Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer
File: 33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer (raw, json)
Hash identifier: MHFtJexCFR+bon2g0hLL7xqB/CshJrDM2MQfyatwAK0=
Subject key identifier: 33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 14D8F8128A66EE687300036FCA9B79A812D45F09
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft
caRepository: rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 07 Mar 2025 08:24:38 +0000
Certificate not after: Fri 06 Mar 2026 08:29:38 +0000
Subordinate resources: AS: 267543
IP: 45.70.16.0/22
IP: 2804:4304::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:d8:f8:12:8a:66:ee:68:73:00:03:6f:ca:9b:79:a8:12:d4:5f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 7 08:24:38 2025 GMT
Not After : Mar 6 08:29:38 2026 GMT
Subject: CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:ac:f2:7c:20:63:3f:47:cd:3b:30:74:88:
af:00:e7:a0:71:26:29:e9:91:ef:02:dd:a8:2f:03:
05:04:f9:e2:40:4d:29:da:4c:dd:b0:65:bd:b6:c2:
80:d7:9f:e4:f1:e9:06:f4:42:55:25:7d:8a:c3:2d:
5e:8a:0b:92:96:42:67:60:a0:08:cf:17:48:9d:8b:
c9:a3:57:3b:5c:63:8f:02:fe:2c:66:b3:fc:51:ce:
18:c5:5a:5b:0d:2e:1a:5c:dc:c4:96:aa:c7:23:8a:
4a:df:98:cf:d0:80:4b:51:a3:f0:7b:4e:ba:2b:c5:
be:3b:c1:6d:bf:d2:52:60:05:af:cd:15:ae:b2:a2:
22:be:b5:b5:27:6a:10:3d:41:05:27:5e:f0:24:d7:
18:ec:bb:96:d9:99:ff:14:11:ac:f6:fe:58:fd:5f:
1c:7c:41:78:15:d5:81:99:bb:88:ca:6b:76:30:b8:
e2:ba:74:86:ab:86:84:3a:df:de:7a:3b:f6:03:c8:
2a:3d:85:6e:3a:04:f2:e2:23:b8:e7:88:21:69:ab:
5b:1e:ed:f6:87:c7:e1:20:fd:c2:d5:f4:f4:6e:3c:
96:52:51:a3:f8:0b:03:92:2b:e1:5f:74:20:a4:75:
dc:68:73:4c:64:d8:cc:96:fd:56:10:09:01:8c:1e:
3a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.16.0/22
IPv6:
2804:4304::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267543
Signature Algorithm: sha256WithRSAEncryption
96:ad:2c:cd:3d:04:be:53:fe:d1:bd:9c:f2:8d:a1:0d:95:18:
7d:79:60:bf:a7:4a:03:b0:c7:3c:e0:85:aa:52:f2:a0:66:31:
59:bf:49:ad:ea:47:ec:f1:16:5e:cb:2c:4a:c5:2a:1a:2d:e4:
da:db:4a:04:0a:02:67:62:65:36:18:52:65:6d:ef:d5:49:7f:
fb:f5:a6:b8:ea:19:3f:5a:5a:b2:97:7b:43:34:98:eb:80:cf:
3e:26:ef:27:ad:18:fe:79:9f:47:a6:fa:22:5e:8e:c6:d1:c4:
e8:f7:9a:5c:8b:c5:14:6b:7c:b1:99:7c:1a:af:ea:85:42:d6:
78:11:b0:57:29:de:95:38:90:65:57:c6:15:25:fb:9d:41:14:
f5:1b:ed:c1:42:2f:61:ad:20:c3:25:01:d3:13:2e:24:fd:39:
90:73:00:80:08:2a:0a:c1:77:e3:b2:19:84:e1:c7:a4:c1:ff:
b7:89:69:a1:6c:69:c5:50:61:57:d5:08:9e:c7:fe:c5:b8:65:
76:f9:af:3c:eb:45:d0:77:dc:81:8e:c1:77:85:e4:36:2b:16:
57:6d:b7:81:c3:ff:28:e2:61:55:50:5c:fd:50:1d:49:d3:f3:
79:6c:1c:b0:80:ef:4e:45:41:b6:b8:e3:73:85:76:b8:eb:8a:
a3:9b:be:14
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUFNj4Eopm7mhzAANvypt5qBLUXwkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDcwODI0MzhaFw0yNjAzMDYwODI5MzhaMDMxMTAvBgNV
BAMTKDMzRUFBMUFDQTNBNjk3OEFFQzJEMkRGNEQyOUVCNEIzNTlCM0Y2OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsPqzyfCBjP0fNOzB0iK8A56Bx
Jinpke8C3agvAwUE+eJATSnaTN2wZb22woDXn+Tx6Qb0QlUlfYrDLV6KC5KWQmdg
oAjPF0idi8mjVztcY48C/ixms/xRzhjFWlsNLhpc3MSWqscjikrfmM/QgEtRo/B7
Trorxb47wW2/0lJgBa/NFa6yoiK+tbUnahA9QQUnXvAk1xjsu5bZmf8UEaz2/lj9
Xxx8QXgV1YGZu4jKa3YwuOK6dIarhoQ63956O/YDyCo9hW46BPLiI7jniCFpq1se
7faHx+Eg/cLV9PRuPJZSUaP4CwOSK+FfdCCkddxoc0xk2MyW/VYQCQGMHjojAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQz6qGso6aXiuwt
LfTSnrSzWbP2mzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFhY
Um41TkVNMjdKZ3hZcFV3ek1Eelhjc1ZKWHdCd2VYVVd1NDJTTGppTWMvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RY
WFJuNU5FTTI3Smd4WXBVd3pNRHpYY3NWSlh3QndlWFVXdTQyU0xqaU1jLzEvMzNF
QUExQUNBM0E2OTc4QUVDMkQyREY0RDI5RUI0QjM1OUIzRjY5Qi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLUYQMA0EAgACMAcDBQAoBEMEMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQVFzANBgkqhkiG9w0BAQsFAAOCAQEAlq0szT0EvlP+0b2c
8o2hDZUYfXlgv6dKA7DHPOCFqlLyoGYxWb9JrepH7PEWXsssSsUqGi3k2ttKBAoC
Z2JlNhhSZW3v1Ul/+/WmuOoZP1paspd7QzSY64DPPibvJ60Y/nmfR6b6Il6OxtHE
6PeaXIvFFGt8sZl8Gq/qhULWeBGwVynelTiQZVfGFSX7nUEU9RvtwUIvYa0gwyUB
0xMuJP05kHMAgAgqCsF347IZhOHHpMH/t4lpoWxpxVBhV9UInsf+xbhldvmvPOtF
0HfcgY7Bd4XkNisWV223gcP/KOJhVVBc/VAdSdPzeWwcsIDvTkVBtrjjc4V2uOuK
o5u+FA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:20:02 2025 by rpki-client