Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.cer
File: DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.cer (raw, json)
Hash identifier: s30IK3Q8uVv7HbRuM6k5nhEfVaflXVqQwoBezfri9qk=
Subject key identifier: DD:E4:0F:9C:5F:2A:C6:0E:33:33:0A:FC:0F:D9:F2:9C:AB:19:15:A3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 6B95CB001891D31066713FCB5AB12719A46249B0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.mft
caRepository: rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 13:47:28 +0000
Certificate not after: Thu 03 Apr 2025 13:52:28 +0000
Subordinate resources: AS: 264891
IP: 168.227.112.0/22
IP: 2804:2f70::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:95:cb:00:18:91:d3:10:66:71:3f:cb:5a:b1:27:19:a4:62:49:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 13:47:28 2024 GMT
Not After : Apr 3 13:52:28 2025 GMT
Subject: CN=DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:6b:e3:20:34:97:5a:a9:d3:72:d1:6d:9c:
b9:27:f0:77:f6:af:53:12:74:ac:d4:62:bf:97:fc:
92:13:78:91:63:0a:8c:b6:a3:7a:c8:32:ff:af:d8:
e2:0b:d3:90:d2:f9:5c:12:fb:6d:db:1b:94:7d:e1:
5d:76:92:45:32:50:be:dc:ad:f2:05:16:f4:0f:0b:
73:07:2e:65:3e:dd:f6:48:74:47:cd:b2:68:31:f3:
e7:23:5d:14:7a:56:90:34:37:66:f8:09:e9:22:cf:
b9:be:e6:8f:51:74:96:ca:f5:cc:1c:e5:70:f8:00:
a4:5a:24:99:e4:5c:6a:ae:24:d3:d4:6f:86:d1:2b:
99:d4:78:ba:70:59:f8:c6:ca:f8:3f:6d:61:49:6d:
1a:93:36:da:8c:7a:20:56:eb:d8:ae:8f:b0:28:d8:
2e:c0:6d:f2:c0:bc:53:0e:9d:13:4c:c6:68:27:75:
f4:4f:98:1e:d2:bb:f2:c1:29:57:71:3d:62:13:bf:
3e:4a:b7:97:f2:d1:94:6a:8f:70:73:50:19:52:4c:
2b:cb:c8:6a:09:fa:1d:ed:de:ff:c9:3b:77:48:ae:
b0:c3:a7:91:bd:db:2d:2d:f4:d5:e9:ff:c6:2b:e0:
86:bf:0d:58:b0:7a:0b:d2:81:77:05:35:49:24:2f:
63:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DD:E4:0F:9C:5F:2A:C6:0E:33:33:0A:FC:0F:D9:F2:9C:AB:19:15:A3
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/1/DDE40F9C5F2AC60E33330AFC0FD9F29CAB1915A3.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.112.0/22
IPv6:
2804:2f70::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264891
Signature Algorithm: sha256WithRSAEncryption
6b:f0:26:42:d8:2e:46:3d:f3:7c:a5:a4:b5:6e:0d:58:7c:35:
c7:95:7e:18:41:74:68:74:d4:6e:0a:c7:c6:39:3d:e3:8f:bd:
64:a9:0f:bd:44:0a:c9:6c:5d:92:3a:1d:48:c1:28:96:f9:5b:
0b:91:f5:86:5b:8e:de:a0:65:9a:55:91:8d:cd:80:64:f1:dd:
af:c3:ba:1f:d1:6f:5f:f8:51:3a:bf:d7:e0:ea:41:95:89:c8:
c8:ef:4f:2e:12:67:84:05:a8:71:79:e7:d2:fb:aa:60:cc:04:
aa:82:de:f0:a4:d5:f8:83:c8:1b:f3:97:26:e1:b9:15:ca:f4:
99:7d:10:f0:38:77:61:01:0c:05:b2:9d:bd:30:c3:f8:00:6a:
01:5e:f1:79:42:85:71:b0:a6:89:4b:ad:1d:f1:6f:04:b7:fd:
4b:c2:65:d7:93:74:d0:64:f4:d0:27:b8:02:e4:c0:8c:a0:59:
13:bf:8e:a9:55:0e:2f:2c:c4:48:bf:40:97:71:f7:d4:72:dd:
fa:b2:33:f7:d7:c2:8f:2b:0b:73:e1:ed:5b:25:13:68:5b:2f:
1f:d2:d9:78:43:b6:8a:93:ae:3a:d2:8c:43:5a:5f:78:c8:2b:
94:4c:e2:fa:a7:3d:ff:b1:0d:93:68:43:eb:6b:ae:50:35:d1:
e9:6f:09:10
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUa5XLABiR0xBmcT/LWrEnGaRiSbAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxMzQ3MjhaFw0yNTA0MDMxMzUyMjhaMDMxMTAvBgNV
BAMTKERERTQwRjlDNUYyQUM2MEUzMzMzMEFGQzBGRDlGMjlDQUIxOTE1QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3XGvjIDSXWqnTctFtnLkn8Hf2
r1MSdKzUYr+X/JITeJFjCoy2o3rIMv+v2OIL05DS+VwS+23bG5R94V12kkUyUL7c
rfIFFvQPC3MHLmU+3fZIdEfNsmgx8+cjXRR6VpA0N2b4Cekiz7m+5o9RdJbK9cwc
5XD4AKRaJJnkXGquJNPUb4bRK5nUeLpwWfjGyvg/bWFJbRqTNtqMeiBW69iuj7Ao
2C7AbfLAvFMOnRNMxmgndfRPmB7Su/LBKVdxPWITvz5Kt5fy0ZRqj3BzUBlSTCvL
yGoJ+h3t3v/JO3dIrrDDp5G92y0t9NXp/8Yr4Ia/DViwegvSgXcFNUkkL2PHAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTd5A+cXyrGDjMz
CvwP2fKcqxkVozAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQnhh
YUtCa1JSUEw1QVRHcldCMXdYR0RmVE51QnFWQ1VRWmVtdzhZcXUxTTEvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0J4
YWFLQmtSUlBMNUFUR3JXQjF3WEdEZlROdUJxVkNVUVplbXc4WXF1MU0xLzEvRERF
NDBGOUM1RjJBQzYwRTMzMzMwQUZDMEZEOUYyOUNBQjE5MTVBMy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqONwMA0EAgACMAcDBQAoBC9wMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQKuzANBgkqhkiG9w0BAQsFAAOCAQEAa/AmQtguRj3zfKWk
tW4NWHw1x5V+GEF0aHTUbgrHxjk944+9ZKkPvUQKyWxdkjodSMEolvlbC5H1hluO
3qBlmlWRjc2AZPHdr8O6H9FvX/hROr/X4OpBlYnIyO9PLhJnhAWocXnn0vuqYMwE
qoLe8KTV+IPIG/OXJuG5Fcr0mX0Q8Dh3YQEMBbKdvTDD+ABqAV7xeUKFcbCmiUut
HfFvBLf9S8Jl15N00GT00Ce4AuTAjKBZE7+OqVUOLyzESL9Al3H31HLd+rIz99fC
jysLc+HtWyUTaFsvH9LZeEO2ipOuOtKMQ1pfeMgrlEzi+qc9/7ENk2hD62uuUDXR
6W8JEA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:23:52 2025 by rpki-client