
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8CE0D131E429E2C41648BC875D900D7A21A1F1C3.cer
File: 8CE0D131E429E2C41648BC875D900D7A21A1F1C3.cer (raw, json)
Hash identifier: ps/bumOlZkE/u7mLeYQs8h+P7j5yUi6NLs4by0G8y3U=
Subject key identifier: 8C:E0:D1:31:E4:29:E2:C4:16:48:BC:87:5D:90:0D:7A:21:A1:F1:C3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 52B70B4971B49F1B221BDABBB617670212A93054
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/8CE0D131E429E2C41648BC875D900D7A21A1F1C3.mft
caRepository: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 29 Jan 2025 12:22:34 +0000
Certificate not after: Wed 28 Jan 2026 12:27:34 +0000
Subordinate resources: AS: 266304
IP: 170.79.200.0/22
IP: 2804:35c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:b7:0b:49:71:b4:9f:1b:22:1b:da:bb:b6:17:67:02:12:a9:30:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 29 12:22:34 2025 GMT
Not After : Jan 28 12:27:34 2026 GMT
Subject: CN=8CE0D131E429E2C41648BC875D900D7A21A1F1C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7a:1b:df:4f:32:d6:45:0a:92:d8:5a:8b:42:
61:15:aa:72:29:6f:97:29:6f:03:8e:b0:bc:3e:f4:
8e:31:9c:75:d0:70:57:ea:01:f1:b2:f0:05:56:d7:
71:2d:96:fe:66:a9:cc:c6:9b:23:66:ca:38:24:bb:
d1:3b:99:10:97:c7:72:63:ef:d2:77:61:fc:12:8a:
a5:b8:76:00:c2:8c:ff:b3:19:47:29:0d:09:25:d6:
8b:7a:ae:b8:68:a9:3f:6b:97:af:8a:c5:34:89:75:
d6:8c:ea:c0:60:2d:70:b9:06:e9:02:a1:a5:de:57:
6c:8d:67:f6:1d:0b:e5:7f:ff:3b:22:a9:d6:d7:aa:
ea:06:a6:f8:a3:38:ba:06:f9:ca:5b:2b:a5:ca:01:
1f:14:fe:7a:1b:dd:08:e5:bd:fa:e1:55:4d:84:33:
7c:46:bf:cc:cc:55:2f:90:6a:4c:58:ae:18:cf:1c:
9e:e7:6c:9b:3b:ee:13:52:61:d4:2d:fc:a6:98:05:
4b:45:5b:db:2a:97:eb:21:ed:a9:52:50:6c:e0:35:
2a:f8:ff:4b:6d:e4:a6:e0:35:3c:e1:47:21:e7:56:
d2:7e:1c:60:cb:ca:2f:03:cb:06:51:3d:fb:20:5a:
45:c9:48:6f:45:be:73:6c:5f:ed:98:da:99:cb:76:
f6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8C:E0:D1:31:E4:29:E2:C4:16:48:BC:87:5D:90:0D:7A:21:A1:F1:C3
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/8CE0D131E429E2C41648BC875D900D7A21A1F1C3.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.200.0/22
IPv6:
2804:35c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266304
Signature Algorithm: sha256WithRSAEncryption
69:3c:a0:9c:d6:ec:05:09:36:6e:87:59:ba:65:d2:f8:5c:3c:
00:a8:63:e3:64:5e:5f:92:51:6e:c0:d3:75:48:fb:21:12:b7:
ba:0d:d3:fc:5e:45:cf:c5:dd:d0:18:96:37:98:17:2a:2d:8c:
92:f6:12:26:68:c9:bb:f5:25:0b:84:02:3b:dc:48:91:b3:98:
a2:5c:f6:e6:31:10:a6:ac:17:27:54:fa:ed:5b:7b:b2:62:23:
0b:0b:d4:f9:1f:62:e0:32:ce:2a:0b:ab:4f:f7:7e:b4:94:0f:
e9:ae:00:74:08:14:64:ee:b3:e8:12:b7:ee:c5:4b:10:4c:e4:
58:f4:40:4c:06:8d:b8:2d:1a:14:0c:17:39:f4:dc:32:f8:3b:
2a:34:9f:9b:2b:1b:80:63:8b:22:67:8f:34:2c:06:1c:d0:26:
98:52:46:97:04:41:4c:9d:ae:52:e9:8e:d3:25:94:dd:f2:00:
5c:ff:5c:99:3a:23:54:57:73:69:b3:d3:70:e5:5f:68:aa:a1:
8f:d5:b0:e9:f5:97:4c:43:69:8d:4a:6a:9c:ae:b4:a8:df:b5:
d7:84:ff:93:24:77:60:19:5a:7f:ea:c3:b7:29:83:86:02:09:
fa:88:54:6f:7d:22:d2:b8:4c:d4:ba:b1:ea:c3:46:97:04:33:
50:c6:86:d9
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUUrcLSXG0nxsiG9q7thdnAhKpMFQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMjkxMjIyMzRaFw0yNjAxMjgxMjI3MzRaMDMxMTAvBgNV
BAMTKDhDRTBEMTMxRTQyOUUyQzQxNjQ4QkM4NzVEOTAwRDdBMjFBMUYxQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZehvfTzLWRQqS2FqLQmEVqnIp
b5cpbwOOsLw+9I4xnHXQcFfqAfGy8AVW13Etlv5mqczGmyNmyjgku9E7mRCXx3Jj
79J3YfwSiqW4dgDCjP+zGUcpDQkl1ot6rrhoqT9rl6+KxTSJddaM6sBgLXC5BukC
oaXeV2yNZ/YdC+V//zsiqdbXquoGpvijOLoG+cpbK6XKAR8U/nob3QjlvfrhVU2E
M3xGv8zMVS+QakxYrhjPHJ7nbJs77hNSYdQt/KaYBUtFW9sql+sh7alSUGzgNSr4
/0tt5KbgNTzhRyHnVtJ+HGDLyi8DywZRPfsgWkXJSG9FvnNsX+2Y2pnLdvYTAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSM4NEx5CnixBZI
vIddkA16IaHxwzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMnRI
aXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThqZkIvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ0
SGl1eHFvNm5id1p0cUNBcUt4MkRiVTc2dnJIV1VYMUJiWlBGNUU4amZCLzAvOENF
MEQxMzFFNDI5RTJDNDE2NDhCQzg3NUQ5MDBEN0EyMUExRjFDMy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqk/IMA0EAgACMAcDBQAoBDXAMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQQQDANBgkqhkiG9w0BAQsFAAOCAQEAaTygnNbsBQk2bodZ
umXS+Fw8AKhj42ReX5JRbsDTdUj7IRK3ug3T/F5Fz8Xd0BiWN5gXKi2MkvYSJmjJ
u/UlC4QCO9xIkbOYolz25jEQpqwXJ1T67Vt7smIjCwvU+R9i4DLOKgurT/d+tJQP
6a4AdAgUZO6z6BK37sVLEEzkWPRATAaNuC0aFAwXOfTcMvg7KjSfmysbgGOLImeP
NCwGHNAmmFJGlwRBTJ2uUumO0yWU3fIAXP9cmTojVFdzabPTcOVfaKqhj9Ww6fWX
TENpjUpqnK60qN+114T/kyR3YBlaf+rDtymDhgIJ+ohUb30i0rhM1Lqx6sNGlwQz
UMaG2Q==
-----END CERTIFICATE-----
Generated at Fri Apr 11 03:51:34 2025 by rpki-client