Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3BCE948E59955EF881BD1ECD2DE385FE7959F195.cer
File: 3BCE948E59955EF881BD1ECD2DE385FE7959F195.cer (raw, json)
Hash identifier: s0NMNXDf8BGNtG8qdiu3Erdy4zIYWfLWCaKCLlXXoLw=
Subject key identifier: 3B:CE:94:8E:59:95:5E:F8:81:BD:1E:CD:2D:E3:85:FE:79:59:F1:95
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 35BCB0613BF115F87548A1AE487FF44D70691FB0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2/3BCE948E59955EF881BD1ECD2DE385FE7959F195.mft
caRepository: rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 28 May 2024 11:05:06 +0000
Certificate not after: Tue 27 May 2025 11:10:06 +0000
Subordinate resources: AS: 28343
IP: 45.65.196.0/22
IP: 45.234.184.0/22
IP: 131.72.108.0/22
IP: 131.72.148.0/22
IP: 131.100.92.0/22
IP: 131.161.16.0/22
IP: 131.161.144.0/22
IP: 131.221.88.0/22
IP: 131.221.176.0/22
IP: 132.255.12.0/22
IP: 138.0.200.0/22
IP: 138.36.204.0/22
IP: 138.94.72.0/22
IP: 138.94.188.0/22
IP: 138.97.136.0/22
IP: 138.99.20.0/22
IP: 138.118.28.0/22
IP: 138.118.148.0/22
IP: 138.118.196.0/22
IP: 138.121.188.0/22
IP: 138.122.208.0/22
IP: 138.204.60.0/22
IP: 143.0.212.0/22
IP: 143.208.96.0/22
IP: 143.208.196.0/22
IP: 143.208.212.0/22
IP: 143.255.220.0/22
IP: 167.249.224.0/22
IP: 167.250.176.0/22
IP: 168.0.120.0/22
IP: 168.194.36.0/22
IP: 168.196.132.0/22
IP: 168.232.24.0/22
IP: 168.232.232.0/22
IP: 170.78.198.0/23
IP: 170.78.212.0/22
IP: 170.81.216.0/21
IP: 170.82.176.0/22
IP: 170.82.240.0/22
IP: 170.84.120.0/22
IP: 170.231.24.0/22
IP: 170.238.216.0/22
IP: 170.246.200.0/22
IP: 170.254.220.0/22
IP: 177.8.240.0/21
IP: 177.10.96.0/20
IP: 177.22.0.0/20
IP: 177.53.124.0/22
IP: 177.54.0.0/20
IP: 177.66.144.0/22
IP: 177.67.200.0/21
IP: 177.72.40.0/21
IP: 177.73.136.0/21
IP: 177.73.184.0/22
IP: 177.74.208.0/20
IP: 177.74.240.0/20
IP: 177.101.96.0/19
IP: 177.104.0.0/20
IP: 177.107.160.0/20
IP: 177.125.104.0/22
IP: 177.125.232.0/21
IP: 177.129.104.0/22
IP: 177.130.224.0/20
IP: 177.130.248.0/21
IP: 177.136.160.0/21
IP: 177.184.144.0/21
IP: 177.200.192.0/19
IP: 177.221.160.0/20
IP: 179.127.160.0/19
IP: 179.190.96.0/19
IP: 186.193.160.0/20
IP: 186.208.16.0/20
IP: 186.209.16.0/20
IP: 186.209.192.0/20
IP: 186.216.240.0/20
IP: 186.225.0.0/20
IP: 186.226.144.0/20
IP: 186.227.136.0/21
IP: 186.235.56.0/22
IP: 186.237.144.0/21
IP: 186.249.192.0/20
IP: 186.251.108.0/22
IP: 187.45.64.0/20
IP: 187.85.160.0/19
IP: 187.87.96.0/20
IP: 187.94.96.0/20
IP: 187.102.0.0/20
IP: 187.108.208.0/20
IP: 189.28.192.0/19
IP: 189.45.192.0/20
IP: 189.90.48.0/20
IP: 189.113.224.0/19
IP: 189.127.16.0/20
IP: 191.6.88.0/21
IP: 191.37.172.0/22
IP: 191.52.240.0/21
IP: 191.240.216.0/21
IP: 191.253.96.0/19
IP: 200.10.4.0/22
IP: 200.34.224.0/19
IP: 200.50.216.0/22
IP: 201.49.244.0/22
IP: 201.131.80.0/21
IP: 201.131.136.0/21
IP: 201.131.156.0/22
IP: 201.159.248.0/22
IP: 2804:c::/32
IP: 2804:30c::/32
IP: 2804:ed8::/32
IP: 2804:f58::/32
IP: 2804:fe4::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 30 Jun 2024 04:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:bc:b0:61:3b:f1:15:f8:75:48:a1:ae:48:7f:f4:4d:70:69:1f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: May 28 11:05:06 2024 GMT
Not After : May 27 11:10:06 2025 GMT
Subject: CN=3BCE948E59955EF881BD1ECD2DE385FE7959F195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:95:cd:af:41:1f:4d:3d:3d:61:4f:85:e5:d1:
f6:4d:4a:52:8f:36:b3:3b:31:73:4d:91:e7:22:a8:
d7:5a:ff:4b:79:84:7a:5b:65:a3:d9:71:dd:f2:db:
8c:69:21:f6:5c:21:db:31:5e:fa:ed:42:41:ca:03:
0d:11:42:97:f5:65:64:7f:60:1c:52:aa:71:ce:bf:
1e:b1:0b:da:36:c8:27:b1:c5:12:e5:3f:f9:5b:a9:
d7:1e:67:fe:4f:a0:bf:62:4f:cb:51:3b:f0:7d:88:
4e:15:90:82:9c:8b:d4:24:e3:f5:ff:d5:dc:44:86:
2c:2e:b5:34:f2:4a:62:5c:c9:74:fa:82:da:0c:ae:
b8:ef:29:72:3a:85:9f:2f:e6:e7:99:c9:65:b7:20:
42:ba:19:70:4f:c3:f1:3e:16:73:da:75:ec:96:08:
64:b1:6e:49:3f:39:85:3b:27:b6:51:dd:97:91:8e:
2a:28:da:62:2a:48:3d:3b:fe:e7:4a:15:97:46:b7:
da:f7:9e:68:9d:eb:ad:3b:69:ac:ca:5a:31:31:15:
fa:45:35:ec:65:87:e5:c0:f4:4c:c0:ff:4d:a9:b5:
a7:e0:1b:78:3f:33:c7:f4:f7:57:75:ff:82:4a:43:
a3:43:b3:5b:0e:73:2b:19:10:76:45:5d:7e:8c:bb:
6a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3B:CE:94:8E:59:95:5E:F8:81:BD:1E:CD:2D:E3:85:FE:79:59:F1:95
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2/3BCE948E59955EF881BD1ECD2DE385FE7959F195.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.196.0/22
45.234.184.0/22
131.72.108.0/22
131.72.148.0/22
131.100.92.0/22
131.161.16.0/22
131.161.144.0/22
131.221.88.0/22
131.221.176.0/22
132.255.12.0/22
138.0.200.0/22
138.36.204.0/22
138.94.72.0/22
138.94.188.0/22
138.97.136.0/22
138.99.20.0/22
138.118.28.0/22
138.118.148.0/22
138.118.196.0/22
138.121.188.0/22
138.122.208.0/22
138.204.60.0/22
143.0.212.0/22
143.208.96.0/22
143.208.196.0/22
143.208.212.0/22
143.255.220.0/22
167.249.224.0/22
167.250.176.0/22
168.0.120.0/22
168.194.36.0/22
168.196.132.0/22
168.232.24.0/22
168.232.232.0/22
170.78.198.0/23
170.78.212.0/22
170.81.216.0/21
170.82.176.0/22
170.82.240.0/22
170.84.120.0/22
170.231.24.0/22
170.238.216.0/22
170.246.200.0/22
170.254.220.0/22
177.8.240.0/21
177.10.96.0/20
177.22.0.0/20
177.53.124.0/22
177.54.0.0/20
177.66.144.0/22
177.67.200.0/21
177.72.40.0/21
177.73.136.0/21
177.73.184.0/22
177.74.208.0/20
177.74.240.0/20
177.101.96.0/19
177.104.0.0/20
177.107.160.0/20
177.125.104.0/22
177.125.232.0/21
177.129.104.0/22
177.130.224.0/20
177.130.248.0/21
177.136.160.0/21
177.184.144.0/21
177.200.192.0/19
177.221.160.0/20
179.127.160.0/19
179.190.96.0/19
186.193.160.0/20
186.208.16.0/20
186.209.16.0/20
186.209.192.0/20
186.216.240.0/20
186.225.0.0/20
186.226.144.0/20
186.227.136.0/21
186.235.56.0/22
186.237.144.0/21
186.249.192.0/20
186.251.108.0/22
187.45.64.0/20
187.85.160.0/19
187.87.96.0/20
187.94.96.0/20
187.102.0.0/20
187.108.208.0/20
189.28.192.0/19
189.45.192.0/20
189.90.48.0/20
189.113.224.0/19
189.127.16.0/20
191.6.88.0/21
191.37.172.0/22
191.52.240.0/21
191.240.216.0/21
191.253.96.0/19
200.10.4.0/22
200.34.224.0/19
200.50.216.0/22
201.49.244.0/22
201.131.80.0/21
201.131.136.0/21
201.131.156.0/22
201.159.248.0/22
IPv6:
2804:c::/32
2804:30c::/32
2804:ed8::/32
2804:f58::/32
2804:fe4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28343
Signature Algorithm: sha256WithRSAEncryption
bd:0f:59:bd:9e:65:84:d9:1b:24:96:27:80:73:99:c5:b9:9a:
86:0f:11:56:20:63:31:a5:cc:ec:12:1f:ba:e7:2c:00:cf:44:
f1:67:47:e5:10:e2:e5:be:3e:c2:70:f9:99:bf:f6:7b:63:8a:
92:30:8a:ea:43:c5:21:69:61:82:1e:3b:bc:8e:71:72:33:ee:
28:6f:dd:56:f0:11:7a:e0:b7:73:5e:f4:7c:2e:ef:35:8f:ba:
79:e3:ea:3a:d3:82:1a:78:bb:21:4b:0b:b2:05:dd:69:6e:5b:
36:f1:d3:f6:84:32:8e:35:13:4a:de:b4:ef:31:71:08:3d:53:
5d:40:cd:1f:7d:50:e8:17:3d:cd:3a:c6:0b:ad:a0:13:5f:d1:
f6:37:68:ca:85:da:34:05:27:13:21:a1:77:48:21:22:15:10:
6b:79:5b:89:0d:54:e7:b7:01:ee:e3:7a:0e:2f:ca:c5:d8:ce:
ad:99:db:fd:ad:57:b4:eb:d1:97:0a:e9:83:4b:6e:a9:ca:4b:
f8:ec:11:15:2e:e3:c0:d3:15:a5:22:e5:38:09:af:3b:ed:17:
51:6d:e0:21:ae:00:89:78:41:68:ff:d0:00:81:a7:3f:f3:e6:
7b:fa:22:3d:8f:38:9e:11:39:5e:f0:86:3d:15:2d:fc:29:a2:
db:d0:b6:2b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:53 2024 by rpki-client on console-ams.rpki-client.org