Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BF66D1325E66C6F4F698944FDF44FF4E1B0EA974.cer
File: BF66D1325E66C6F4F698944FDF44FF4E1B0EA974.cer (raw, json)
Hash identifier: dCHezeu11cv+rpqiwhVEy3fGcVP/+kSxoduIkg9dXgk=
Subject key identifier: BF:66:D1:32:5E:66:C6:F4:F6:98:94:4F:DF:44:FF:4E:1B:0E:A9:74
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 47EB8DCC0BE3CFE43FFA0D416E0FB3EB0738BB6D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/1/BF66D1325E66C6F4F698944FDF44FF4E1B0EA974.mft
caRepository: rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:27:53 +0000
Certificate not after: Wed 02 Apr 2025 18:32:53 +0000
Subordinate resources: AS: 269572
IP: 45.189.68.0/22
IP: 2804:66a0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:eb:8d:cc:0b:e3:cf:e4:3f:fa:0d:41:6e:0f:b3:eb:07:38:bb:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:27:53 2024 GMT
Not After : Apr 2 18:32:53 2025 GMT
Subject: CN=BF66D1325E66C6F4F698944FDF44FF4E1B0EA974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:12:29:f2:7e:bb:3c:05:b7:15:00:32:46:
80:4f:22:dc:f3:fa:d5:4c:ed:2e:fc:4f:1e:cf:3d:
e9:65:31:c9:79:10:89:04:45:21:73:e0:a5:8f:3b:
8b:51:a2:54:4b:1a:41:b5:f9:ec:8d:88:97:94:0c:
51:64:b7:8c:8b:3d:12:e6:9e:28:8f:0e:51:21:8d:
f5:ad:05:83:dc:c8:67:c4:c7:04:6e:65:65:fc:4c:
4f:43:1f:4f:3b:6c:07:f4:77:1d:52:ae:0d:48:f9:
bc:96:7c:a5:2f:2f:8f:60:cc:77:78:37:8a:96:be:
bb:53:72:85:6b:0f:d4:a6:5e:70:23:6f:70:ef:52:
59:bf:17:6c:66:e2:61:13:cc:5c:10:0c:ed:04:e5:
84:98:e1:1b:7a:fd:71:43:40:fb:0d:54:35:d9:8d:
10:71:2e:00:b5:0c:c6:b4:fd:00:cc:9e:57:29:2c:
bc:2f:e7:36:74:fb:e1:49:e1:c5:54:cf:ab:36:b2:
1b:bf:f8:7f:05:39:e2:7e:f9:15:d5:91:78:3d:d2:
09:0f:75:ce:8e:d5:ae:d4:83:8c:46:0a:74:69:5e:
ca:bc:71:14:f0:90:d0:d8:e4:71:74:b0:9e:52:11:
cb:52:5b:c4:3e:e0:0f:ff:e7:d9:93:1c:6d:13:ce:
7f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BF:66:D1:32:5E:66:C6:F4:F6:98:94:4F:DF:44:FF:4E:1B:0E:A9:74
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/1/BF66D1325E66C6F4F698944FDF44FF4E1B0EA974.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.68.0/22
IPv6:
2804:66a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
269572
Signature Algorithm: sha256WithRSAEncryption
48:95:72:e7:bf:81:59:1f:e1:4b:6a:c1:06:cb:07:c1:e7:05:
23:f3:d4:57:9e:bb:63:2a:81:c0:b6:da:68:97:f9:86:a8:08:
14:21:f0:ce:e2:e0:1f:9f:b6:b6:5f:da:c1:a1:cf:7c:9e:ed:
b8:61:5c:6e:a8:c5:d0:ce:e1:f3:4b:04:91:4e:c1:4c:e8:c4:
da:6c:5e:fa:da:c8:95:28:3d:9e:92:10:5e:f5:b0:8e:5d:18:
28:95:3f:79:c8:05:d8:ca:99:f0:04:6d:43:55:b6:73:08:8e:
87:31:e0:ad:bc:ba:df:11:70:a9:78:50:8b:69:44:14:1c:a0:
0f:fc:0a:56:24:e2:9d:db:b5:dc:18:5e:12:e4:a4:68:ef:25:
64:f9:c9:76:00:47:2a:05:64:cf:61:da:03:17:19:86:6c:71:
4a:03:6d:44:b3:e0:a4:87:d0:9e:79:56:9f:39:7c:e1:c1:f7:
08:30:a6:1d:48:94:47:27:38:dd:62:d3:f2:62:eb:1c:22:19:
32:3b:e2:d7:09:9c:6d:04:ca:11:77:83:69:28:26:11:94:97:
41:a5:14:28:71:b9:d5:3b:d5:b0:be:88:2a:d1:64:33:6a:21:
d0:a4:2f:c9:71:7d:8b:04:fc:21:b7:ec:73:08:0c:b2:2b:76:
24:bd:91:28
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIUR+uNzAvjz+Q/+g1Bbg+z6wc4u20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxODI3NTNaFw0yNTA0MDIxODMyNTNaMDMxMTAvBgNV
BAMTKEJGNjZEMTMyNUU2NkM2RjRGNjk4OTQ0RkRGNDRGRjRFMUIwRUE5NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIqhIp8n67PAW3FQAyRoBPItzz
+tVM7S78Tx7PPellMcl5EIkERSFz4KWPO4tRolRLGkG1+eyNiJeUDFFkt4yLPRLm
niiPDlEhjfWtBYPcyGfExwRuZWX8TE9DH087bAf0dx1Srg1I+byWfKUvL49gzHd4
N4qWvrtTcoVrD9SmXnAjb3DvUlm/F2xm4mETzFwQDO0E5YSY4Rt6/XFDQPsNVDXZ
jRBxLgC1DMa0/QDMnlcpLLwv5zZ0++FJ4cVUz6s2shu/+H8FOeJ++RXVkXg90gkP
dc6O1a7Ug4xGCnRpXsq8cRTwkNDY5HF0sJ5SEctSW8Q+4A//59mTHG0Tzn+lAgMB
AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS/ZtEyXmbG9PaY
lE/fRP9OGw6pdDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vY2I3
aEd4Y2M3QWpaUEFqRU13YmNUVzJaVjFHaHNyTGJ2NmluV0NwMkpTbi8xLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vY2I3
aEd4Y2M3QWpaUEFqRU13YmNUVzJaVjFHaHNyTGJ2NmluV0NwMkpTbi8xL0JGNjZE
MTMyNUU2NkM2RjRGNjk4OTQ0RkRGNDRGRjRFMUIwRUE5NzQubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB
/wQfMB0wDAQCAAEwBgMEAi29RDANBAIAAjAHAwUAKARmoDAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEHQQwDQYJKoZIhvcNAQELBQADggEBAEiVcue/gVkf4UtqwQbL
B8HnBSPz1Feeu2MqgcC22miX+YaoCBQh8M7i4B+ftrZf2sGhz3ye7bhhXG6oxdDO
4fNLBJFOwUzoxNpsXvrayJUoPZ6SEF71sI5dGCiVP3nIBdjKmfAEbUNVtnMIjocx
4K28ut8RcKl4UItpRBQcoA/8ClYk4p3btdwYXhLkpGjvJWT5yXYARyoFZM9h2gMX
GYZscUoDbUSz4KSH0J55Vp85fOHB9wgwph1IlEcnON1i0/Ji6xwiGTI74tcJnG0E
yhF3g2koJhGUl0GlFChxudU71bC+iCrRZDNqIdCkL8lxfYsE/CG37HMIDLIrdiS9
kSg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:51:59 2025 by rpki-client