Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer
File: D4206C10F587084E3266C97EDA0F65643299E1B8.cer (raw, json)
Hash identifier: I3yiBj1qxvB3Hnc1am+tnHX+T+g9Awp9AZ7HwE3a//M=
Subject key identifier: D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 338A1C59ED5C986CC430A9029CC5093626897223
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.mft
caRepository: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 25 Nov 2024 16:54:28 +0000
Certificate not after: Mon 24 Nov 2025 16:59:28 +0000
Subordinate resources: AS: 28211
AS: 28241
AS: 28258
AS: 53085
AS: 53184
AS: 53190 -- 53191
AS: 262481
AS: 262671
AS: 262673
AS: 262700
AS: 262794
AS: 263032
AS: 263072
AS: 263297
AS: 263405
AS: 263645
AS: 263864
AS: 266201
AS: 266949
AS: 267085
AS: 267404
AS: 268613
IP: 45.160.88.0/22
IP: 45.164.4.0/22
IP: 45.166.204.0/22
IP: 45.225.196.0/22
IP: 45.228.240.0/22
IP: 45.230.116.0/22
IP: 45.234.240.0/22
IP: 45.237.108.0/22
IP: 128.201.0.0/22
IP: 131.255.124.0/22
IP: 132.255.148.0/22
IP: 138.36.48.0/22
IP: 138.94.32.0/22
IP: 138.117.72.0/22
IP: 138.118.84.0/22
IP: 138.186.164.0/22
IP: 143.0.228.0/22
IP: 143.137.72.0/22
IP: 143.202.168.0/22
IP: 143.255.244.0/22
IP: 143.255.252.0/22
IP: 161.22.56.0/21
IP: 167.249.92.0/22
IP: 168.0.124.0/22
IP: 168.0.148.0/22
IP: 168.90.44.0/22
IP: 168.121.16.0/22
IP: 168.195.84.0/22
IP: 168.196.180.0/22
IP: 168.227.196.0/22
IP: 170.79.220.0/22
IP: 170.82.136.0/22
IP: 170.82.196.0/22
IP: 170.238.192.0/22
IP: 170.239.232.0/22
IP: 170.245.12.0/22
IP: 170.246.208.0/22
IP: 170.254.32.0/22
IP: 177.8.216.0/22
IP: 177.39.64.0/21
IP: 177.53.240.0/21
IP: 177.70.80.0/20
IP: 177.73.0.0/21
IP: 177.74.120.0/21
IP: 177.87.32.0/22
IP: 177.104.64.0/19
IP: 177.126.224.0/20
IP: 177.129.24.0/22
IP: 177.137.56.0/21
IP: 177.137.80.0/21
IP: 177.155.248.0/22
IP: 177.184.96.0/19
IP: 177.222.248.0/21
IP: 179.127.248.0/21
IP: 186.195.80.0/20
IP: 186.232.48.0/21
IP: 186.232.112.0/21
IP: 186.232.128.0/21
IP: 186.235.96.0/20
IP: 186.235.192.0/19
IP: 186.250.36.0/22
IP: 187.0.176.0/20
IP: 187.16.176.0/20
IP: 187.33.160.0/20
IP: 187.73.16.0/20
IP: 187.73.64.0/19
IP: 187.85.80.0/20
IP: 187.102.112.0/20
IP: 189.90.80.0/20
IP: 189.113.80.0/20
IP: 190.108.96.0/19
IP: 191.5.144.0/20
IP: 191.6.136.0/22
IP: 191.37.240.0 -- 191.37.251.255
IP: 192.140.32.0/22
IP: 201.76.112.0/20
IP: 201.162.64.0/18
IP: 2804:1c8::/32
IP: 2804:5d0::/32
IP: 2804:950::/32
IP: 2804:d20::/32
IP: 2804:f2c::/32
IP: 2804:10b4::/32
IP: 2804:13d0::/32
IP: 2804:1530::/32
IP: 2804:15b4::/32
IP: 2804:1790::/32
IP: 2804:187c::/32
IP: 2804:21a4::/32
IP: 2804:2484::/32
IP: 2804:26ec::/32
IP: 2804:2984::/32
IP: 2804:2b6c::/32
IP: 2804:2d24::/32
IP: 2804:37e8::/32
IP: 2804:3c48::/32
IP: 2804:45c8::/32
IP: 2804:47ec::/32
IP: 2804:4cf8::/32
IP: 2804:53e0::/32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 27 Nov 2024 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:8a:1c:59:ed:5c:98:6c:c4:30:a9:02:9c:c5:09:36:26:89:72:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 25 16:54:28 2024 GMT
Not After : Nov 24 16:59:28 2025 GMT
Subject: CN=D4206C10F587084E3266C97EDA0F65643299E1B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:15:14:3f:39:e2:d0:5d:4b:6d:34:0d:5c:
78:13:9e:d5:76:92:0c:97:1f:e1:d9:b6:e3:87:17:
a7:03:d0:77:e0:0d:d7:bf:78:5d:87:bc:19:ae:e6:
ce:20:32:e4:44:f5:18:35:8d:9e:9f:d1:6b:f1:d7:
cf:39:66:c2:5c:0c:69:a9:5f:2f:6e:8b:86:1b:21:
f1:b9:55:c7:1d:70:ec:63:9d:a3:0d:d4:ed:b5:b5:
48:6d:49:62:e5:b1:d4:81:3e:11:d6:16:eb:80:75:
14:d2:df:60:13:0a:e9:29:8b:98:89:d7:40:c8:b5:
ca:d0:25:19:17:36:cd:b5:91:b8:cc:be:50:ea:72:
9d:e7:89:6a:59:1f:4c:97:7d:b2:68:83:a7:2a:83:
a5:2b:0f:f1:b1:60:93:db:18:2e:21:1e:83:fe:7f:
f8:68:37:fc:39:16:de:63:d6:b5:2a:f8:cd:b8:a4:
5f:2d:5d:9f:62:59:60:da:68:e1:54:0e:90:cc:dc:
4a:c1:c5:5e:47:79:b0:b1:58:dc:85:1d:ae:78:57:
b5:e6:bb:28:4b:ec:33:e5:4d:3c:32:d1:ca:f0:63:
21:eb:32:98:01:80:60:8a:45:df:32:71:e8:b7:2c:
eb:e5:43:d0:34:61:e1:04:a4:c6:ee:be:ea:bb:57:
4d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.160.88.0/22
45.164.4.0/22
45.166.204.0/22
45.225.196.0/22
45.228.240.0/22
45.230.116.0/22
45.234.240.0/22
45.237.108.0/22
128.201.0.0/22
131.255.124.0/22
132.255.148.0/22
138.36.48.0/22
138.94.32.0/22
138.117.72.0/22
138.118.84.0/22
138.186.164.0/22
143.0.228.0/22
143.137.72.0/22
143.202.168.0/22
143.255.244.0/22
143.255.252.0/22
161.22.56.0/21
167.249.92.0/22
168.0.124.0/22
168.0.148.0/22
168.90.44.0/22
168.121.16.0/22
168.195.84.0/22
168.196.180.0/22
168.227.196.0/22
170.79.220.0/22
170.82.136.0/22
170.82.196.0/22
170.238.192.0/22
170.239.232.0/22
170.245.12.0/22
170.246.208.0/22
170.254.32.0/22
177.8.216.0/22
177.39.64.0/21
177.53.240.0/21
177.70.80.0/20
177.73.0.0/21
177.74.120.0/21
177.87.32.0/22
177.104.64.0/19
177.126.224.0/20
177.129.24.0/22
177.137.56.0/21
177.137.80.0/21
177.155.248.0/22
177.184.96.0/19
177.222.248.0/21
179.127.248.0/21
186.195.80.0/20
186.232.48.0/21
186.232.112.0/21
186.232.128.0/21
186.235.96.0/20
186.235.192.0/19
186.250.36.0/22
187.0.176.0/20
187.16.176.0/20
187.33.160.0/20
187.73.16.0/20
187.73.64.0/19
187.85.80.0/20
187.102.112.0/20
189.90.80.0/20
189.113.80.0/20
190.108.96.0/19
191.5.144.0/20
191.6.136.0/22
191.37.240.0-191.37.251.255
192.140.32.0/22
201.76.112.0/20
201.162.64.0/18
IPv6:
2804:1c8::/32
2804:5d0::/32
2804:950::/32
2804:d20::/32
2804:f2c::/32
2804:10b4::/32
2804:13d0::/32
2804:1530::/32
2804:15b4::/32
2804:1790::/32
2804:187c::/32
2804:21a4::/32
2804:2484::/32
2804:26ec::/32
2804:2984::/32
2804:2b6c::/32
2804:2d24::/32
2804:37e8::/32
2804:3c48::/32
2804:45c8::/32
2804:47ec::/32
2804:4cf8::/32
2804:53e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28211
28241
28258
53085
53184
53190-53191
262481
262671
262673
262700
262794
263032
263072
263297
263405
263645
263864
266201
266949
267085
267404
268613
Signature Algorithm: sha256WithRSAEncryption
60:88:87:43:d1:0f:f7:fb:27:1a:8b:46:a2:23:cc:69:83:03:
f5:98:73:8f:31:91:2e:00:dc:65:1c:2c:a3:b7:22:e6:8d:d7:
c7:58:db:96:8f:ba:60:fb:23:99:33:2d:1c:9d:7f:74:13:2d:
5c:e2:b7:0f:85:bb:d1:1c:0b:bb:0e:91:aa:50:f6:24:0e:4e:
0c:de:96:3d:1c:73:ed:74:81:5f:cc:e1:b2:b5:1d:b1:e4:a5:
57:cc:d3:a4:47:66:df:9e:3d:0c:74:71:2f:57:70:51:ac:dd:
18:02:f6:b1:fc:f9:2d:9d:01:ca:23:3c:a8:b4:82:0f:db:38:
68:6f:84:9c:99:fc:63:13:a2:7b:c2:8f:92:ed:1c:63:9e:2f:
d1:84:f2:b2:7b:2a:ae:02:30:3f:8d:49:6d:b4:cd:fc:84:e5:
93:12:73:9d:9d:2c:0d:1e:00:bc:f6:0f:92:af:24:bb:fd:a3:
2d:e5:83:5d:60:e5:9c:76:7d:67:67:9c:de:dc:31:ef:f5:d4:
dc:f1:3f:3f:be:89:90:13:03:fd:ea:bc:a9:81:e3:6c:dc:e5:
1a:f9:38:8a:84:97:3b:b4:1e:d5:e6:05:ed:be:2d:ea:f7:b6:
08:d1:3f:34:b5:b1:16:98:fa:b5:27:10:ca:43:11:3c:1c:f9:
8c:f5:23:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:46:05 2024 by rpki-client on console-fra.rpki-client.org