AAGjggMyMIIDLjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTX+aXx3vkYQIOK
RdPDF04HfxXz2jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80RVY5aWdObjliMVVlRlpwcm5ZYlBqeU5pN1dZWnVaSng1
cHhYelpWWjNTZS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80RVY5aWdObjliMVVlRlpwcm5ZYlBqeU5pN1dZWnVaSng1
cHhYelpWWjNTZS8wL0Q3RjlBNUYxREVGOTE4NDA4MzhBNDVEM0MzMTc0RTA3N0Yx
NUYzREEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjBGBggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEAop67AMEAqDu3AMEAqjo
dAMEBLFGgAMEAsmVeDANBAIAAjAHAwUAKAQ90DAaBggrBgEFBQcBCAEB/wQLMAmg
BzAFAgMEETswDQYJKoZIhvcNAQELBQADggEBAAiX/28AHC6KnTmV/xrMcV6D+swj
9TmHxPI83wPFQHryXIoXTE20H2Gvlkl1nn0ggvTwFMN11UaakkJZ8o3MMTu9d1OP
WHvXhYO0vNdAAQxRIkA3HmLSOjiL49cVx5tjZZp6b3cRuLtUNmmfEPcz4oI9maH8
Zmx9apApUVaHEKvbNt+rRMiruHfBe3eRbbHBiHwJ9m03xql0IPjxMG3IF3BxZg3U
d1TEVq1udHGDqHL4/1YGv7ZUEn49omOp82c+sdrRsFe/lBFBW/4xIv6FfPmO9DKV
4KN0/Rr3p5HsSuQH+Mz21QhsnAxtJWQBrmn+JbhITu8/Xqbrah3YByZza+g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org