Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
File: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer (raw, json)
Hash identifier: P5JPL656uilSR6Fex/+FQtOGw+/iUFDp+9XWsCcolgI=
Subject key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3AFA15D32053B4158ABF52357398699C845292FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft
caRepository: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 20 Mar 2025 18:21:21 +0000
Certificate not after: Thu 19 Mar 2026 18:26:21 +0000
Subordinate resources: AS: 263528
IP: 170.254.4.0/22
IP: 191.253.64.0/22
IP: 2804:1350::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:fa:15:d3:20:53:b4:15:8a:bf:52:35:73:98:69:9c:84:52:92:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 20 18:21:21 2025 GMT
Not After : Mar 19 18:26:21 2026 GMT
Subject: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fa:6a:9e:c5:be:95:73:70:ad:a4:63:1a:2e:
aa:1b:59:55:5c:13:47:b6:5b:90:63:9f:ad:6e:e7:
81:c1:2e:4e:fd:e4:46:8d:df:83:cd:1f:9b:16:40:
a3:bf:9b:2b:a2:e5:25:13:a2:64:d6:f0:e7:77:a8:
b6:ec:ce:2c:c4:4e:cc:d5:f0:20:e3:39:50:7c:b9:
e9:78:76:83:f3:af:d1:25:da:7d:cf:97:34:fc:da:
1a:cf:c7:5e:b3:82:55:8f:37:04:3c:71:f0:b7:04:
36:aa:c3:68:6d:e4:1b:11:35:25:2d:89:50:48:2e:
03:b0:ca:bd:1b:79:a2:fa:41:6a:ef:9b:e1:c0:4c:
40:fd:31:99:e1:cc:61:4d:89:6b:14:e7:e3:68:3a:
be:10:7b:c8:ca:c2:fe:ce:28:06:ad:7e:8f:e8:c7:
f7:c1:a6:87:3a:a5:4a:3c:f7:c5:8e:4b:71:d6:6f:
f9:e5:4f:b7:fb:ac:91:18:02:2d:43:52:48:6c:87:
4c:4a:d0:17:50:64:09:c2:f0:e9:6a:93:e7:70:6b:
03:60:36:4a:f8:1f:9c:bc:d8:63:f9:d0:b3:3c:02:
02:21:08:76:28:bc:b3:b6:29:4e:7d:4f:10:9a:84:
26:24:47:72:0f:10:2f:c4:75:de:72:63:8b:d4:63:
a8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.4.0/22
191.253.64.0/22
IPv6:
2804:1350::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263528
Signature Algorithm: sha256WithRSAEncryption
1e:7d:df:7a:36:81:68:91:ea:54:06:8c:08:81:70:ca:6c:12:
d5:f4:b2:60:3c:cb:da:87:49:48:97:98:e6:b0:bc:ac:9f:f3:
1c:59:aa:07:19:0a:14:a7:e9:42:8a:0e:51:f1:ba:3f:7a:a0:
5c:d3:a8:5d:22:06:83:1a:45:b4:ce:52:69:c6:f1:0e:4d:4a:
c2:c2:ef:88:a2:5f:37:76:dd:b3:da:fa:c4:57:60:13:0c:00:
60:be:85:63:29:99:e3:65:57:0a:71:4a:d2:19:cc:e9:b3:7e:
fe:c8:e2:fe:dc:22:0c:c6:59:01:da:22:9a:c7:f1:b0:5f:8d:
5e:ee:94:04:3c:68:b2:ae:17:33:d7:4a:b0:5d:68:0e:8b:23:
14:22:e1:eb:3e:20:7a:d5:fb:a8:d5:0e:6a:27:70:08:25:4c:
04:a3:ae:15:cf:4b:7d:00:dc:d7:35:a4:0d:31:06:9f:f8:c8:
8c:5a:d9:9c:da:6f:78:8a:fc:aa:f3:e4:6c:40:65:f7:26:82:
3a:fd:31:02:ba:3c:40:97:6c:a4:23:68:c5:67:ef:3b:8b:95:
00:a6:6f:9f:82:f5:dd:10:f2:d6:be:de:3b:f9:30:93:00:86:
91:f9:9b:66:c0:e2:cb:fc:15:ed:9f:78:b2:f4:06:09:55:4c:
5e:fa:28:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:06:40 2025 by rpki-client