Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/38E14B86FE172DD4D8E534146604EB873463394D.cer
File: 38E14B86FE172DD4D8E534146604EB873463394D.cer (raw, json)
Hash identifier: ec36365Dd0kQq0E9FsZQtswsnxbS8dFGB/3DJKm5dJA=
Subject key identifier: 38:E1:4B:86:FE:17:2D:D4:D8:E5:34:14:66:04:EB:87:34:63:39:4D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 435B500DDB7C044D056BC6B20A7D05F7341406E1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.mft
caRepository: rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 16 Dec 2024 19:28:29 +0000
Certificate not after: Mon 15 Dec 2025 19:33:29 +0000
Subordinate resources: AS: 271428
IP: 200.36.192.0/22
IP: 2804:7b60::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 07 Apr 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:5b:50:0d:db:7c:04:4d:05:6b:c6:b2:0a:7d:05:f7:34:14:06:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 16 19:28:29 2024 GMT
Not After : Dec 15 19:33:29 2025 GMT
Subject: CN=38E14B86FE172DD4D8E534146604EB873463394D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:48:43:b5:53:e8:82:57:35:61:2f:12:b7:
8c:f8:b4:0d:91:6c:cb:c1:2c:d8:25:0a:59:09:b9:
dd:21:b0:30:f3:f0:56:e4:18:43:61:68:c5:24:fe:
b3:ff:bf:6f:ee:1f:d9:dd:46:53:71:c4:0b:b5:e0:
53:87:f4:dd:7c:2c:ef:93:f0:44:16:4e:4b:dd:f8:
40:05:57:33:f0:36:96:77:82:f4:9d:b1:f0:aa:56:
21:f8:f5:55:47:f2:c4:f9:17:9b:ec:3c:50:af:30:
32:75:90:1e:16:e3:9d:99:86:79:fe:e3:51:dc:25:
23:f1:20:82:63:33:65:ad:bc:38:42:4c:e3:68:24:
e8:60:36:a7:f9:0c:72:9c:17:37:a8:46:a5:f1:92:
95:1f:de:91:06:a4:c3:85:ab:0e:32:51:8e:39:62:
fd:3f:6c:55:a6:a0:29:56:36:83:3d:37:d1:ac:81:
e5:08:74:d8:85:35:20:4f:7a:7a:a8:5c:cc:fd:49:
e3:5c:a9:17:eb:14:91:4f:41:29:dd:05:9d:3b:27:
72:b5:42:ab:e2:48:2c:27:e5:42:bb:b4:2a:b6:4f:
f3:36:45:49:4c:9a:be:5b:e3:17:d9:f9:22:4b:49:
46:b6:ec:47:ea:8d:a3:58:a0:f6:3d:e9:6a:5a:57:
5e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
38:E1:4B:86:FE:17:2D:D4:D8:E5:34:14:66:04:EB:87:34:63:39:4D
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.36.192.0/22
IPv6:
2804:7b60::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271428
Signature Algorithm: sha256WithRSAEncryption
97:23:a8:03:a2:61:64:33:b8:c3:aa:78:16:41:df:de:63:8f:
46:6d:a9:d3:f4:6c:5d:a7:36:70:42:46:5b:08:00:21:60:8a:
0a:93:28:c8:8e:cb:03:c9:ef:2c:04:58:7b:eb:d8:3f:cf:cd:
68:94:20:14:63:4f:94:09:0d:ef:d7:9e:fe:94:85:7f:73:9f:
e4:5e:29:f2:7f:e0:a2:2f:30:c9:41:32:f7:9b:3a:84:db:21:
65:8d:f4:94:7e:1e:22:e6:10:73:ec:f0:14:e5:e5:51:b7:75:
a9:c5:06:22:6f:87:67:61:44:aa:da:36:65:c2:0e:41:a5:1e:
15:d5:32:e3:35:cd:84:1f:22:f9:59:af:4d:58:d4:cc:5c:6c:
09:75:02:db:7d:01:ef:1a:13:61:f7:00:88:a6:76:41:94:fc:
e6:44:d9:f8:45:84:fe:c6:08:b7:d0:cd:6e:6d:38:97:c3:07:
c3:3a:30:3c:2c:9c:28:1a:b0:08:dc:5b:cf:2f:31:8e:7c:0c:
92:05:06:24:01:ff:32:db:3d:0a:61:e7:4b:ea:6f:d1:56:6b:
0f:4d:77:d2:4d:04:a0:c7:b3:b7:87:dc:33:c3:0f:b8:5b:4f:
c5:19:d6:b7:2f:ff:8d:58:af:df:23:d9:11:0e:62:cb:10:a2:
84:47:c3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:04:56 2025 by rpki-client