Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DDB2DA452C22543D612ECF3051FADB7B717B7886.cer
File: DDB2DA452C22543D612ECF3051FADB7B717B7886.cer (raw, json)
Hash identifier: P86EGv0U+ErkoyOGBp1j90zNBBaQEa+grNSh49p6vvU=
Subject key identifier: DD:B2:DA:45:2C:22:54:3D:61:2E:CF:30:51:FA:DB:7B:71:7B:78:86
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 025C2B374F5A413C251F23439975EB91E6E974AB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/DDB2DA452C22543D612ECF3051FADB7B717B7886.mft
caRepository: rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 02 Apr 2024 13:13:20 +0000
Certificate not after: Tue 01 Apr 2025 13:18:20 +0000
Subordinate resources: AS: 28624
IP: 187.110.64.0/18
IP: 200.237.128.0/19
IP: 201.33.32.0/19
IP: 201.54.160.0/20
IP: 2804:3bc::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:5c:2b:37:4f:5a:41:3c:25:1f:23:43:99:75:eb:91:e6:e9:74:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Apr 2 13:13:20 2024 GMT
Not After : Apr 1 13:18:20 2025 GMT
Subject: CN=DDB2DA452C22543D612ECF3051FADB7B717B7886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cb:47:a8:46:81:ae:b7:22:c0:9d:65:ee:8a:
a9:c7:cb:bd:4f:66:26:3c:08:13:69:2a:da:c2:50:
dd:c1:ef:f9:61:d9:d7:20:ab:b1:00:e3:77:04:1b:
06:b7:d3:fc:34:ce:a2:ec:89:be:ab:38:86:a5:1d:
39:40:63:f2:04:28:6a:0f:4c:cc:e6:10:c9:83:55:
ff:f6:2d:84:65:ae:8b:46:c7:56:55:31:ce:43:40:
1b:5b:46:74:42:a2:69:3c:d2:0b:76:07:1a:86:11:
0d:63:2e:56:0c:9f:de:1b:9d:22:a2:71:33:98:5a:
56:ff:98:2d:19:d3:bf:f7:cc:49:b7:51:d8:a3:97:
55:7c:41:02:bf:3f:5f:97:f9:78:55:fe:b5:d1:86:
b0:77:ef:b7:e0:9f:07:0c:7e:2f:2d:e1:f0:70:a2:
ad:67:40:28:49:ff:a4:1b:e1:2f:1d:e1:89:aa:ad:
4a:35:17:c0:1c:5e:9d:43:a7:91:52:ea:1d:16:16:
05:4c:0a:5f:70:05:67:62:22:66:f5:4a:8c:9b:ad:
bd:64:bd:a6:be:51:2a:3b:bd:58:b7:e4:4f:a4:a9:
24:ed:23:e2:12:c2:21:0b:8b:10:af:f6:7f:ca:06:
e8:7b:7a:a3:e8:54:00:8b:c7:f1:f0:7b:85:c8:38:
64:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DD:B2:DA:45:2C:22:54:3D:61:2E:CF:30:51:FA:DB:7B:71:7B:78:86
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/DDB2DA452C22543D612ECF3051FADB7B717B7886.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.110.64.0/18
200.237.128.0/19
201.33.32.0/19
201.54.160.0/20
IPv6:
2804:3bc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28624
Signature Algorithm: sha256WithRSAEncryption
6e:70:27:a7:56:89:be:d7:02:e5:ba:17:0e:d2:e8:55:df:a6:
10:04:cb:f7:c8:40:f2:2e:53:26:f8:c9:c8:57:96:29:e6:4a:
61:f3:f1:9e:73:ac:a9:34:ad:1f:c0:89:04:57:db:c5:07:29:
62:96:db:5f:38:89:cd:be:96:ea:4d:17:a7:1b:af:d6:3f:b4:
fd:a6:86:cf:ab:a4:d3:22:3e:e2:1a:88:19:1d:59:ed:56:64:
fa:ef:3b:f4:67:94:56:1e:5d:8b:91:e8:45:33:c2:06:c0:2b:
9b:cb:a9:4c:8d:0d:af:08:0c:5b:4e:10:f8:30:f4:25:42:ee:
d1:ad:fd:95:fb:39:58:e7:8c:a4:33:f7:e9:76:96:45:ee:b0:
50:40:ed:24:e0:01:fd:57:d1:c2:5d:aa:86:3d:0a:c7:26:92:
07:93:28:d1:9c:0d:8f:0c:ea:d0:e7:ae:2b:83:d8:ff:79:be:
ea:e1:7e:30:e5:7d:29:27:5e:c8:62:c9:71:85:fb:a0:f1:ca:
9b:39:07:52:0b:d8:ee:66:7e:f7:11:00:61:d4:26:48:f2:bb:
5c:92:33:25:8f:06:61:8e:94:1d:19:12:37:4a:8a:16:74:18:
a4:97:d7:a2:1e:5f:15:96:c0:cf:c7:52:42:86:07:8c:a5:fb:
70:38:4a:ab
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUAlwrN09aQTwlHyNDmXXrkebpdKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDA0MDIxMzEzMjBaFw0yNTA0MDExMzE4MjBaMDMxMTAvBgNV
BAMTKEREQjJEQTQ1MkMyMjU0M0Q2MTJFQ0YzMDUxRkFEQjdCNzE3Qjc4ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCey0eoRoGutyLAnWXuiqnHy71P
ZiY8CBNpKtrCUN3B7/lh2dcgq7EA43cEGwa30/w0zqLsib6rOIalHTlAY/IEKGoP
TMzmEMmDVf/2LYRlrotGx1ZVMc5DQBtbRnRComk80gt2BxqGEQ1jLlYMn94bnSKi
cTOYWlb/mC0Z07/3zEm3Udijl1V8QQK/P1+X+XhV/rXRhrB377fgnwcMfi8t4fBw
oq1nQChJ/6Qb4S8d4YmqrUo1F8AcXp1Dp5FS6h0WFgVMCl9wBWdiImb1Soybrb1k
vaa+USo7vVi35E+kqSTtI+ISwiELixCv9n/KBuh7eqPoVACLx/Hwe4XIOGTnAgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTdstpFLCJUPWEu
zzBR+tt7cXt4hjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81TGM2ZHk5aXd3V3QyYThXM0FxeGE3bWU0NFVHMnZvbWdn
TTRabXUyUXZLcS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNUxjNmR5OWl3d1d0MmE4VzNBcXhhN21lNDRVRzJ2b21n
Z000Wm11MlF2S3EvMC9EREIyREE0NTJDMjI1NDNENjEyRUNGMzA1MUZBREI3Qjcx
N0I3ODg2Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAa7bkADBAXI7YADBAXJ
ISADBATJNqAwDQQCAAIwBwMFACgEA7wwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
b9AwDQYJKoZIhvcNAQELBQADggEBAG5wJ6dWib7XAuW6Fw7S6FXfphAEy/fIQPIu
Uyb4ychXlinmSmHz8Z5zrKk0rR/AiQRX28UHKWKW2184ic2+lupNF6cbr9Y/tP2m
hs+rpNMiPuIaiBkdWe1WZPrvO/RnlFYeXYuR6EUzwgbAK5vLqUyNDa8IDFtOEPgw
9CVC7tGt/ZX7OVjnjKQz9+l2lkXusFBA7STgAf1X0cJdqoY9CscmkgeTKNGcDY8M
6tDnriuD2P95vurhfjDlfSknXshiyXGF+6Dxyps5B1IL2O5mfvcRAGHUJkjyu1yS
MyWPBmGOlB0ZEjdKihZ0GKSX16IeXxWWwM/HUkKGB4yl+3A4Sqs=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org