Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/07DD9DFA8F604DB8C72BCCA8E292E9C9C2D5F252.cer
File: 07DD9DFA8F604DB8C72BCCA8E292E9C9C2D5F252.cer (raw, json)
Hash identifier: oMZ9RoeYQ7hjeaSHN5ACCx/XglDuocMSXNez7tbDoSI=
Subject key identifier: 07:DD:9D:FA:8F:60:4D:B8:C7:2B:CC:A8:E2:92:E9:C9:C2:D5:F2:52
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 50AE375870A8311FD6D8F704F0604ED42A7DDC7D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/07DD9DFA8F604DB8C72BCCA8E292E9C9C2D5F252.mft
caRepository: rsync://rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 17 Feb 2025 22:06:59 +0000
Certificate not after: Mon 16 Feb 2026 22:11:59 +0000
Subordinate resources: AS: 52870
IP: 177.128.120.0/22
IP: 200.49.28.0/22
IP: 2804:594c::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:ae:37:58:70:a8:31:1f:d6:d8:f7:04:f0:60:4e:d4:2a:7d:dc:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 17 22:06:59 2025 GMT
Not After : Feb 16 22:11:59 2026 GMT
Subject: CN=07DD9DFA8F604DB8C72BCCA8E292E9C9C2D5F252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:1d:ca:ac:63:51:74:2a:b1:2e:ab:d6:b9:
77:49:f5:7b:97:40:e7:2c:8e:42:aa:54:71:35:e3:
49:2d:f4:dc:ea:0a:65:8b:66:6e:17:ff:bd:b0:de:
73:c5:3d:41:f1:c8:cc:7b:d6:5f:08:0a:a6:63:5e:
d4:90:12:0c:ff:96:d4:3b:fd:a7:3d:e8:34:42:aa:
55:cd:6d:a2:6e:5e:66:8d:de:f1:b9:df:c9:a3:92:
4a:f4:01:14:42:61:ce:d7:aa:66:b3:ed:d7:7a:4f:
72:28:72:65:58:5e:b5:3d:d8:ce:86:79:8b:95:f4:
49:95:db:7f:28:62:1c:cb:56:68:91:27:09:8b:91:
18:28:45:ab:68:d3:17:89:5d:bb:c2:d4:04:99:39:
f2:26:04:6e:9d:67:86:f8:73:d7:05:6a:ae:9d:cf:
05:78:51:39:21:2c:3b:c3:8d:f3:49:c5:ef:b6:75:
87:0f:35:6d:3c:5e:2a:1b:d4:0d:c2:f3:44:a1:d5:
11:1f:8d:46:56:f4:c2:39:06:cf:5b:83:10:ad:94:
1d:2e:73:96:d7:02:2a:c7:4c:b5:90:eb:20:2a:0b:
e9:78:3c:45:8c:3f:17:36:76:e3:b8:ab:0d:d7:6f:
ec:3a:8d:6f:7d:4b:eb:b1:2d:f6:04:7d:24:83:3b:
50:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
07:DD:9D:FA:8F:60:4D:B8:C7:2B:CC:A8:E2:92:E9:C9:C2:D5:F2:52
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/07DD9DFA8F604DB8C72BCCA8E292E9C9C2D5F252.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.128.120.0/22
200.49.28.0/22
IPv6:
2804:594c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52870
Signature Algorithm: sha256WithRSAEncryption
0a:d9:e4:9d:82:6c:0e:56:a1:e5:57:c7:12:38:84:f1:46:ec:
2c:c3:a1:95:5e:b3:af:e3:8b:2c:01:4d:50:d0:6f:45:27:28:
d9:14:33:17:f5:29:8b:92:2d:7c:08:61:d2:1b:f9:50:db:33:
49:42:29:5e:af:6a:26:65:e8:28:e6:5d:a8:7b:ef:5f:78:5c:
df:bd:1f:b1:b6:c0:54:8a:bb:bb:8a:30:53:4d:83:12:52:36:
96:1f:ef:5a:29:4a:6d:34:50:c8:3b:ec:db:de:6f:aa:04:bd:
05:ef:f5:6a:9b:42:bb:88:d1:12:08:ff:17:05:93:38:6c:1d:
24:4c:0e:71:65:6f:84:ea:18:8a:6e:b8:dc:1d:b2:c9:0b:df:
51:0b:ca:54:fc:bd:bf:50:36:db:c4:07:00:c3:e2:cd:2a:d9:
49:08:d8:ad:f6:ce:39:cc:f0:d3:e6:2f:d3:26:71:db:f1:a5:
69:5f:73:f2:3c:b7:ca:12:c7:3b:6a:da:e8:a3:4c:a7:ec:83:
c0:f2:f3:c0:65:1e:23:49:76:ab:1e:44:6e:02:f6:f4:a6:5e:
73:c7:4d:65:e4:90:dc:26:13:ad:d4:b2:8c:eb:df:53:9c:32:
f2:61:f4:04:60:c1:46:f9:a5:ea:50:2c:17:53:e8:e3:e0:63:
d7:55:7e:bc
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUUK43WHCoMR/W2PcE8GBO1Cp93H0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAyMTcyMjA2NTlaFw0yNjAyMTYyMjExNTlaMDMxMTAvBgNV
BAMTKDA3REQ5REZBOEY2MDREQjhDNzJCQ0NBOEUyOTJFOUM5QzJENUYyNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv+x3KrGNRdCqxLqvWuXdJ9XuX
QOcsjkKqVHE140kt9NzqCmWLZm4X/72w3nPFPUHxyMx71l8ICqZjXtSQEgz/ltQ7
/ac96DRCqlXNbaJuXmaN3vG538mjkkr0ARRCYc7Xqmaz7dd6T3IocmVYXrU92M6G
eYuV9EmV238oYhzLVmiRJwmLkRgoRato0xeJXbvC1ASZOfImBG6dZ4b4c9cFaq6d
zwV4UTkhLDvDjfNJxe+2dYcPNW08Xiob1A3C80Sh1REfjUZW9MI5Bs9bgxCtlB0u
c5bXAirHTLWQ6yAqC+l4PEWMPxc2duO4qw3Xb+w6jW99S+uxLfYEfSSDO1BHAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQH3Z36j2BNuMcr
zKjikunJwtXyUjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQzdy
d0dBeXhja1NZaDdIZVM3SEtNdmpXSGtXUDNFUmRROTFOZHh5ZnB4ZjQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0M3
cndHQXl4Y2tTWWg3SGVTN0hLTXZqV0hrV1AzRVJkUTkxTmR4eWZweGY0LzAvMDdE
RDlERkE4RjYwNERCOEM3MkJDQ0E4RTI5MkU5QzlDMkQ1RjI1Mi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCsYB4AwQCyDEcMA0EAgACMAcDBQAoBFlMMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwDOhjANBgkqhkiG9w0BAQsFAAOCAQEACtnknYJs
Dlah5VfHEjiE8UbsLMOhlV6zr+OLLAFNUNBvRSco2RQzF/Upi5ItfAhh0hv5UNsz
SUIpXq9qJmXoKOZdqHvvX3hc370fsbbAVIq7u4owU02DElI2lh/vWilKbTRQyDvs
295vqgS9Be/1aptCu4jREgj/FwWTOGwdJEwOcWVvhOoYim643B2yyQvfUQvKVPy9
v1A228QHAMPizSrZSQjYrfbOOczw0+Yv0yZx2/GlaV9z8jy3yhLHO2ra6KNMp+yD
wPLzwGUeI0l2qx5EbgL29KZec8dNZeSQ3CYTrdSyjOvfU5wy8mH0BGDBRvml6lAs
F1Po4+Bj11V+vA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 12:45:04 2025 by rpki-client