Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0159B28D943E30339BE3C46CC53E6B1C8FAE24DB.cer
File: 0159B28D943E30339BE3C46CC53E6B1C8FAE24DB.cer (raw, json)
Hash identifier: EDm0DM3W3bXlRHT3ghytKsVsX+w7bXsGdKnMHvJgc1c=
Subject key identifier: 01:59:B2:8D:94:3E:30:33:9B:E3:C4:6C:C5:3E:6B:1C:8F:AE:24:DB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 769EE23AAA5E5C7C3C13EDE5F22A1A7EB6E934C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/0159B28D943E30339BE3C46CC53E6B1C8FAE24DB.mft
caRepository: rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 31 Oct 2023 18:35:09 +0000
Certificate not after: Tue 29 Oct 2024 18:40:09 +0000
Subordinate resources: AS: 262952
IP: 138.122.168.0/22
IP: 170.244.104.0/22
IP: 186.233.172.0/22
IP: 187.61.120.0/21
IP: 201.148.216.0/22
IP: 2804:e64::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:9e:e2:3a:aa:5e:5c:7c:3c:13:ed:e5:f2:2a:1a:7e:b6:e9:34:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Oct 31 18:35:09 2023 GMT
Not After : Oct 29 18:40:09 2024 GMT
Subject: CN=0159B28D943E30339BE3C46CC53E6B1C8FAE24DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:53:59:b5:d2:c2:a9:55:88:91:fc:3a:9e:
b8:da:f3:76:5d:fe:eb:d5:1a:23:38:56:9b:65:e9:
3c:ea:84:e9:40:36:93:dd:33:52:59:bb:41:03:2e:
58:68:8e:1a:b5:bc:be:02:34:1e:e1:45:51:ca:33:
97:27:d3:52:14:f1:2c:24:52:83:2b:cf:24:ea:83:
85:0c:b8:06:9f:5f:c6:c3:94:cd:cf:17:a0:c4:8a:
b8:81:29:7a:41:27:f4:6a:73:e6:a4:34:dd:ef:04:
9e:e1:c3:be:11:e0:0c:84:c4:7f:4e:5a:36:ee:3d:
2d:46:d3:16:28:ab:01:09:8b:fe:69:f5:d1:3a:a6:
71:a4:a7:79:81:a7:78:64:fc:27:2c:00:b3:ec:05:
04:f1:fd:fa:99:30:ca:f0:ea:11:fa:92:38:dc:a1:
0a:9d:58:a5:ed:75:67:d9:ff:db:d3:03:32:2b:34:
f7:9d:a0:14:8d:44:38:5b:8a:5b:56:5b:77:a1:1e:
07:54:3d:df:9d:18:d1:17:5e:ad:56:3e:b8:e3:82:
cd:fb:aa:e8:6e:59:01:f2:e0:15:f4:65:47:43:70:
28:5b:92:19:be:94:8c:bb:59:19:bf:2b:86:b9:e9:
bf:12:42:73:36:c6:41:21:f4:55:5c:14:9e:b2:df:
47:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
01:59:B2:8D:94:3E:30:33:9B:E3:C4:6C:C5:3E:6B:1C:8F:AE:24:DB
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/0159B28D943E30339BE3C46CC53E6B1C8FAE24DB.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.168.0/22
170.244.104.0/22
186.233.172.0/22
187.61.120.0/21
201.148.216.0/22
IPv6:
2804:e64::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262952
Signature Algorithm: sha256WithRSAEncryption
b3:3c:25:fb:aa:ed:d9:8f:23:73:33:84:5f:1e:ac:0a:d6:e4:
f2:0a:fe:d6:97:79:db:dd:36:64:2c:ef:32:9b:97:52:e5:2e:
30:ce:00:11:36:b1:f0:9c:db:8d:2e:6a:25:46:d3:26:52:34:
a1:28:61:db:9b:33:6d:2c:28:e5:36:b9:9d:c8:5d:6f:8e:ed:
2e:53:aa:20:bc:16:c4:20:e9:3a:73:dc:68:bd:61:9d:c8:eb:
f8:2c:d1:1b:d1:8e:40:59:87:0d:6d:42:93:1e:2e:00:49:aa:
d0:d4:f4:07:3b:74:dd:1f:18:32:c0:4c:f2:fb:f1:db:46:97:
6e:06:75:c1:3c:e9:a5:e7:c6:70:39:e5:ee:d7:f7:ef:af:18:
99:a0:62:11:c8:34:19:83:03:e6:a9:c5:82:37:ed:70:70:b9:
ea:cc:a4:78:18:be:a0:52:69:66:92:03:37:fd:98:68:73:89:
d1:27:d3:b1:4b:b0:27:ec:a0:7f:cf:a1:3a:84:84:8f:52:a7:
41:c7:ae:2b:8a:b0:25:5e:34:79:65:51:70:fa:c5:48:19:e5:
ee:b5:5b:04:f8:52:0e:59:fb:50:f5:c4:db:34:2c:24:6d:40:
c4:b6:0d:26:af:af:e1:4b:92:2b:c5:f5:dc:44:bc:f2:cf:93:
53:95:4f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org