Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D931E9B26A1EAFC9CFA4CB5B3FFDDB9AF23C9752.cer
File: D931E9B26A1EAFC9CFA4CB5B3FFDDB9AF23C9752.cer (raw, json)
Hash identifier: iM1rGzLC4OoEMyIVX20gkszxw3zcMRnHHIIk748k0G0=
Subject key identifier: D9:31:E9:B2:6A:1E:AF:C9:CF:A4:CB:5B:3F:FD:DB:9A:F2:3C:97:52
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 14A56B87B59692967B907D961CCFCD430A8AFFFE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/0/D931E9B26A1EAFC9CFA4CB5B3FFDDB9AF23C9752.mft
caRepository: rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 15 Feb 2024 12:41:18 +0000
Certificate not after: Thu 13 Feb 2025 12:46:18 +0000
Subordinate resources: AS: 270690
IP: 181.225.156.0/22
IP: 190.120.32.0/22
IP: 2804:6fe0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:a5:6b:87:b5:96:92:96:7b:90:7d:96:1c:cf:cd:43:0a:8a:ff:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Feb 15 12:41:18 2024 GMT
Not After : Feb 13 12:46:18 2025 GMT
Subject: CN=D931E9B26A1EAFC9CFA4CB5B3FFDDB9AF23C9752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:eb:35:92:47:40:2e:eb:cb:d6:b3:25:ce:07:
8a:f4:93:b2:62:b7:cc:cc:94:d4:ba:a7:a6:2d:49:
93:f3:90:a2:c4:d3:df:e3:4a:23:1c:8c:5e:cc:98:
61:21:14:2c:72:f3:6e:6a:af:35:42:75:ee:9b:d5:
01:c6:ec:7f:2d:58:3f:8f:d2:5d:6d:71:a6:9e:ec:
10:5c:39:c3:6c:68:2d:cf:25:4b:03:da:bd:5a:7b:
21:3c:61:8f:6f:59:1c:8d:9c:75:44:da:7f:18:b4:
e5:aa:73:4d:fa:c9:63:1b:17:1f:f6:18:8d:55:f2:
11:f7:5b:6d:0f:3c:3b:4f:4d:bb:43:36:3d:97:09:
71:2b:44:02:72:77:dd:33:80:99:01:61:1b:49:d2:
ec:2d:22:5c:9e:d7:ab:62:5f:41:eb:d9:1e:7b:f7:
f7:94:2c:db:23:7b:1a:c3:32:d9:80:62:90:5e:a7:
e7:60:43:9e:f0:f4:e7:b6:a3:99:b5:c9:a2:85:2b:
74:20:d6:f6:e6:06:d2:0c:11:c4:5f:5f:0b:db:35:
65:ad:7c:8a:fe:12:a0:60:03:2f:60:7c:bb:b2:35:
7b:d0:f4:55:29:81:ca:5d:e2:82:4c:04:9b:56:ba:
ef:c4:d0:6f:c2:56:f7:f7:52:b0:aa:84:5a:5b:2c:
c1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D9:31:E9:B2:6A:1E:AF:C9:CF:A4:CB:5B:3F:FD:DB:9A:F2:3C:97:52
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/0/D931E9B26A1EAFC9CFA4CB5B3FFDDB9AF23C9752.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.225.156.0/22
190.120.32.0/22
IPv6:
2804:6fe0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270690
Signature Algorithm: sha256WithRSAEncryption
20:b5:96:aa:bb:3b:e4:43:8b:08:8c:55:8d:62:e1:3c:3e:e7:
98:27:b2:de:71:0a:6b:c1:e0:62:6d:98:07:61:9e:63:55:33:
c5:7d:34:03:9b:b4:38:93:ef:41:97:0f:0e:b7:fd:6e:f2:15:
3c:09:8f:21:2e:b6:4a:25:b4:f7:78:3e:71:bc:6d:9b:6a:a6:
ed:57:66:98:07:c4:8b:ba:ca:17:65:ff:1f:69:15:30:d4:84:
fb:99:49:98:e7:74:8d:5f:fe:69:3c:2b:23:9a:c3:5e:0b:24:
84:19:38:30:9b:bc:89:b6:59:88:df:bb:41:ea:e3:39:28:52:
42:a4:b4:37:5c:eb:ab:f1:8f:9d:89:5b:fa:15:fd:df:c5:d4:
d2:28:03:a6:c1:49:a5:e9:74:76:c1:15:6c:4f:dd:a0:3e:47:
cb:b7:1d:ba:bc:2a:d8:36:45:0c:f1:4f:53:67:3b:52:b2:4e:
d8:9e:b8:61:55:c0:5c:52:91:28:6b:94:13:27:fe:a3:ce:c3:
01:c6:9e:70:a8:a5:ea:d8:67:2d:5c:82:b2:ad:f2:94:da:71:
5c:68:a7:31:06:df:0d:e5:c7:3f:6c:ba:e6:bc:44:de:bd:0c:
a5:8b:00:8a:16:8f:8f:68:ca:56:81:aa:7f:54:ce:f8:a1:60:
35:e4:95:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org