Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CB7CB1FB638FEB1E83A6B71EF3A1D4B4396349AC.cer
File: CB7CB1FB638FEB1E83A6B71EF3A1D4B4396349AC.cer (raw, json)
Hash identifier: DN+RHlIScsyo0o6SSRPHzd1C7Od9BB8MVIJu7a+3jWk=
Subject key identifier: CB:7C:B1:FB:63:8F:EB:1E:83:A6:B7:1E:F3:A1:D4:B4:39:63:49:AC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 7C009555F170B6D8B9CDD8745A3E3484598D5FA8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/CB7CB1FB638FEB1E83A6B71EF3A1D4B4396349AC.mft
caRepository: rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 09 Dec 2023 12:48:45 +0000
Certificate not after: Sat 07 Dec 2024 12:53:45 +0000
Subordinate resources: AS: 271573
IP: 200.0.179.0/24
IP: 200.6.134.0/23
IP: 201.131.106.0/24
IP: 2804:7da0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:00:95:55:f1:70:b6:d8:b9:cd:d8:74:5a:3e:34:84:59:8d:5f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Dec 9 12:48:45 2023 GMT
Not After : Dec 7 12:53:45 2024 GMT
Subject: CN=CB7CB1FB638FEB1E83A6B71EF3A1D4B4396349AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fe:59:1a:2c:ae:c6:da:a4:f7:03:ce:b9:7f:
b8:b8:25:a4:77:53:77:d8:43:b7:14:eb:36:b1:73:
e0:25:a7:29:25:b5:8b:81:77:02:98:6c:6e:cb:74:
a7:42:96:98:7a:c8:17:c6:79:42:a8:eb:c1:5e:06:
61:c5:f9:7c:d1:ea:53:b3:7f:0b:66:9e:d7:70:7e:
ab:fe:20:82:3a:4f:50:56:a4:53:47:b3:3b:27:df:
d5:68:a6:8d:9b:c3:f4:4b:6c:f2:c7:9c:62:e3:23:
56:9f:4f:14:87:73:78:90:a8:11:1d:1b:24:8b:c5:
2b:d9:e7:71:e7:a2:9d:bf:52:ef:d9:49:ad:06:47:
c9:db:16:2e:f6:94:c5:4c:7e:2b:64:0f:b1:f9:48:
af:6c:2c:32:44:a4:ff:85:b4:75:26:1b:6b:bc:e1:
98:15:53:50:08:f1:53:64:88:16:bd:28:30:19:7e:
fd:c1:77:f8:e5:fe:5e:b0:3e:6e:21:01:c4:e1:71:
d1:89:dd:3e:82:e4:6d:bb:73:27:d2:84:c6:2f:35:
37:1e:77:8a:63:10:ed:23:60:d1:1d:44:c6:3c:0f:
3b:2d:55:04:7d:87:e8:d1:15:90:66:79:a3:7f:52:
8a:55:fe:60:38:5e:d8:85:4c:a3:3f:bd:54:2b:34:
ad:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CB:7C:B1:FB:63:8F:EB:1E:83:A6:B7:1E:F3:A1:D4:B4:39:63:49:AC
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/CB7CB1FB638FEB1E83A6B71EF3A1D4B4396349AC.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.0.179.0/24
200.6.134.0/23
201.131.106.0/24
IPv6:
2804:7da0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271573
Signature Algorithm: sha256WithRSAEncryption
56:af:97:e4:2f:21:3e:9e:ec:f8:93:0f:83:77:b9:26:db:c6:
a6:2c:66:9e:4e:ac:13:04:bf:8d:97:8f:9d:cc:88:4c:99:2b:
fc:cd:48:50:a9:4c:34:86:b6:b8:7e:40:71:eb:d9:2a:d6:18:
19:93:31:d7:29:70:71:3a:e8:27:1c:56:5a:17:62:93:2c:2a:
9e:9c:37:78:3d:d2:ff:6c:19:2f:4b:71:e1:66:cd:62:69:01:
ed:be:db:23:a6:fb:ee:3c:07:a1:6e:3e:4a:b1:66:1c:f7:07:
94:ca:6b:b4:ba:b7:94:7e:28:73:4e:73:47:8e:00:d0:d2:75:
d0:d7:e4:d0:3a:41:97:3d:cf:ff:a9:52:db:8f:62:8a:8e:54:
21:c8:07:3b:b6:07:39:79:bc:d7:81:77:22:f7:ff:41:82:7a:
46:35:c8:81:ac:5c:88:67:21:93:d9:fe:ba:61:a0:92:70:5b:
db:d9:4e:a4:33:4e:b0:82:57:60:c7:85:7c:30:ce:e7:fa:d2:
b1:08:e4:ae:cf:4b:8f:df:12:1d:a4:80:f5:58:f9:4f:2b:84:
c8:c4:74:99:15:90:3d:5e:b7:bb:46:df:75:f4:f0:aa:9d:a9:
c2:90:5f:dd:82:fd:30:56:8e:22:10:84:f3:2c:8a:55:9f:b0:
3e:d3:9a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org