
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/436A9B90ED51860630E8C108585933E381FE4900.cer
File: 436A9B90ED51860630E8C108585933E381FE4900.cer (raw, json)
Hash identifier: gZWhsTTNmAuTYD6xxhwjjHMvBN0WCLTeWLJW5n5Mo7A=
Subject key identifier: 43:6A:9B:90:ED:51:86:06:30:E8:C1:08:58:59:33:E3:81:FE:49:00
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5A7BE4E96992EC8A30E94E1669F74A7AFD0C46FF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/436A9B90ED51860630E8C108585933E381FE4900.mft
caRepository: rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 17 Mar 2025 20:36:43 +0000
Certificate not after: Mon 16 Mar 2026 20:41:43 +0000
Subordinate resources: AS: 262669
IP: 138.94.224.0/22
IP: 143.202.148.0/22
IP: 170.78.68.0/22
IP: 177.22.224.0/20
IP: 187.73.240.0/20
IP: 189.39.192.0/20
IP: 2804:13d8::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:7b:e4:e9:69:92:ec:8a:30:e9:4e:16:69:f7:4a:7a:fd:0c:46:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 17 20:36:43 2025 GMT
Not After : Mar 16 20:41:43 2026 GMT
Subject: CN=436A9B90ED51860630E8C108585933E381FE4900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:48:57:ea:09:04:ff:86:a6:b1:ff:0f:d9:
51:83:8e:04:86:53:55:6a:6c:76:11:6c:87:06:2e:
aa:a9:29:2b:ef:16:1e:81:9e:01:e1:57:85:5b:c5:
f4:04:10:33:28:81:46:50:23:99:2d:b5:61:24:01:
f8:03:9a:33:c5:a4:d3:f2:04:fa:dd:18:4e:ad:3f:
c7:be:00:44:10:db:36:fc:94:e3:bc:ac:bd:64:4b:
42:ba:63:83:6a:85:2e:ce:8e:45:75:52:2c:8e:a9:
f1:4e:8b:e5:ae:43:32:cb:29:41:fb:a6:bf:d0:87:
8d:4e:94:16:a8:a3:19:1d:45:9b:0c:2d:40:76:6d:
0e:dc:31:a6:1e:a7:01:42:af:47:d4:e3:5c:71:6e:
89:94:f3:b9:7a:16:de:7d:46:40:83:b8:2b:6a:22:
ac:8c:92:76:cb:e5:f4:b3:be:ad:df:86:62:7a:c5:
d0:f4:0b:67:4e:9d:32:27:30:3d:13:ab:54:b5:b2:
2d:8a:da:12:f6:6e:36:92:47:ca:7b:5c:38:19:72:
5c:09:2d:fb:53:c3:22:b9:85:6f:64:88:d6:b2:8e:
f4:ff:e0:4d:d1:af:d6:c9:d3:59:9f:94:c8:6e:ea:
a6:c3:f2:70:7b:fb:87:a1:8c:08:87:88:19:c1:57:
08:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
43:6A:9B:90:ED:51:86:06:30:E8:C1:08:58:59:33:E3:81:FE:49:00
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/436A9B90ED51860630E8C108585933E381FE4900.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.94.224.0/22
143.202.148.0/22
170.78.68.0/22
177.22.224.0/20
187.73.240.0/20
189.39.192.0/20
IPv6:
2804:13d8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262669
Signature Algorithm: sha256WithRSAEncryption
6e:19:d1:01:a1:40:e3:18:7a:cc:43:7a:4e:d6:22:ad:ac:10:
55:00:d8:42:4b:b3:c1:2c:35:aa:6c:b2:fb:0d:e3:ee:91:bc:
09:fe:79:f8:3e:be:b3:21:9d:56:c9:da:3d:e7:bb:6f:ea:64:
f7:f2:67:36:20:73:15:2b:8b:f7:56:09:38:10:31:ce:65:1e:
7b:dd:67:b0:11:e0:ab:73:19:83:f4:51:c0:66:b8:7b:b1:3d:
42:5c:dc:2b:39:f0:71:88:db:ff:eb:a1:f5:8f:83:36:d5:a2:
b7:21:b6:90:a4:35:e4:7d:2e:fd:46:7a:a8:4e:2d:18:66:e6:
83:42:75:2f:fa:1d:7f:e0:ad:00:09:11:58:40:74:ac:ec:03:
2c:4b:74:be:9a:0f:b2:d5:ba:18:ca:d9:92:b5:59:25:5c:2e:
ed:0c:bd:f5:c7:91:42:74:39:44:7a:20:49:3f:5a:09:3d:29:
80:9e:df:4d:c0:b5:de:d2:29:40:83:d5:f9:09:17:8f:dc:11:
4a:85:f5:ba:84:16:63:c1:d3:9f:2b:7c:90:5c:c2:bb:a6:3b:
79:d8:5b:85:93:b4:8a:28:18:c5:36:fe:a4:3d:2e:52:32:58:
6d:0f:b2:2d:60:bc:56:c1:50:ed:c3:8d:16:6c:d0:bb:66:a6:
9b:29:5a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:54:19 2025 by rpki-client