Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
File: 28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer (raw, json)
Hash identifier: T2swvP8NBdOm/6r5pf3AWi3PqDSQ7Py7ozekJMQqv1k=
Subject key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 1BD29F18C2CE2F5EA8CD56A9B4BED8F9A8C4C15A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.mft
caRepository: rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 29 Nov 2023 17:10:12 +0000
Certificate not after: Wed 27 Nov 2024 17:15:12 +0000
Subordinate resources: AS: 1916
AS: 6125
IP: 132.255.96.0/22
IP: 138.121.68.0/22
IP: 150.165.0.0/16
IP: 170.79.212.0/22
IP: 200.17.0.0/20
IP: 200.17.32.0 -- 200.17.79.255
IP: 200.17.112.0 -- 200.17.159.255
IP: 200.17.176.0/20
IP: 200.18.20.0 -- 200.18.31.255
IP: 200.18.80.0/20
IP: 200.18.128.0 -- 200.18.239.255
IP: 200.19.8.0 -- 200.19.47.255
IP: 200.19.112.0 -- 200.19.191.255
IP: 200.128.128.0 -- 200.128.239.255
IP: 200.129.0.0 -- 200.131.255.255
IP: 200.133.0.0 -- 200.133.223.255
IP: 200.133.240.0/20
IP: 200.137.0.0/16
IP: 200.139.0.0/18
IP: 200.143.192.0/18
IP: 200.159.240.0/20
IP: 200.235.0.0/17
IP: 200.237.0.0/18
IP: 200.239.128.0/18
IP: 2001:12f0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:d2:9f:18:c2:ce:2f:5e:a8:cd:56:a9:b4:be:d8:f9:a8:c4:c1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Nov 29 17:10:12 2023 GMT
Not After : Nov 27 17:15:12 2024 GMT
Subject: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:59:41:32:a7:ff:77:47:a7:43:f4:bf:70:13:
7c:51:2d:b4:03:77:f8:1e:e8:7c:25:1e:b3:05:12:
d1:12:f1:04:39:a7:a7:8b:f4:0f:71:7d:3f:bc:64:
14:99:f6:3f:2f:b7:49:7e:d2:19:1c:c6:49:9d:fe:
99:af:d2:64:a7:de:5f:3b:50:b3:8d:5a:80:01:9a:
1e:74:3b:0c:b7:31:4f:21:1a:64:49:c3:fd:37:95:
11:41:57:72:0a:9b:3d:3b:85:8e:e2:c8:de:76:e9:
c5:ab:58:54:0d:0c:98:0a:5d:bc:ee:e7:72:9a:7f:
42:b5:b8:49:57:2c:5c:ff:9e:07:04:7d:a7:38:dc:
9b:97:71:83:1e:73:62:55:4e:65:d7:6d:f2:6e:15:
b9:a4:cf:3d:a5:2e:c1:e8:50:bc:7f:08:1d:3b:2a:
95:ec:af:70:b7:b1:1f:6f:e6:69:e9:58:b1:cc:25:
f3:f4:74:55:d0:4c:59:1f:50:19:84:d2:a6:d9:40:
59:f3:6f:fa:eb:c7:ba:e4:be:79:a5:72:cc:4b:8a:
9b:8f:c6:ee:a8:78:f3:18:a0:fd:9f:f4:3f:81:08:
1e:78:6e:ac:05:c9:13:92:43:7a:6b:97:e6:36:c1:
4b:78:27:d8:8b:3a:55:96:1c:bd:f8:56:ae:cd:e0:
fc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.96.0/22
138.121.68.0/22
150.165.0.0/16
170.79.212.0/22
200.17.0.0/20
200.17.32.0-200.17.79.255
200.17.112.0-200.17.159.255
200.17.176.0/20
200.18.20.0-200.18.31.255
200.18.80.0/20
200.18.128.0-200.18.239.255
200.19.8.0-200.19.47.255
200.19.112.0-200.19.191.255
200.128.128.0-200.128.239.255
200.129.0.0-200.131.255.255
200.133.0.0-200.133.223.255
200.133.240.0/20
200.137.0.0/16
200.139.0.0/18
200.143.192.0/18
200.159.240.0/20
200.235.0.0/17
200.237.0.0/18
200.239.128.0/18
IPv6:
2001:12f0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1916
6125
Signature Algorithm: sha256WithRSAEncryption
3d:30:59:dc:03:84:4a:c1:8d:05:97:2c:e1:86:3f:78:f2:17:
0d:aa:37:30:69:55:37:f1:70:ec:2e:0f:1c:f1:4f:53:e0:53:
2f:2e:50:04:65:60:5a:19:87:9a:48:db:12:41:66:07:6e:41:
ae:01:75:26:23:51:24:73:bf:70:87:2a:90:00:68:52:72:b8:
ca:ad:d5:70:91:1e:f5:e5:94:99:e8:5d:a9:30:22:33:f7:dd:
fc:d6:d4:2d:2b:a2:25:71:b9:34:b5:85:90:ec:38:67:47:30:
2d:5c:f3:a7:37:12:61:aa:be:58:2c:0e:0b:d1:0b:b2:6d:6c:
d3:de:ca:f2:31:39:93:c6:3d:00:32:79:1f:13:d5:6c:85:fa:
4b:8c:0c:c2:0a:fb:5e:90:40:e4:03:4f:f5:44:50:99:54:bd:
b4:0d:12:ae:6a:d3:83:80:5d:2a:c0:dc:27:02:16:57:5f:53:
de:0d:d5:c4:65:34:86:c4:2a:0f:f7:54:ad:65:c9:d5:94:b9:
8e:e1:01:a5:a7:7c:4d:61:29:8c:ba:08:92:eb:e8:04:91:f7:
86:21:e3:79:5c:15:5a:74:9a:be:0e:d8:e6:46:91:bf:45:5a:
23:b9:30:ce:82:2a:73:99:fa:86:3d:fb:ce:ad:9e:b2:bf:97:
56:b8:cf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org