Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.cer
File: D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.cer (raw, json)
Hash identifier: OJ7McNh73Z4dSra/DDlngoLF4e5U0zKye/WBkP+khzE=
Subject key identifier: D3:E0:F3:C6:14:B2:22:0C:8F:77:C1:52:E1:A6:7F:4B:0B:FB:16:25
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4683DE2045CD2BA0F4655384D602DB10C94F9201
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/1/D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.mft
caRepository: rsync://rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 10 Mar 2025 23:58:28 +0000
Certificate not after: Tue 10 Mar 2026 00:03:28 +0000
Subordinate resources: AS: 266523
IP: 170.244.228.0/22
IP: 2804:3914::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:83:de:20:45:cd:2b:a0:f4:65:53:84:d6:02:db:10:c9:4f:92:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 10 23:58:28 2025 GMT
Not After : Mar 10 00:03:28 2026 GMT
Subject: CN=D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7e:9d:28:55:56:b2:de:eb:76:19:19:e8:67:
bd:e0:6b:45:bf:20:90:38:95:af:92:9c:95:fe:13:
a7:70:d9:b1:48:28:f9:c7:17:95:06:f3:de:a8:76:
d9:f0:0e:ff:db:9e:a7:82:d4:01:39:64:f1:31:e4:
45:48:7e:f3:60:54:41:03:3d:bc:c0:7c:ea:37:66:
c7:6a:83:8c:a2:ea:e5:6f:8d:ad:64:8a:f5:f7:b7:
20:5c:3e:90:5b:2b:f0:07:d1:13:5a:8d:fe:b9:95:
61:72:ac:f8:42:0a:06:69:f6:45:01:a6:b0:6c:a9:
3a:de:5c:5b:85:2b:c8:3e:78:45:87:a3:0e:85:63:
8c:50:b2:2b:25:c6:36:19:60:ba:65:18:d8:e7:74:
a9:7e:89:0d:08:e7:c1:b1:eb:5f:c3:e6:ee:fa:87:
d5:d0:66:46:54:55:93:3f:2b:e8:b0:07:9c:78:56:
25:1a:12:fe:93:8f:60:92:2c:03:d7:5b:74:9c:62:
d0:d5:0d:79:68:0c:96:f3:85:21:af:c8:19:3d:af:
30:33:10:78:2d:f0:ac:4d:2d:e2:bc:db:07:70:e2:
d3:64:7a:4e:a2:20:81:94:e7:5f:73:b0:d8:da:aa:
bf:a3:84:42:5b:16:7b:56:33:cf:72:1e:c7:52:83:
e1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D3:E0:F3:C6:14:B2:22:0C:8F:77:C1:52:E1:A6:7F:4B:0B:FB:16:25
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/1/D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.228.0/22
IPv6:
2804:3914::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266523
Signature Algorithm: sha256WithRSAEncryption
12:7d:cb:b6:49:f6:44:26:30:54:90:3d:2a:2a:83:f3:bf:0e:
2d:d2:4e:e6:d9:29:e5:d6:36:52:9b:2b:53:e1:69:1a:82:51:
d9:a7:a5:c8:d6:33:85:ef:38:57:92:5b:7d:d3:eb:29:5b:56:
09:30:4e:cb:81:97:5a:a0:11:11:ef:ac:2a:e7:47:e6:03:79:
31:ad:d8:34:1d:b2:31:03:b8:ae:0e:05:f5:c0:0c:8a:28:ea:
1c:c7:45:fe:79:86:d4:67:ee:1b:1c:54:ff:3c:68:02:d4:5f:
eb:49:5e:8a:fb:2b:f3:78:40:c4:47:55:86:54:f8:de:a3:e6:
79:34:fe:36:08:3b:2f:15:1e:60:32:ef:a8:56:21:76:95:e1:
0f:0c:d0:df:38:94:b9:a6:c6:1e:fa:b6:8c:db:98:17:da:3c:
95:22:f2:4a:0d:bd:2c:d0:83:90:c9:44:c0:3c:4b:07:f1:b3:
fc:42:fb:68:d5:ac:ba:59:66:3c:2a:df:a2:51:4b:fb:41:35:
63:1a:2f:15:8a:f9:fa:42:0c:3e:f9:a4:52:84:9b:4c:d6:46:
cb:b9:4d:82:70:af:23:89:34:95:80:60:5e:69:5a:e1:dc:8f:
04:59:8e:53:d8:99:2e:b0:af:2b:0b:49:79:05:0c:01:c7:f5:
33:2d:95:1e
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIURoPeIEXNK6D0ZVOE1gLbEMlPkgEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMTAyMzU4MjhaFw0yNjAzMTAwMDAzMjhaMDMxMTAvBgNV
BAMTKEQzRTBGM0M2MTRCMjIyMEM4Rjc3QzE1MkUxQTY3RjRCMEJGQjE2MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgfp0oVVay3ut2GRnoZ73ga0W/
IJA4la+SnJX+E6dw2bFIKPnHF5UG896odtnwDv/bnqeC1AE5ZPEx5EVIfvNgVEED
PbzAfOo3Zsdqg4yi6uVvja1kivX3tyBcPpBbK/AH0RNajf65lWFyrPhCCgZp9kUB
prBsqTreXFuFK8g+eEWHow6FY4xQsislxjYZYLplGNjndKl+iQ0I58Gx61/D5u76
h9XQZkZUVZM/K+iwB5x4ViUaEv6Tj2CSLAPXW3ScYtDVDXloDJbzhSGvyBk9rzAz
EHgt8KxNLeK82wdw4tNkek6iIIGU519zsNjaqr+jhEJbFntWM89yHsdSg+GRAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTT4PPGFLIiDI93
wVLhpn9LC/sWJTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR253
Z210Z0ZYbnlhelNNVmhYNzFMejYxdTN4dFFjUjVHTXU2aWNhTE5OTksvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR253
Z210Z0ZYbnlhelNNVmhYNzFMejYxdTN4dFFjUjVHTXU2aWNhTE5OTksvMS9EM0Uw
RjNDNjE0QjIyMjBDOEY3N0MxNTJFMUE2N0Y0QjBCRkIxNjI1Lm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAKq9OQwDQQCAAIwBwMFACgEORQwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBBEbMA0GCSqGSIb3DQEBCwUAA4IBAQASfcu2SfZEJjBUkD0q
KoPzvw4t0k7m2Snl1jZSmytT4WkaglHZp6XI1jOF7zhXklt90+spW1YJME7LgZda
oBER76wq50fmA3kxrdg0HbIxA7iuDgX1wAyKKOocx0X+eYbUZ+4bHFT/PGgC1F/r
SV6K+yvzeEDER1WGVPjeo+Z5NP42CDsvFR5gMu+oViF2leEPDNDfOJS5psYe+raM
25gX2jyVIvJKDb0s0IOQyUTAPEsH8bP8Qvto1ay6WWY8Kt+iUUv7QTVjGi8Vivn6
Qgw++aRShJtM1kbLuU2CcK8jiTSVgGBeaVrh3I8EWY5T2JkusK8rC0l5BQwBx/Uz
LZUe
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:39:11 2025 by rpki-client