Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.cer
File: 68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.cer (raw, json)
Hash identifier: XPdJ3HgZtiDMVvHvQYF94uM2MSojCHBOZRO6Y26oTI0=
Subject key identifier: 68:C2:A8:E4:AF:89:B8:10:B3:20:6D:12:81:70:7C:C7:DB:4A:54:F5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 632DC39994F32D0AC4EC5462634BCEA0FD4DB3C1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.mft
caRepository: rsync://rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 07 Mar 2023 12:55:56 +0000
Certificate not after: Tue 05 Mar 2024 13:00:56 +0000
Subordinate resources: AS: 264084
IP: 143.202.248.0/22
IP: 170.81.184.0/22
IP: 2804:2a9c::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:2d:c3:99:94:f3:2d:0a:c4:ec:54:62:63:4b:ce:a0:fd:4d:b3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Mar 7 12:55:56 2023 GMT
Not After : Mar 5 13:00:56 2024 GMT
Subject: CN=68C2A8E4AF89B810B3206D1281707CC7DB4A54F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7b:a0:b6:e8:71:c7:a2:df:c4:8c:ad:ed:e3:
07:f4:a8:19:61:e6:24:d0:70:64:ec:cc:7f:70:8d:
9f:ae:56:e6:39:4d:e6:c1:f6:22:f0:f3:2d:e1:2a:
ab:b5:9b:db:db:12:3d:17:a0:09:63:f7:f5:b9:f9:
f2:11:2b:57:31:6f:b2:72:8b:96:e9:aa:0c:13:86:
88:6c:f7:33:6f:1c:7a:bc:1f:bf:f4:58:99:83:8e:
a4:c6:9b:a5:af:aa:f6:df:ed:c2:b4:c1:e5:34:cc:
b2:7f:9d:f2:cd:35:6e:55:6e:33:91:b0:3e:75:b8:
b4:f8:e0:78:d6:e1:d1:41:ec:29:8b:8c:6f:2c:a1:
91:f7:c5:26:ff:67:09:fb:dd:8a:b8:e0:71:f7:6a:
af:d4:cf:e8:f5:5b:a8:28:9a:aa:02:30:3e:a9:bc:
f2:56:3f:02:ac:50:68:8b:72:99:7a:ca:ec:8d:d4:
5a:21:e6:b7:8b:02:d0:f2:38:3a:89:0d:81:09:c8:
da:e5:58:78:3f:8c:df:0d:9a:37:28:e6:f0:a8:16:
6d:fd:c2:f6:ce:06:40:19:ca:2c:d5:de:aa:3e:1e:
42:79:e1:a6:53:75:43:e5:ed:95:f1:80:4a:f8:34:
b4:8f:63:93:05:a9:98:1b:f0:a6:08:16:86:c5:46:
5f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
68:C2:A8:E4:AF:89:B8:10:B3:20:6D:12:81:70:7C:C7:DB:4A:54:F5
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.248.0/22
170.81.184.0/22
IPv6:
2804:2a9c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264084
Signature Algorithm: sha256WithRSAEncryption
99:93:58:27:a6:e0:b3:94:18:38:54:b6:a4:1d:01:13:75:b0:
9a:38:70:0e:a6:ce:3a:25:3b:8c:14:a9:95:0f:27:08:c9:5d:
f5:25:ec:0e:72:72:b3:d5:82:f3:b5:c9:41:c8:55:1d:fd:48:
1a:c6:9a:de:cf:7e:9c:aa:76:9b:8d:e4:f9:7b:34:3b:40:20:
d1:d3:22:4c:0b:1d:1a:56:a3:dc:56:43:ef:02:4d:db:23:bc:
49:d3:55:a7:fc:83:b3:77:f4:e8:14:3a:86:cb:51:2a:22:8c:
82:61:d2:b8:02:c1:8d:61:ba:d5:aa:30:a9:55:ed:69:31:aa:
e1:28:0c:2a:ac:5c:6c:dd:b1:1c:e0:e7:a8:3f:dc:7c:7c:79:
44:78:3f:8a:98:f7:20:33:57:1e:e5:ce:40:b2:fd:80:e5:c6:
e2:33:03:69:2e:1d:10:fd:25:27:76:9d:56:3b:68:c9:0b:a7:
a3:d0:34:d3:3e:76:18:09:5f:69:75:4b:db:f8:de:7e:f9:19:
6d:47:93:82:b6:3a:45:f1:b8:a3:e7:9e:11:eb:e7:20:e8:8e:
9f:c5:7f:3e:b6:1e:fe:8f:44:3b:b5:fc:4e:6b:76:41:2d:68:
42:d8:92:9a:78:c7:8d:eb:a7:74:72:f1:f1:25:23:7b:02:4c:
52:e5:54:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:27:35 2025 by rpki-client