Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5EBC3A7A39C3C1807A957273107EAE9F4CD3B106.cer
File: 5EBC3A7A39C3C1807A957273107EAE9F4CD3B106.cer (raw, json)
Hash identifier: Mi6pzDGcyjoADNzg+dIUGpx7RvzXoPXU/YcI+4tk8Mo=
Subject key identifier: 5E:BC:3A:7A:39:C3:C1:80:7A:95:72:73:10:7E:AE:9F:4C:D3:B1:06
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5B787EDFFB95A2AE2E3D128ACCDA271E4B70E7C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/5EBC3A7A39C3C1807A957273107EAE9F4CD3B106.mft
caRepository: rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 07 Jan 2025 16:27:25 +0000
Certificate not after: Tue 06 Jan 2026 16:32:25 +0000
Subordinate resources: AS: 266053
IP: 45.4.16.0/22
IP: 2804:39d4::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:78:7e:df:fb:95:a2:ae:2e:3d:12:8a:cc:da:27:1e:4b:70:e7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 7 16:27:25 2025 GMT
Not After : Jan 6 16:32:25 2026 GMT
Subject: CN=5EBC3A7A39C3C1807A957273107EAE9F4CD3B106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:5f:78:4a:78:15:33:b6:d6:0f:28:31:ad:
7d:5c:19:d9:92:cd:af:7f:86:a9:ef:e0:b4:77:28:
64:30:85:6f:4b:f1:dd:da:c9:1a:74:b4:aa:99:01:
b9:f8:4e:53:89:09:5f:eb:ce:aa:51:6d:7b:82:5b:
d4:0b:cf:91:ac:88:79:05:8c:a6:da:de:df:b7:a7:
13:c3:29:4e:2f:75:92:ca:24:96:31:f5:3d:c8:45:
0c:8b:97:5d:a1:5f:2d:c2:a2:99:e7:16:70:aa:b8:
5d:72:2e:12:68:c0:b8:9c:f2:ff:02:16:b0:3a:e5:
7c:0a:01:d8:77:d4:f7:82:00:46:00:f4:0e:e2:04:
e9:d3:61:c3:06:1e:ee:58:02:5f:21:ee:21:70:43:
b9:f7:6e:f8:a5:73:ab:71:79:a8:c6:33:16:29:57:
3d:7f:b4:aa:23:44:30:1a:0d:77:d0:10:42:22:31:
70:85:b5:02:06:d0:a2:a2:6b:e4:47:74:d9:1b:b2:
42:61:37:cd:1f:35:ad:28:2d:46:70:f4:c3:16:15:
20:27:a0:69:95:a2:46:80:b3:92:83:c1:bd:3c:be:
3b:2b:ba:c6:80:24:bc:08:c7:81:65:e6:0b:a1:84:
e8:5d:f2:05:90:6e:ab:12:80:f0:0c:65:e2:1c:a4:
25:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5E:BC:3A:7A:39:C3:C1:80:7A:95:72:73:10:7E:AE:9F:4C:D3:B1:06
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/5EBC3A7A39C3C1807A957273107EAE9F4CD3B106.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.16.0/22
IPv6:
2804:39d4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266053
Signature Algorithm: sha256WithRSAEncryption
d0:25:30:c6:4d:c1:95:fc:ab:4a:f5:f0:8c:07:70:fc:07:7b:
3d:0a:06:09:28:86:f7:8f:3f:db:13:66:79:0b:2b:99:a2:6b:
6f:bf:66:a2:fb:e4:81:1f:64:a4:9b:02:ae:76:22:b7:42:d9:
c7:ec:f3:8a:d0:88:60:b6:11:16:53:92:e8:61:b9:01:86:81:
65:4a:b7:c4:dc:28:48:21:d3:33:c5:ae:fb:58:bd:7d:09:04:
32:85:57:fe:88:e4:4c:d0:66:42:91:af:3a:dc:d1:94:87:a7:
be:f7:4c:18:8d:c1:8f:1f:be:12:d3:03:93:8a:58:b2:5f:71:
ec:de:05:c3:5d:d5:ee:25:94:e8:f6:0b:8f:37:86:bf:df:5c:
0c:40:c8:8f:63:e0:59:aa:b1:a0:b5:91:e3:06:e5:2a:f6:d2:
11:ec:70:ca:58:b7:08:bd:95:9c:53:aa:02:89:fd:e9:bb:43:
43:fc:8b:04:96:ad:73:7c:d7:fa:60:aa:40:bd:a4:ee:c8:d8:
d2:95:e9:5c:81:4d:91:f0:9e:3f:12:12:b2:52:85:f2:53:9e:
aa:5e:d2:e4:29:df:e1:d1:26:e3:fc:4e:c3:f6:69:ef:73:69:
35:d6:ca:3d:58:d2:cf:51:35:18:e9:9e:24:01:45:06:60:0f:
88:99:d4:3c
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUW3h+3/uVoq4uPRKKzNonHktw58IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMDcxNjI3MjVaFw0yNjAxMDYxNjMyMjVaMDMxMTAvBgNV
BAMTKDVFQkMzQTdBMzlDM0MxODA3QTk1NzI3MzEwN0VBRTlGNENEM0IxMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu4V94SngVM7bWDygxrX1cGdmS
za9/hqnv4LR3KGQwhW9L8d3ayRp0tKqZAbn4TlOJCV/rzqpRbXuCW9QLz5GsiHkF
jKba3t+3pxPDKU4vdZLKJJYx9T3IRQyLl12hXy3CopnnFnCquF1yLhJowLic8v8C
FrA65XwKAdh31PeCAEYA9A7iBOnTYcMGHu5YAl8h7iFwQ7n3bvilc6txeajGMxYp
Vz1/tKojRDAaDXfQEEIiMXCFtQIG0KKia+RHdNkbskJhN80fNa0oLUZw9MMWFSAn
oGmVokaAs5KDwb08vjsrusaAJLwIx4Fl5guhhOhd8gWQbqsSgPAMZeIcpCX9AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRevDp6OcPBgHqV
cnMQfq6fTNOxBjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMmRT
b2ExMlVHbll4UDZ2VDkzNWVMZzhNdEZ4bmVpaEZDNjN6ZFpCMmtnNHEvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJk
U29hMTJVR25ZeFA2dlQ5MzVlTGc4TXRGeG5laWhGQzYzemRaQjJrZzRxLzAvNUVC
QzNBN0EzOUMzQzE4MDdBOTU3MjczMTA3RUFFOUY0Q0QzQjEwNi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLQQQMA0EAgACMAcDBQAoBDnUMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQPRTANBgkqhkiG9w0BAQsFAAOCAQEA0CUwxk3BlfyrSvXw
jAdw/Ad7PQoGCSiG948/2xNmeQsrmaJrb79movvkgR9kpJsCrnYit0LZx+zzitCI
YLYRFlOS6GG5AYaBZUq3xNwoSCHTM8Wu+1i9fQkEMoVX/ojkTNBmQpGvOtzRlIen
vvdMGI3Bjx++EtMDk4pYsl9x7N4Fw13V7iWU6PYLjzeGv99cDEDIj2PgWaqxoLWR
4wblKvbSEexwyli3CL2VnFOqAon96btDQ/yLBJatc3zX+mCqQL2k7sjY0pXpXIFN
kfCePxISslKF8lOeql7S5Cnf4dEm4/xOw/Zp73NpNdbKPVjSz1E1GOmeJAFFBmAP
iJnUPA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:16:53 2025 by rpki-client