Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer
File: 23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer (raw, json)
Hash identifier: omvFRC2VyB4b2tU86bYEpDwRC0SgKJB2yvbTSI7WNEw=
Subject key identifier: 23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5A44D1EAB29FB46BC7E44070870AAE3A5D4EA9F0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft
caRepository: rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 25 Nov 2024 14:25:08 +0000
Certificate not after: Mon 24 Nov 2025 14:30:08 +0000
Subordinate resources: AS: 267489
IP: 192.141.161.0 -- 192.141.163.255
IP: 2804:4244::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:44:d1:ea:b2:9f:b4:6b:c7:e4:40:70:87:0a:ae:3a:5d:4e:a9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 25 14:25:08 2024 GMT
Not After : Nov 24 14:30:08 2025 GMT
Subject: CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:4d:3c:77:13:19:05:0c:75:29:e6:15:06:
0d:61:d9:4b:e6:6e:52:a1:58:e5:a1:b6:af:ab:aa:
27:12:3b:1b:41:b7:bb:09:21:97:cf:b0:18:eb:f1:
81:1e:bf:3e:b6:9e:5f:7e:7c:8b:45:e1:e1:fb:34:
c8:70:f1:c8:12:10:5e:e3:34:0c:b3:d1:4e:3f:79:
9e:55:4c:6a:70:e7:a1:19:7b:d4:e8:2e:53:fd:ee:
cf:bf:0e:1a:71:48:77:06:06:57:92:65:a2:6f:02:
c8:c0:f2:3d:82:e1:d2:e4:56:e2:2e:93:1a:10:99:
9d:8b:50:8b:ca:dd:fc:9b:8e:23:19:04:33:38:ee:
e8:26:57:a2:9e:22:02:04:2f:77:4c:b3:b4:82:3a:
4a:76:97:b4:9c:bd:95:ed:93:ee:b5:af:dd:11:22:
fd:c5:a5:6c:86:9e:74:85:eb:02:a7:a8:eb:fc:45:
59:3e:8b:9b:35:c6:aa:ab:03:6d:48:04:48:12:d2:
2c:49:dd:10:71:bb:1d:2b:02:ea:3b:e0:26:ca:f2:
1e:a3:e0:4f:d7:9e:e9:a0:49:d6:dd:ee:6d:6e:f8:
7e:b7:93:fa:e5:eb:7f:19:bb:ab:95:08:f3:0c:c8:
73:00:2c:40:35:91:f1:02:0f:16:dc:5f:fe:10:b2:
11:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.161.0-192.141.163.255
IPv6:
2804:4244::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267489
Signature Algorithm: sha256WithRSAEncryption
13:5d:85:61:38:f0:34:c5:cd:b9:5d:31:06:b6:d8:cb:20:e6:
49:d2:55:97:d2:7a:d2:b5:8e:5c:e6:7a:9b:17:0b:b6:fc:d7:
52:b5:b4:8b:9f:f4:7c:a9:82:38:32:a4:39:fb:18:8a:41:93:
87:e2:03:92:5d:f7:c4:50:0d:c7:43:f3:4a:fa:35:ba:5a:cb:
08:71:1b:f1:fa:b0:e9:b3:40:b1:1c:4b:23:cf:ce:88:e1:3f:
89:ee:88:80:98:89:ac:fc:c0:c2:b6:d4:9d:a5:15:60:ac:45:
72:72:42:dd:eb:08:5b:00:1c:0b:3f:45:c0:19:1c:70:93:41:
94:3a:1d:34:a3:56:aa:32:51:e6:20:ae:88:e7:45:52:38:c7:
b6:94:cf:32:6a:13:ac:66:b8:0d:6d:ea:7f:9e:75:8b:ac:51:
87:cf:5f:a8:2f:3c:f6:a1:1e:90:7b:69:b8:7e:eb:3f:33:65:
8e:77:d2:15:c8:0f:81:fd:6e:1e:91:68:4e:a5:74:28:2d:0d:
64:5b:80:be:55:29:34:12:d4:e2:a0:32:3b:9f:9c:cd:4b:af:
e4:ab:b6:e8:c6:d6:0f:e6:ca:eb:48:80:f4:75:29:82:4f:8a:
24:b7:bd:51:a4:3a:88:b2:16:79:5a:4a:f2:71:4d:11:62:c7:
e1:80:f7:75
-----BEGIN CERTIFICATE-----
MIIGNzCCBR+gAwIBAgIUWkTR6rKftGvH5EBwhwquOl1OqfAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMjUxNDI1MDhaFw0yNTExMjQxNDMwMDhaMDMxMTAvBgNV
BAMTKDIzRUNENEQxQUY4OENFMkUxQjNERjZERjg3RkM3NkNDMTU3QTA3QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLDE08dxMZBQx1KeYVBg1h2Uvm
blKhWOWhtq+rqicSOxtBt7sJIZfPsBjr8YEevz62nl9+fItF4eH7NMhw8cgSEF7j
NAyz0U4/eZ5VTGpw56EZe9ToLlP97s+/DhpxSHcGBleSZaJvAsjA8j2C4dLkVuIu
kxoQmZ2LUIvK3fybjiMZBDM47ugmV6KeIgIEL3dMs7SCOkp2l7ScvZXtk+61r90R
Iv3FpWyGnnSF6wKnqOv8RVk+i5s1xqqrA21IBEgS0ixJ3RBxux0rAuo74CbK8h6j
4E/XnumgSdbd7m1u+H63k/rl638Zu6uVCPMMyHMALEA1kfECDxbcX/4QshFZAgMB
AAGjggNBMIIDPTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQj7NTRr4jOLhs9
9t+H/HbMFXoHwTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODVz
MXhCRXR4OEJHU3Y2d1BITnBieXIyTHBYWHBQQ0drdEhpSnZZdXgyN3QvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODVz
MXhCRXR4OEJHU3Y2d1BITnBieXIyTHBYWHBQQ0drdEhpSnZZdXgyN3QvMS8yM0VD
RDREMUFGODhDRTJFMUIzREY2REY4N0ZDNzZDQzE1N0EwN0MxLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcB
Af8EJzAlMBQEAgABMA4wDAMEAMCNoQMEAsCNoDANBAIAAjAHAwUAKARCRDAaBggr
BgEFBQcBCAEB/wQLMAmgBzAFAgMEFOEwDQYJKoZIhvcNAQELBQADggEBABNdhWE4
8DTFzbldMQa22Msg5knSVZfSetK1jlzmepsXC7b811K1tIuf9HypgjgypDn7GIpB
k4fiA5Jd98RQDcdD80r6NbpaywhxG/H6sOmzQLEcSyPPzojhP4nuiICYiaz8wMK2
1J2lFWCsRXJyQt3rCFsAHAs/RcAZHHCTQZQ6HTSjVqoyUeYgrojnRVI4x7aUzzJq
E6xmuA1t6n+edYusUYfPX6gvPPahHpB7abh+6z8zZY530hXID4H9bh6RaE6ldCgt
DWRbgL5VKTQS1OKgMjufnM1Lr+SrtujG1g/myutIgPR1KYJPiiS3vVGkOoiyFnla
SvJxTRFix+GA93U=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:34:10 2025 by rpki-client