Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer
File: CA9298E26EC7D83F990DD29EFD395097A928590F.cer (raw, json)
Hash identifier: sU6oklx71lJn/7j4KBMtJ8ULxlRRraxKRGTXED8975w=
Subject key identifier: CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5E405562DF50E408A11F5AF9B6BBC2F496D89A3E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft
caRepository: rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 17 Sep 2024 18:11:46 +0000
Certificate not after: Tue 16 Sep 2025 18:16:46 +0000
Subordinate resources: AS: 61698
IP: 131.0.164.0/22
IP: 168.227.80.0/22
IP: 2804:1aec::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:40:55:62:df:50:e4:08:a1:1f:5a:f9:b6:bb:c2:f4:96:d8:9a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 17 18:11:46 2024 GMT
Not After : Sep 16 18:16:46 2025 GMT
Subject: CN=CA9298E26EC7D83F990DD29EFD395097A928590F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:9d:bf:58:54:53:90:14:8f:0a:ed:b4:80:
a3:20:05:65:41:d1:95:ea:63:7d:41:ef:43:3b:d9:
ed:14:09:b7:47:41:3d:9f:1c:9b:aa:2d:60:6a:05:
41:b6:22:02:91:53:c9:59:1e:71:40:fa:11:75:16:
e8:63:03:f1:ab:a9:25:a6:e5:7e:73:32:a4:70:08:
b7:76:d9:a2:c8:fa:ad:56:f5:6f:c5:26:90:fd:f0:
78:0f:f4:3f:95:76:72:d5:7f:10:7e:4e:ab:cb:30:
37:5c:06:da:0a:05:af:5a:cd:69:8b:37:fa:1c:c1:
3a:09:b5:9a:8b:d3:3e:7f:30:45:e0:3f:4f:e4:03:
23:73:b0:7c:28:2d:fc:ae:6c:8e:30:3e:f6:7e:b4:
c6:4e:9b:03:c8:ad:6a:77:df:d7:86:f0:63:20:a6:
b5:24:0b:d0:73:88:a1:ca:6c:63:84:1c:fe:c5:9c:
a5:8e:6c:94:88:6d:7c:5e:8f:83:1e:83:87:d5:3e:
9d:97:fa:c5:6e:19:41:dd:4e:b1:1d:c7:96:d2:58:
02:ec:04:c9:71:44:e3:b5:61:7e:b4:70:3e:db:c0:
23:02:87:2c:70:51:a2:68:7c:29:1b:39:c6:93:31:
9d:19:bc:c5:e4:4d:61:0c:d5:9b:44:a8:b6:95:78:
47:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.164.0/22
168.227.80.0/22
IPv6:
2804:1aec::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61698
Signature Algorithm: sha256WithRSAEncryption
09:67:b3:80:28:68:cd:f2:63:d0:ff:7e:9e:58:bb:77:db:f9:
6d:3a:03:ea:67:e4:05:84:85:69:9a:70:af:aa:76:85:05:eb:
10:39:e6:51:9b:d9:74:aa:7a:ca:88:c0:17:1b:18:b5:33:77:
b5:b2:28:9a:f1:f6:76:c9:15:d0:83:5a:28:cb:42:3d:cf:d1:
5e:05:15:6d:2f:ac:dc:e6:4f:58:17:ec:b8:5a:a8:c9:0d:cb:
d8:1a:2e:e0:b4:fc:bc:1a:eb:48:d1:89:38:51:cf:b4:c5:ff:
52:ab:ea:2c:a4:42:43:27:e2:1b:55:4b:80:23:2e:35:41:b4:
45:99:3e:ea:0c:a9:05:f1:27:2b:6a:fe:cd:c2:56:ef:5c:03:
bc:74:07:35:71:71:c0:e5:80:6b:ff:08:58:7d:7d:8b:d2:f4:
35:18:e6:ed:91:34:ec:e8:79:34:c0:6c:75:bf:51:27:76:d1:
00:9f:d6:eb:98:a4:5e:e7:ff:2b:d2:dc:0a:e0:1c:c2:47:a3:
53:9a:0a:2e:8b:40:cb:9a:46:1b:9b:9a:48:a7:49:57:70:3f:
7f:73:69:40:b6:78:1a:51:1b:74:1c:eb:21:66:60:20:b1:13:
c2:b3:d4:50:90:ba:de:e4:93:4d:ad:63:8b:d8:be:a7:c8:b8:
65:65:2c:4d
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUXkBVYt9Q5AihH1r5trvC9JbYmj4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MTcxODExNDZaFw0yNTA5MTYxODE2NDZaMDMxMTAvBgNV
BAMTKENBOTI5OEUyNkVDN0Q4M0Y5OTBERDI5RUZEMzk1MDk3QTkyODU5MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC48p2/WFRTkBSPCu20gKMgBWVB
0ZXqY31B70M72e0UCbdHQT2fHJuqLWBqBUG2IgKRU8lZHnFA+hF1FuhjA/GrqSWm
5X5zMqRwCLd22aLI+q1W9W/FJpD98HgP9D+VdnLVfxB+TqvLMDdcBtoKBa9azWmL
N/ocwToJtZqL0z5/MEXgP0/kAyNzsHwoLfyubI4wPvZ+tMZOmwPIrWp339eG8GMg
prUkC9BziKHKbGOEHP7FnKWObJSIbXxej4Meg4fVPp2X+sVuGUHdTrEdx5bSWALs
BMlxROO1YX60cD7bwCMChyxwUaJofCkbOcaTMZ0ZvMXkTWEM1ZtEqLaVeEfnAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTKkpjibsfYP5kN
0p79OVCXqShZDzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmlo
a2lEUjF6RmRpNTV4bjEya0d5WVNOdXN3ek1nVmN5eFNRejlpZkZmemovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jp
aGtpRFIxekZkaTU1eG4xMmtHeVlTTnVzd3pNZ1ZjeXhTUXo5aWZGZnpqLzAvQ0E5
Mjk4RTI2RUM3RDgzRjk5MEREMjlFRkQzOTUwOTdBOTI4NTkwRi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCgwCkAwQCqONQMA0EAgACMAcDBQAoBBrsMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwDxAjANBgkqhkiG9w0BAQsFAAOCAQEACWezgCho
zfJj0P9+nli7d9v5bToD6mfkBYSFaZpwr6p2hQXrEDnmUZvZdKp6yojAFxsYtTN3
tbIomvH2dskV0INaKMtCPc/RXgUVbS+s3OZPWBfsuFqoyQ3L2Bou4LT8vBrrSNGJ
OFHPtMX/UqvqLKRCQyfiG1VLgCMuNUG0RZk+6gypBfEnK2r+zcJW71wDvHQHNXFx
wOWAa/8IWH19i9L0NRjm7ZE07Oh5NMBsdb9RJ3bRAJ/W65ikXuf/K9LcCuAcwkej
U5oKLotAy5pGG5uaSKdJV3A/f3NpQLZ4GlEbdBzrIWZgILETwrPUUJC63uSTTa1j
i9i+p8i4ZWUsTQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:17 2025 by rpki-client