Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
File: 149DF6958A59FCFA910071567BAB07904ED0751D.cer (raw, json)
Hash identifier: SkP51y8iN0f622uSiwUrCgNeI83keIrHxNI22fzIAc4=
Subject key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7F081C28C22360D6B4AB9AFAA8676776809EF174
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
caRepository: rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 09 Jan 2025 20:05:06 +0000
Certificate not after: Thu 08 Jan 2026 20:10:06 +0000
Subordinate resources: AS: 4230
IP: 179.68.0.0/16
IP: 179.237.0.0 -- 179.237.25.255
IP: 186.249.160.0/20
IP: 187.28.0.0 -- 187.30.255.255
IP: 187.43.0.0/16
IP: 189.2.0.0/15
IP: 189.16.0.0/15
IP: 189.22.0.0/15
IP: 189.42.0.0/15
IP: 189.52.0.0/15
IP: 189.86.0.0 -- 189.88.255.255
IP: 191.38.0.0/15
IP: 191.56.0.0/13
IP: 200.10.159.0/24
IP: 200.139.192.0/18
IP: 200.166.0.0/15
IP: 200.172.0.0 -- 200.174.255.255
IP: 200.178.0.0/15
IP: 200.182.0.0/15
IP: 200.190.0.0 -- 200.192.63.255
IP: 200.200.0.0/16
IP: 200.208.0.0 -- 200.214.255.255
IP: 200.227.0.0 -- 200.228.255.255
IP: 200.230.0.0/15
IP: 200.241.0.0 -- 200.255.255.255
IP: 201.30.0.0/15
IP: 201.38.0.0/15
IP: 201.44.0.0/15
IP: 201.56.0.0/15
IP: 201.64.0.0/15
IP: 201.72.0.0/15
IP: 201.90.0.0/16
IP: 2804:a8::/32
IP: 2804:17c::/32
IP: 2804:1388::/30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:08:1c:28:c2:23:60:d6:b4:ab:9a:fa:a8:67:67:76:80:9e:f1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 9 20:05:06 2025 GMT
Not After : Jan 8 20:10:06 2026 GMT
Subject: CN=149DF6958A59FCFA910071567BAB07904ED0751D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:11:80:6a:85:84:fc:54:ea:56:5d:f3:08:38:
b0:e4:4e:8a:b2:ae:29:79:ee:d8:4a:43:d6:41:92:
a1:02:2f:7c:70:d6:ea:ac:f3:56:20:19:41:53:cf:
78:cf:77:48:84:b1:30:d5:7d:c6:2d:b7:05:eb:84:
59:67:a2:24:59:4b:a9:81:42:67:ff:8a:cb:68:81:
6b:61:f8:6e:f1:71:cb:77:1c:57:9b:84:44:f9:c4:
54:e4:b1:62:a6:2b:53:04:e7:c2:2c:cc:ef:80:e8:
36:e3:80:14:92:98:30:37:8b:2e:5c:35:a2:29:61:
5c:0b:82:0c:5d:2d:5d:34:69:30:b3:10:de:c5:97:
76:0d:49:2c:97:ae:e0:2f:8d:6f:f1:c3:00:e4:46:
6f:94:8e:eb:51:28:39:c1:1c:ad:69:3d:84:2a:2d:
09:e8:8d:a7:80:81:51:4c:9a:0d:49:f6:e2:d7:21:
8f:ec:21:30:41:d0:95:00:17:5c:d4:ca:f5:d3:a7:
13:0c:12:21:21:b3:cf:06:6a:30:c5:a7:fc:a1:75:
f4:c4:55:88:ad:91:f3:da:80:1f:64:89:a0:bb:93:
ed:3b:8d:e9:25:7e:80:d0:77:11:6b:cf:fb:ab:e7:
b9:72:d7:97:d0:cb:3b:3d:08:e9:c6:0b:50:9c:85:
4b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.68.0.0/16
179.237.0.0-179.237.25.255
186.249.160.0/20
187.28.0.0-187.30.255.255
187.43.0.0/16
189.2.0.0/15
189.16.0.0/15
189.22.0.0/15
189.42.0.0/15
189.52.0.0/15
189.86.0.0-189.88.255.255
191.38.0.0/15
191.56.0.0/13
200.10.159.0/24
200.139.192.0/18
200.166.0.0/15
200.172.0.0-200.174.255.255
200.178.0.0/15
200.182.0.0/15
200.190.0.0-200.192.63.255
200.200.0.0/16
200.208.0.0-200.214.255.255
200.227.0.0-200.228.255.255
200.230.0.0/15
200.241.0.0-200.255.255.255
201.30.0.0/15
201.38.0.0/15
201.44.0.0/15
201.56.0.0/15
201.64.0.0/15
201.72.0.0/15
201.90.0.0/16
IPv6:
2804:a8::/32
2804:17c::/32
2804:1388::/30
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4230
Signature Algorithm: sha256WithRSAEncryption
da:69:50:21:1b:80:aa:2b:74:cc:c6:24:45:12:4b:a9:33:96:
d5:44:41:15:af:10:60:a6:3d:59:06:d8:fd:20:be:36:79:4a:
6f:9d:a6:d6:83:e2:e0:91:4d:58:b0:f0:10:d5:5b:49:41:8b:
33:f4:ed:fd:b0:a8:75:57:00:da:70:4e:49:28:43:30:76:85:
13:2a:13:c3:fc:a1:97:d6:47:6a:d2:02:eb:e5:ab:79:74:0b:
8b:83:d3:bb:c6:05:63:11:35:c5:2d:ec:10:c0:e2:e0:21:cc:
1c:2a:ed:65:32:db:39:03:59:e7:9f:5f:2c:c7:9c:05:cb:8b:
ec:7f:41:86:2a:d8:ac:ea:d9:97:23:34:6f:78:84:d7:43:16:
45:97:f0:a6:55:97:82:06:87:2a:ab:ea:b6:e0:dc:09:26:4e:
77:91:09:cc:30:7b:0a:f8:fb:dc:20:20:ef:6f:37:4d:c0:d7:
3e:5c:80:5b:8e:ef:9e:74:cc:b9:c8:3d:ff:2b:64:dc:86:5d:
48:26:19:39:15:3e:c6:d8:20:8a:a9:82:99:85:05:ac:a5:04:
25:b5:b8:a6:a1:bd:b1:45:f2:76:43:02:72:c3:e3:a1:3e:be:
90:e8:4e:f6:92:33:a5:cb:a0:63:c6:a3:cc:6d:0b:f4:99:3e:
b5:33:fa:93
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:40:49 2025 by rpki-client