Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
File: 8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer (raw, json)
Hash identifier: tdKqEWIRPA6p7uc6Yaf5iakBkWzkeNxv2ddap+wW0r8=
Subject key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2104F60838CD4F8B1336A346D36155577FDCE223
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
caRepository: rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 19 Dec 2024 11:58:51 +0000
Certificate not after: Thu 18 Dec 2025 12:03:51 +0000
Subordinate resources: AS: 262352
IP: 131.72.216.0/22
IP: 170.246.104.0/22
IP: 177.126.80.0/20
IP: 2804:820::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:04:f6:08:38:cd:4f:8b:13:36:a3:46:d3:61:55:57:7f:dc:e2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 19 11:58:51 2024 GMT
Not After : Dec 18 12:03:51 2025 GMT
Subject: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:9f:30:88:c9:0b:3a:f3:af:69:8c:74:fa:
01:3c:36:33:b4:3b:59:4a:b8:e4:e1:fd:ae:b7:ef:
90:c7:2f:00:ef:17:35:db:18:72:bd:6b:c7:16:e1:
fb:8e:57:f6:18:ea:36:59:58:15:d4:d2:9a:3f:2c:
3d:0b:68:a4:3e:61:e1:7e:fe:1f:5d:91:b7:90:d0:
d4:22:c2:77:81:61:ca:dd:59:ee:4c:87:af:3a:63:
ec:b4:3c:bb:09:15:e2:c7:23:ca:ce:2f:96:f4:e4:
56:ba:f1:c1:96:eb:75:db:44:62:8c:c4:f4:68:a1:
4f:d9:fb:81:8c:c6:e3:12:a2:85:00:47:fd:12:a6:
b1:31:ec:f8:f9:e2:6f:87:27:54:60:c8:89:3f:7f:
2c:52:17:d1:71:e6:b9:99:15:65:c3:87:2b:76:e4:
50:a5:09:c3:1a:60:5c:a3:5e:3d:86:db:8a:a3:90:
6f:f8:a7:9c:64:81:c7:d1:0e:d9:18:e4:1c:94:14:
85:c3:24:c2:b9:d9:8f:c2:8b:06:a6:ac:44:37:c2:
e0:1e:67:a9:44:20:7b:89:7f:9b:50:66:48:68:b5:
45:1c:99:f7:ac:34:1a:08:68:ed:26:d9:67:ec:1d:
f0:8c:23:29:c5:77:57:c4:75:83:d2:c1:8e:2c:53:
6f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.216.0/22
170.246.104.0/22
177.126.80.0/20
IPv6:
2804:820::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262352
Signature Algorithm: sha256WithRSAEncryption
72:6b:90:3b:6a:6e:0d:6d:6c:d5:24:ce:22:fb:72:90:ff:2f:
58:74:6d:c8:0e:52:6b:04:3d:12:a0:2d:88:a2:03:28:97:3d:
ac:f3:b7:93:05:f0:4c:ac:96:da:fc:d6:b1:b1:ed:e1:2c:46:
e5:a3:2e:0a:3b:8d:ff:a6:e0:ca:c9:cb:5b:99:3e:fe:6c:9e:
b6:96:17:49:3c:b5:16:84:53:6b:50:7c:b9:11:8b:60:7c:b3:
93:2d:9f:5a:ba:88:b3:6a:a7:4a:fa:46:54:da:04:80:10:6c:
7d:ac:49:3f:64:db:23:bb:1e:bc:9d:ef:18:4e:da:0c:e9:16:
61:70:e6:c9:31:b4:4c:ca:f9:ba:cd:8e:5c:22:0a:92:79:a2:
c6:94:be:59:d6:61:9f:30:49:41:47:68:0c:d1:c9:65:9a:fc:
48:18:bb:50:6f:95:2e:66:5e:a9:b7:fc:66:db:65:c0:b3:d6:
23:63:8f:56:a7:75:a0:e6:4f:d7:65:cb:89:58:39:1d:bd:6e:
14:b0:32:ab:e6:b2:3e:69:4f:d2:44:62:5c:9c:1a:08:a5:5c:
ee:22:07:6d:6d:fd:f2:4e:f3:11:cf:d6:64:e6:8c:50:a2:e5:
b5:96:b5:e6:a8:20:e1:88:45:76:73:b5:55:65:4d:dc:dd:a1:
9d:2c:36:6f
-----BEGIN CERTIFICATE-----
MIIGOjCCBSKgAwIBAgIUIQT2CDjNT4sTNqNG02FVV3/c4iMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDEyMTkxMTU4NTFaFw0yNTEyMTgxMjAzNTFaMDMxMTAvBgNV
BAMTKDgxNzBDNDA4NUEyMENENkFBNDUxRkJDQUMyQ0I4RjJDQ0RCQTNFOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxoJ8wiMkLOvOvaYx0+gE8NjO0
O1lKuOTh/a6375DHLwDvFzXbGHK9a8cW4fuOV/YY6jZZWBXU0po/LD0LaKQ+YeF+
/h9dkbeQ0NQiwneBYcrdWe5Mh686Y+y0PLsJFeLHI8rOL5b05Fa68cGW63XbRGKM
xPRooU/Z+4GMxuMSooUAR/0SprEx7Pj54m+HJ1RgyIk/fyxSF9Fx5rmZFWXDhyt2
5FClCcMaYFyjXj2G24qjkG/4p5xkgcfRDtkY5ByUFIXDJMK52Y/CiwamrEQ3wuAe
Z6lEIHuJf5tQZkhotUUcmfesNBoIaO0m2WfsHfCMIynFd1fEdYPSwY4sU2/vAgMB
AAGjggNEMIIDQDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSBcMQIWiDNaqRR
+8rCy48szbo+lzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMW43
NjI5S1l5RWgzeEc0QkJ0V3VFQzIxZ1c0U2ZydW1hRDhpVkRCTnU3NS81LzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMW43
NjI5S1l5RWgzeEc0QkJ0V3VFQzIxZ1c0U2ZydW1hRDhpVkRCTnU3NS81LzgxNzBD
NDA4NUEyMENENkFBNDUxRkJDQUMyQ0I4RjJDQ0RCQTNFOTcubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB
/wQrMCkwGAQCAAEwEgMEAoNI2AMEAqr2aAMEBLF+UDANBAIAAjAHAwUAKAQIIDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEANAwDQYJKoZIhvcNAQELBQADggEBAHJr
kDtqbg1tbNUkziL7cpD/L1h0bcgOUmsEPRKgLYiiAyiXPazzt5MF8Eysltr81rGx
7eEsRuWjLgo7jf+m4MrJy1uZPv5snraWF0k8tRaEU2tQfLkRi2B8s5Mtn1q6iLNq
p0r6RlTaBIAQbH2sST9k2yO7Hryd7xhO2gzpFmFw5skxtEzK+brNjlwiCpJ5osaU
vlnWYZ8wSUFHaAzRyWWa/EgYu1BvlS5mXqm3/GbbZcCz1iNjj1andaDmT9dly4lY
OR29bhSwMqvmsj5pT9JEYlycGgilXO4iB21t/fJO8xHP1mTmjFCi5bWWteaoIOGI
RXZztVVlTdzdoZ0sNm8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:18:34 2025 by rpki-client