Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0257CBD843A248AFF657DA292BC180FA6D42C4D9.cer
File: 0257CBD843A248AFF657DA292BC180FA6D42C4D9.cer (raw, json)
Hash identifier: rHAIaXd4Hf6J6elYNX8c6vWKl9B08YEMMHrIIp+YCRs=
Subject key identifier: 02:57:CB:D8:43:A2:48:AF:F6:57:DA:29:2B:C1:80:FA:6D:42:C4:D9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 68DA41727853866250398DE5FAF8CF0363CD5E2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/0257CBD843A248AFF657DA292BC180FA6D42C4D9.mft
caRepository: rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 05 Sep 2022 17:44:15 +0000
Certificate not after: Mon 04 Sep 2023 17:49:15 +0000
Subordinate resources: AS: 61901
IP: 170.254.52.0/22
IP: 191.5.64.0/21
IP: 2804:1370::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:da:41:72:78:53:86:62:50:39:8d:e5:fa:f8:cf:03:63:cd:5e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Sep 5 17:44:15 2022 GMT
Not After : Sep 4 17:49:15 2023 GMT
Subject: CN=0257CBD843A248AFF657DA292BC180FA6D42C4D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:21:96:c6:50:a2:57:b3:7b:be:5e:12:04:
af:97:8a:26:78:57:78:9f:ff:75:c0:64:7d:29:df:
ed:8c:72:c6:ec:7d:bb:50:73:da:f7:bb:da:d5:7d:
48:99:12:3b:90:38:bc:bd:57:95:05:54:de:05:71:
48:f8:0a:fb:b2:ff:bc:1d:1c:af:bf:a6:ea:44:bd:
9b:eb:b9:cc:d6:d7:1b:92:84:d3:85:86:58:4b:a7:
69:00:39:2c:9c:c0:db:20:a0:e5:d7:fc:a0:21:80:
f1:df:78:bc:3f:72:25:36:26:a3:ea:db:b0:90:62:
37:ba:19:b9:7c:db:ec:b2:9f:02:29:49:6a:21:d6:
44:2b:60:2f:62:02:7a:ce:d5:29:86:5a:31:5c:43:
45:b4:ac:30:5c:79:1b:90:43:92:68:84:72:3b:41:
32:12:a4:d8:e3:3f:9b:23:b1:45:d6:89:44:bd:0a:
55:e9:82:71:ca:0a:ae:31:ba:b6:82:ee:48:25:fb:
c4:6a:ad:85:b8:58:58:7b:ec:72:76:36:cd:8c:16:
0e:aa:dd:c3:d4:41:02:2f:b4:09:30:f9:8d:af:71:
0e:e0:53:0c:d1:d4:79:37:56:78:23:b4:b9:5d:4d:
4d:85:74:e7:65:e2:8c:7b:96:ff:ff:1b:1c:9a:09:
33:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
02:57:CB:D8:43:A2:48:AF:F6:57:DA:29:2B:C1:80:FA:6D:42:C4:D9
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/0257CBD843A248AFF657DA292BC180FA6D42C4D9.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.52.0/22
191.5.64.0/21
IPv6:
2804:1370::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61901
Signature Algorithm: sha256WithRSAEncryption
60:78:33:87:a7:22:f0:30:fd:10:a5:25:38:dd:9e:03:b4:5a:
e4:bc:e9:57:ee:e1:22:d4:da:b4:18:df:9b:d4:4a:f1:05:93:
a3:ca:f1:3b:c6:e8:30:c1:25:0b:07:d6:13:78:ea:1d:e0:8a:
02:db:06:76:77:ee:d8:50:3a:56:5f:e2:bf:71:5a:4c:5e:19:
43:8f:12:ab:34:92:3b:b1:44:e6:d9:7b:d8:5b:21:80:2c:d5:
ee:ed:59:64:35:6f:86:9c:a4:52:a7:58:8b:9b:c2:20:51:b3:
cd:35:00:43:dc:dc:88:12:f2:83:51:20:fe:3b:1b:e9:04:9c:
90:9f:58:be:37:e1:85:c0:43:f3:9d:d1:a6:68:c5:dd:04:9d:
ca:4e:12:4f:1c:86:ec:fc:1c:ba:00:b0:5d:92:4b:c4:94:a2:
01:22:09:79:59:f1:7d:17:be:fb:be:08:4b:26:84:67:65:39:
c4:6a:fe:db:e6:46:7d:50:f4:2e:1b:fd:09:e4:82:01:1e:16:
4b:11:12:4b:42:49:b8:3e:d3:4b:f9:1e:b2:ae:ee:c6:f9:26:
7b:55:b9:0e:d1:38:b9:39:c8:7d:e8:4e:8e:5f:f6:87:d4:e3:
b1:cc:a8:28:9f:ca:fb:2a:8a:0f:58:dc:79:75:ab:18:f0:d9:
1e:3c:24:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:18 2024 by rpki-client on console-ams.rpki-client.org