Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
File: CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer (raw, json)
Hash identifier: eMHly8OrbfE2IaFsMl3kNxqe+AW74zFBdrrMe3W1XQ8=
Subject key identifier: CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: BC0ABA271158715726F65BD1495825CC9FF9CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
caRepository: rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 05 Mar 2025 18:35:11 +0000
Certificate not after: Wed 04 Mar 2026 18:40:11 +0000
Subordinate resources: AS: 61759
IP: 131.100.80.0/22
IP: 2804:1bf4::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
bc:0a:ba:27:11:58:71:57:26:f6:5b:d1:49:58:25:cc:9f:f9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 5 18:35:11 2025 GMT
Not After : Mar 4 18:40:11 2026 GMT
Subject: CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:69:03:07:12:29:3a:a6:ac:62:e2:6b:a5:43:
bd:bf:a3:6c:de:e0:f6:fc:59:2b:55:82:74:c8:a7:
c6:93:64:68:f0:d1:8c:35:95:de:b6:de:1e:96:57:
3d:cd:ea:f6:e1:c4:2c:30:99:29:4d:47:11:e3:4c:
21:cf:77:03:d2:6a:97:1c:98:15:8d:56:35:3d:64:
e8:c6:3b:f4:00:dc:db:69:dd:e1:46:fb:c6:8f:d2:
b9:c2:bd:70:a0:c4:f9:02:2d:61:04:e2:8d:23:fc:
18:67:24:57:de:00:42:71:51:1a:34:e7:f9:ab:8b:
6c:f6:49:72:58:58:f8:de:df:98:a8:39:25:b3:cc:
4a:33:63:51:d5:58:c3:7b:eb:3b:eb:73:23:2f:79:
a6:c4:65:d6:40:77:f7:8b:de:a4:dc:10:a7:a3:81:
58:91:41:15:b2:3a:f1:ac:d5:10:0f:15:23:9e:3e:
f0:78:8e:2a:b0:25:d7:da:da:e4:6b:26:fe:78:2d:
47:a4:44:e3:86:ec:ac:13:d1:22:e1:a6:ec:27:d0:
b8:20:7e:3d:74:44:26:ff:6b:40:52:cd:9d:b2:2a:
36:81:1a:a8:06:3f:ed:c1:3b:a0:b3:5a:85:fb:81:
1c:af:65:d9:10:b2:70:5e:bc:52:4c:51:2b:f6:f1:
9b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.80.0/22
IPv6:
2804:1bf4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61759
Signature Algorithm: sha256WithRSAEncryption
29:fa:f7:78:ba:a4:b2:7b:0b:62:81:f5:06:c6:c8:81:4e:e6:
ce:b0:4d:ba:e2:fc:b4:47:21:ac:32:13:18:4f:e0:19:7f:e6:
11:57:57:ba:0c:79:e9:d3:af:b6:74:63:0b:cd:57:bc:ce:f7:
f2:4b:16:86:e5:94:e3:8a:5f:79:ea:12:e4:da:19:cb:ef:ce:
99:40:5e:4a:d8:33:41:f8:41:73:90:1b:b4:d1:c1:22:c9:b9:
f7:9d:1f:9f:ba:33:db:42:ca:8a:21:ed:73:ab:d2:1b:44:1b:
3b:2f:cf:f1:bc:1d:b9:08:1d:3c:cc:4a:48:b0:95:fc:58:95:
92:2e:3d:3c:fd:b6:08:a2:04:9f:44:a4:a4:35:5a:75:e9:61:
fa:0b:97:44:13:18:9b:27:5d:da:0e:2e:03:f5:58:b6:00:a9:
8c:e3:21:4e:91:35:8c:8e:e8:08:6d:e9:87:8a:58:1a:bd:2d:
14:cc:72:28:af:cf:9f:a7:a2:59:a1:0e:73:10:73:05:5f:a6:
c9:b6:4d:8c:2c:de:68:91:9b:cd:8a:73:62:2c:ae:4e:c7:a5:
bf:9d:3f:1a:33:24:c8:f9:75:27:26:a7:a5:a0:5f:9e:d2:29:
f4:65:df:29:c8:ae:ec:85:ec:d7:f7:eb:bf:e8:51:43:9c:1d:
35:a3:fd:4a
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUALwKuicRWHFXJvZb0UlYJcyf+cowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDUxODM1MTFaFw0yNjAzMDQxODQwMTFaMDMxMTAvBgNV
BAMTKENDMjFDNTIwMDJGMTIzODVGRTYxRjMzQkY1RjY5MzNEMDlFRjhFRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVaQMHEik6pqxi4mulQ72/o2ze
4Pb8WStVgnTIp8aTZGjw0Yw1ld623h6WVz3N6vbhxCwwmSlNRxHjTCHPdwPSapcc
mBWNVjU9ZOjGO/QA3Ntp3eFG+8aP0rnCvXCgxPkCLWEE4o0j/BhnJFfeAEJxURo0
5/mri2z2SXJYWPje35ioOSWzzEozY1HVWMN76zvrcyMveabEZdZAd/eL3qTcEKej
gViRQRWyOvGs1RAPFSOePvB4jiqwJdfa2uRrJv54LUekROOG7KwT0SLhpuwn0Lgg
fj10RCb/a0BSzZ2yKjaBGqgGP+3BO6CzWoX7gRyvZdkQsnBevFJMUSv28Zs5AgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTMIcUgAvEjhf5h
8zv19pM9Ce+O0jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFJa
U3Y3d0ZKdDFFa1k1ZkdrRExERHlkWFVqY2V6Qkp3OFBHeDJHRFBGeVgvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFJa
U3Y3d0ZKdDFFa1k1ZkdrRExERHlkWFVqY2V6Qkp3OFBHeDJHRFBGeVgvMS9DQzIx
QzUyMDAyRjEyMzg1RkU2MUYzM0JGNUY2OTMzRDA5RUY4RUQyLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAKDZFAwDQQCAAIwBwMFACgEG/QwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDAPE/MA0GCSqGSIb3DQEBCwUAA4IBAQAp+vd4uqSyewtigfUG
xsiBTubOsE264vy0RyGsMhMYT+AZf+YRV1e6DHnp06+2dGMLzVe8zvfySxaG5ZTj
il956hLk2hnL786ZQF5K2DNB+EFzkBu00cEiybn3nR+fujPbQsqKIe1zq9IbRBs7
L8/xvB25CB08zEpIsJX8WJWSLj08/bYIogSfRKSkNVp16WH6C5dEExibJ13aDi4D
9Vi2AKmM4yFOkTWMjugIbemHilgavS0UzHIor8+fp6JZoQ5zEHMFX6bJtk2MLN5o
kZvNinNiLK5Ox6W/nT8aMyTI+XUnJqeloF+e0in0Zd8pyK7shezX9+u/6FFDnB01
o/1K
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:21:30 2025 by rpki-client