Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.cer
File: 3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.cer (raw, json)
Hash identifier: 98NCnn16YqZ6GxmUB5u4Z20KeeeRXrsseT5gi+/wNkg=
Subject key identifier: 3B:5D:14:FF:9C:C2:B6:E6:1B:A5:F7:39:AA:5B:4A:7A:8E:CC:7A:28
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 14AF8346EB652E38F41224D1806E623FCA89802E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.mft
caRepository: rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 08:54:25 +0000
Certificate not after: Thu 03 Apr 2025 08:59:25 +0000
Subordinate resources: AS: 264075
IP: 45.166.164.0/22
IP: 143.0.24.0/22
IP: 143.208.20.0/22
IP: 168.227.52.0/22
IP: 186.235.120.0/21
IP: 2804:2a7c::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:af:83:46:eb:65:2e:38:f4:12:24:d1:80:6e:62:3f:ca:89:80:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 08:54:25 2024 GMT
Not After : Apr 3 08:59:25 2025 GMT
Subject: CN=3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0a:e7:a1:38:d1:9c:c3:83:0c:79:5d:45:04:
7e:f7:d4:76:29:a9:fb:05:5c:82:d3:fc:5e:43:e0:
fe:e0:80:c1:a3:71:20:66:1d:c2:51:b4:a9:9c:e1:
81:c6:47:00:75:1b:f9:65:d8:55:cd:70:da:f8:b4:
c9:2a:30:37:99:6c:a5:8a:20:83:34:51:b6:49:ad:
72:5c:0e:1a:dc:d0:d5:b3:dd:d9:0a:bd:bb:b2:bd:
1f:a4:1b:d1:60:88:44:d5:32:7c:e2:09:32:ef:2d:
a9:b8:e9:96:13:bf:54:a7:76:9f:da:22:bf:8f:b9:
d0:39:07:85:76:93:25:48:2c:af:a5:2a:06:5e:26:
be:2e:5e:8e:d8:63:62:07:df:7a:1d:80:45:86:b3:
75:ee:f5:16:04:04:20:22:6a:f4:f5:e3:82:f2:35:
0a:99:d5:0e:b4:ff:b9:90:43:69:8e:fb:29:2b:f5:
b2:53:25:cf:89:19:30:78:c4:00:44:f9:15:4a:15:
7e:b7:8e:06:19:ee:1c:87:81:a5:a4:4c:ea:8c:e3:
dc:87:6e:4b:69:b1:9a:d7:23:bb:23:e2:0c:6c:3b:
f9:56:cc:48:aa:7a:af:90:46:6f:9a:f4:24:41:bd:
c3:27:56:0d:48:f6:e4:44:0a:73:c8:81:1e:18:c0:
95:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3B:5D:14:FF:9C:C2:B6:E6:1B:A5:F7:39:AA:5B:4A:7A:8E:CC:7A:28
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.166.164.0/22
143.0.24.0/22
143.208.20.0/22
168.227.52.0/22
186.235.120.0/21
IPv6:
2804:2a7c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264075
Signature Algorithm: sha256WithRSAEncryption
6f:b8:ef:74:12:e6:8f:b5:f5:62:5d:e2:77:9a:61:c3:b5:33:
7e:79:7f:6e:42:98:48:20:43:86:40:d2:b9:a9:29:ef:b9:54:
62:b6:13:07:1e:2f:8e:7a:64:2d:d2:bf:5e:2e:14:85:93:8c:
96:f1:b9:38:57:7a:37:bb:18:49:7c:d5:b2:5e:63:4c:09:f0:
e8:ad:be:1e:98:5c:52:7b:40:f4:1c:29:97:42:58:fc:b5:ba:
a0:41:fe:6e:fc:78:ec:a5:a1:43:62:a7:22:f7:19:ac:fe:9d:
a2:1e:e0:65:fa:dd:43:e7:73:56:cd:99:77:23:4e:7c:9a:4a:
aa:ab:46:b5:0b:24:60:f7:e1:1d:b5:fd:57:81:26:3d:d6:4f:
fe:08:26:3c:cc:3c:2e:55:0c:97:25:f0:fd:8b:89:bf:53:5a:
ca:f1:51:d3:5e:64:8e:d5:52:b1:1a:a8:34:d9:f6:a3:e8:6b:
be:1b:7d:a0:0d:8a:49:fe:68:17:8a:ba:62:aa:36:29:c2:8f:
5c:26:bf:f5:5f:fc:87:f1:bf:f4:54:ea:40:3b:44:2c:e2:20:
84:c5:5f:2b:f4:27:a8:fb:1e:c4:e2:a6:67:89:69:5f:4e:37:
09:f6:1e:b5:54:a1:2f:a5:df:78:48:10:6e:03:97:29:b9:b3:
b7:77:8a:0b
-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgIUFK+DRutlLjj0EiTRgG5iP8qJgC4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwODU0MjVaFw0yNTA0MDMwODU5MjVaMDMxMTAvBgNV
BAMTKDNCNUQxNEZGOUNDMkI2RTYxQkE1RjczOUFBNUI0QTdBOEVDQzdBMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiCuehONGcw4MMeV1FBH731HYp
qfsFXILT/F5D4P7ggMGjcSBmHcJRtKmc4YHGRwB1G/ll2FXNcNr4tMkqMDeZbKWK
IIM0UbZJrXJcDhrc0NWz3dkKvbuyvR+kG9FgiETVMnziCTLvLam46ZYTv1Sndp/a
Ir+PudA5B4V2kyVILK+lKgZeJr4uXo7YY2IH33odgEWGs3Xu9RYEBCAiavT144Ly
NQqZ1Q60/7mQQ2mO+ykr9bJTJc+JGTB4xABE+RVKFX63jgYZ7hyHgaWkTOqM49yH
bktpsZrXI7sj4gxsO/lWzEiqeq+QRm+a9CRBvcMnVg1I9uRECnPIgR4YwJW9AgMB
AAGjggNRMIIDTTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ7XRT/nMK25hul
9zmqW0p6jsx6KDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNm42
ZzFrUHVENThCZVNWa1g3R3U0U0tpNVFXWHkxOW9UcHZwdmkzYzNranQvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNm42
ZzFrUHVENThCZVNWa1g3R3U0U0tpNVFXWHkxOW9UcHZwdmkzYzNranQvMS8zQjVE
MTRGRjlDQzJCNkU2MUJBNUY3MzlBQTVCNEE3QThFQ0M3QTI4Lm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwRgYIKwYBBQUHAQcB
Af8ENzA1MCQEAgABMB4DBAItpqQDBAKPABgDBAKP0BQDBAKo4zQDBAO663gwDQQC
AAIwBwMFACgEKnwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAeLMA0GCSqGSIb3
DQEBCwUAA4IBAQBvuO90EuaPtfViXeJ3mmHDtTN+eX9uQphIIEOGQNK5qSnvuVRi
thMHHi+OemQt0r9eLhSFk4yW8bk4V3o3uxhJfNWyXmNMCfDorb4emFxSe0D0HCmX
Qlj8tbqgQf5u/HjspaFDYqci9xms/p2iHuBl+t1D53NWzZl3I058mkqqq0a1CyRg
9+Edtf1XgSY91k/+CCY8zDwuVQyXJfD9i4m/U1rK8VHTXmSO1VKxGqg02faj6Gu+
G32gDYpJ/mgXirpiqjYpwo9cJr/1X/yH8b/0VOpAO0Qs4iCExV8r9Ceo+x7E4qZn
iWlfTjcJ9h61VKEvpd94SBBuA5cpubO3d4oL
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:31 2025 by rpki-client