Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB.cer
File: E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB.cer (raw, json)
Hash identifier: TIAgbFJuvcxY3vYOMoxdSlWTzPa0gQ/BAPRjUvFkwGs=
Subject key identifier: E3:87:5F:4F:49:41:71:D8:D4:FF:E7:94:B4:2A:8B:5C:ED:1A:6D:DB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2F4E69952FB8455565F55312B65DE50713F98F9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/2/E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB.mft
caRepository: rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/2/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 28 Mar 2025 23:01:05 +0000
Certificate not after: Fri 27 Mar 2026 23:06:05 +0000
Subordinate resources: AS: 53181
IP: 138.204.64.0/22
IP: 191.241.64.0/20
IP: 201.33.160.0/20
IP: 2804:113c::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:4e:69:95:2f:b8:45:55:65:f5:53:12:b6:5d:e5:07:13:f9:8f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 28 23:01:05 2025 GMT
Not After : Mar 27 23:06:05 2026 GMT
Subject: CN=E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3a:21:6a:bb:93:44:65:e4:f4:e6:ee:bd:36:
d5:9e:5d:2f:04:74:87:9c:43:ff:5a:3f:8e:40:bb:
42:04:de:57:36:4b:97:68:4f:74:09:67:3e:fd:41:
78:55:87:5a:89:e7:9a:8e:13:46:62:a2:65:5c:f7:
c3:6f:1c:c0:66:7c:c0:75:65:4a:04:6f:3e:54:20:
59:79:d2:02:9c:dc:87:c0:fd:8c:ad:d3:63:81:86:
ac:6a:c5:e6:e6:97:71:c5:09:e9:4e:b3:27:c4:e9:
0d:71:12:93:8d:d8:49:3c:46:0b:dd:9e:d8:cc:20:
84:8d:62:bc:3b:93:95:be:2b:fd:9d:ac:30:62:d6:
06:ac:96:3f:44:cd:55:d8:be:46:40:7d:50:18:d1:
fe:b3:4a:38:6c:84:73:4c:46:13:ed:cd:5b:dd:80:
16:3f:d5:3b:a8:c1:71:c5:c3:4b:af:cf:3c:0b:84:
52:45:5e:b2:c7:6a:f5:50:47:42:da:0c:00:8b:79:
f2:1d:09:a2:b5:f4:ad:a0:20:97:b1:df:d9:22:3f:
f8:94:38:cf:2e:d4:a3:9c:04:e0:4f:6b:85:17:33:
2a:62:69:99:30:87:1f:fb:c8:8d:cc:93:04:ed:61:
23:85:0d:85:22:2b:d1:09:8e:45:01:d8:63:15:8e:
87:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E3:87:5F:4F:49:41:71:D8:D4:FF:E7:94:B4:2A:8B:5C:ED:1A:6D:DB
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/2/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/2/E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.64.0/22
191.241.64.0/20
201.33.160.0/20
IPv6:
2804:113c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
53181
Signature Algorithm: sha256WithRSAEncryption
00:b1:7a:fa:63:bf:8e:48:50:18:2d:b5:39:75:d3:43:e9:38:
f1:8f:99:6a:92:ad:87:5b:8c:81:09:3d:b3:6f:c0:95:fd:48:
ac:84:73:47:c9:0b:84:cb:73:57:70:1a:74:3b:59:78:8c:fe:
d2:0a:79:d2:a6:51:6a:29:0b:b7:81:4c:10:2e:d8:c1:4d:27:
28:6b:f0:1b:1f:dd:e3:ad:bb:2d:48:16:e6:d4:63:d7:5f:76:
33:b8:aa:6a:6e:bc:0a:ec:ba:c2:f3:b5:60:18:bb:ef:ad:ae:
44:de:74:16:7c:39:55:e3:23:36:d0:df:70:5e:d9:95:c9:fc:
c0:ec:5c:1c:76:09:bf:4c:20:c7:96:e3:26:2b:d8:21:01:e5:
d9:44:30:58:e5:29:6d:29:2b:c5:42:88:0d:10:77:6e:65:18:
27:31:35:12:32:7a:f4:11:52:1e:3c:37:c8:fd:98:64:30:a5:
d0:68:ac:19:6f:5e:f1:ba:bc:cb:f2:f2:44:60:c4:a3:62:b8:
f5:5c:80:c5:91:77:9c:d7:97:75:f7:39:2d:54:76:a7:ab:15:
b3:9e:4c:e2:3c:e2:f3:4f:03:75:4d:bd:5e:17:c1:a1:16:05:
32:2e:0f:bf:cb:13:c6:fe:a5:89:4b:67:36:a3:d4:ed:26:c7:
87:5a:2f:88
-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgIUL05plS+4RVVl9VMStl3lBxP5j5swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMjgyMzAxMDVaFw0yNjAzMjcyMzA2MDVaMDMxMTAvBgNV
BAMTKEUzODc1RjRGNDk0MTcxRDhENEZGRTc5NEI0MkE4QjVDRUQxQTZEREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiOiFqu5NEZeT05u69NtWeXS8E
dIecQ/9aP45Au0IE3lc2S5doT3QJZz79QXhVh1qJ55qOE0ZiomVc98NvHMBmfMB1
ZUoEbz5UIFl50gKc3IfA/Yyt02OBhqxqxebml3HFCelOsyfE6Q1xEpON2Ek8Rgvd
ntjMIISNYrw7k5W+K/2drDBi1gaslj9EzVXYvkZAfVAY0f6zSjhshHNMRhPtzVvd
gBY/1TuowXHFw0uvzzwLhFJFXrLHavVQR0LaDACLefIdCaK19K2gIJex39kiP/iU
OM8u1KOcBOBPa4UXMypiaZkwhx/7yI3MkwTtYSOFDYUiK9EJjkUB2GMVjofhAgMB
AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTjh19PSUFx2NT/
55S0Kotc7Rpt2zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRVV5
NGF3Q202QUhBUk1kYllFMVo3aHNTaXlRNnF6UU5OQ2lLczZ4RHBOZDgvMi8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VV
eTRhd0NtNkFIQVJNZGJZRTFaN2hzU2l5UTZxelFOTkNpS3M2eERwTmQ4LzIvRTM4
NzVGNEY0OTQxNzFEOEQ0RkZFNzk0QjQyQThCNUNFRDFBNkREQi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH
AQH/BCswKTAYBAIAATASAwQCisxAAwQEv/FAAwQEySGgMA0EAgACMAcDBQAoBBE8
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDPvTANBgkqhkiG9w0BAQsFAAOCAQEA
ALF6+mO/jkhQGC21OXXTQ+k48Y+ZapKth1uMgQk9s2/Alf1IrIRzR8kLhMtzV3Aa
dDtZeIz+0gp50qZRaikLt4FMEC7YwU0nKGvwGx/d4627LUgW5tRj1192M7iqam68
Cuy6wvO1YBi7762uRN50Fnw5VeMjNtDfcF7Zlcn8wOxcHHYJv0wgx5bjJivYIQHl
2UQwWOUpbSkrxUKIDRB3bmUYJzE1EjJ69BFSHjw3yP2YZDCl0GisGW9e8bq8y/Ly
RGDEo2K49VyAxZF3nNeXdfc5LVR2p6sVs55M4jzi808DdU29XhfBoRYFMi4Pv8sT
xv6liUtnNqPU7SbHh1oviA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:20:06 2025 by rpki-client