Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
File: CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer (raw, json)
Hash identifier: Cz50+qmpdw8w0YboYm4Ai3FHvIqLcFlGHnaGkvAKCHE=
Subject key identifier: CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7E102BF9B33AB49297E9914DD2BFDDB4C23A36B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.mft
caRepository: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 24 Mar 2025 20:37:32 +0000
Certificate not after: Mon 23 Mar 2026 20:42:32 +0000
Subordinate resources: AS: 267991
IP: 45.167.52.0/22
IP: 2804:5654::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:10:2b:f9:b3:3a:b4:92:97:e9:91:4d:d2:bf:dd:b4:c2:3a:36:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 24 20:37:32 2025 GMT
Not After : Mar 23 20:42:32 2026 GMT
Subject: CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:52:75:b9:6e:82:7f:31:d9:69:5a:4d:70:89:
c2:a3:15:dd:fa:ac:26:3b:d0:92:c8:7f:7c:d2:7d:
df:9d:7a:e9:92:33:6c:eb:14:8c:4f:83:86:15:29:
79:0a:2f:05:aa:8f:b8:06:26:c9:b0:dc:0a:22:02:
96:5a:58:43:53:f7:81:67:50:ec:93:3e:55:61:7e:
a0:cb:90:c7:47:05:98:d9:1f:13:f2:14:c5:15:f7:
02:57:51:d6:2f:54:cd:c4:2e:4c:cd:aa:fa:e6:b8:
68:54:ce:84:50:f1:ee:30:a8:be:da:8c:c5:ea:06:
4b:c3:f5:fd:1a:31:10:73:31:68:ce:e1:f6:eb:32:
45:fb:6f:22:cb:8e:32:9e:56:19:da:a1:87:fb:2d:
75:ee:ba:b5:64:31:08:64:9f:f3:a4:23:fb:dc:53:
db:0f:62:4b:2d:6a:51:47:e5:16:28:17:88:97:10:
77:64:cd:a7:66:cd:22:f7:df:ba:d8:21:b2:f5:d6:
42:ed:f8:d5:d7:0b:29:4d:9c:a8:28:e2:05:57:36:
ec:b0:97:79:86:74:b1:49:2b:37:3d:27:82:c4:ce:
be:14:f6:a2:ab:03:76:52:5b:47:30:3a:95:ad:34:
5f:d1:a6:e7:1d:94:cf:12:25:b7:a1:22:b9:e6:5c:
1e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.52.0/22
IPv6:
2804:5654::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267991
Signature Algorithm: sha256WithRSAEncryption
75:d2:af:5b:93:ad:db:7f:d6:f7:d5:3e:0d:5a:e7:16:a2:7e:
aa:40:05:8f:a5:6f:8a:1d:87:fe:7f:43:5f:f6:75:cb:cc:3a:
ca:25:ac:89:81:b5:87:f7:51:85:4e:ae:7f:ea:5d:ee:18:42:
3c:b8:df:c0:56:a7:6d:a7:bf:0d:3a:c0:c2:9c:c6:0f:72:24:
bb:29:84:ff:5d:8f:fc:cd:d8:c1:b1:e8:ba:f8:2a:bf:6b:88:
23:0f:b1:09:0e:83:35:0a:00:ee:ab:8e:b3:86:75:cd:d1:28:
4c:b1:e6:e0:b5:e4:90:8f:53:87:da:07:93:a2:5e:a3:c3:59:
02:ea:5a:34:07:ae:dd:a4:c8:00:de:75:4e:4c:8f:71:45:a5:
63:f5:83:d5:e0:3a:15:48:c7:de:2a:06:39:55:0e:04:ab:11:
10:26:b9:c6:24:55:75:7e:46:40:1d:fe:81:24:f0:09:e3:21:
e0:ee:3f:23:82:5f:b1:45:78:ae:4d:8d:1b:c5:42:fa:22:d0:
a6:f1:04:a6:76:87:50:4c:41:36:86:c0:f5:fe:92:0b:be:f1:
d0:03:39:05:c8:c5:15:9f:2c:1c:76:17:eb:27:83:66:c3:09:
8c:be:4f:f3:d8:1b:fd:fb:b8:83:49:e2:c7:7e:16:37:8f:27:
6e:cf:22:70
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUfhAr+bM6tJKX6ZFN0r/dtMI6NrUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMjQyMDM3MzJaFw0yNjAzMjMyMDQyMzJaMDMxMTAvBgNV
BAMTKENGMjREQzJBMTZGNkZERDVBMUYwQjdCMzhCRjdDNzcwN0FFM0JBQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcUnW5boJ/MdlpWk1wicKjFd36
rCY70JLIf3zSfd+deumSM2zrFIxPg4YVKXkKLwWqj7gGJsmw3AoiApZaWENT94Fn
UOyTPlVhfqDLkMdHBZjZHxPyFMUV9wJXUdYvVM3ELkzNqvrmuGhUzoRQ8e4wqL7a
jMXqBkvD9f0aMRBzMWjO4fbrMkX7byLLjjKeVhnaoYf7LXXuurVkMQhkn/OkI/vc
U9sPYkstalFH5RYoF4iXEHdkzadmzSL337rYIbL11kLt+NXXCylNnKgo4gVXNuyw
l3mGdLFJKzc9J4LEzr4U9qKrA3ZSW0cwOpWtNF/RpucdlM8SJbehIrnmXB6LAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTPJNwqFvb91aHw
t7OL98dweuO6qjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDhU
VVNjMkxUcEhnTHRhQmFvMTlZVFFSN0tFM2ZrSDRhRFlUQzJpMTF5Mk4vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q4
VFVTYzJMVHBIZ0x0YUJhbzE5WVRRUjdLRTNma0g0YURZVEMyaTExeTJOLzAvQ0Yy
NERDMkExNkY2RkRENUExRjBCN0IzOEJGN0M3NzA3QUUzQkFBQS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLac0MA0EAgACMAcDBQAoBFZUMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQW1zANBgkqhkiG9w0BAQsFAAOCAQEAddKvW5Ot23/W99U+
DVrnFqJ+qkAFj6Vvih2H/n9DX/Z1y8w6yiWsiYG1h/dRhU6uf+pd7hhCPLjfwFan
bae/DTrAwpzGD3IkuymE/12P/M3YwbHouvgqv2uIIw+xCQ6DNQoA7quOs4Z1zdEo
TLHm4LXkkI9Th9oHk6Jeo8NZAupaNAeu3aTIAN51TkyPcUWlY/WD1eA6FUjH3ioG
OVUOBKsRECa5xiRVdX5GQB3+gSTwCeMh4O4/I4JfsUV4rk2NG8VC+iLQpvEEpnaH
UExBNobA9f6SC77x0AM5BcjFFZ8sHHYX6yeDZsMJjL5P89gb/fu4g0nix34WN48n
bs8icA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:13:44 2025 by rpki-client