Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0C7E5BA90F8E96FEEE1254FCBA3A123CA1C740DA.cer
File: 0C7E5BA90F8E96FEEE1254FCBA3A123CA1C740DA.cer (raw, json)
Hash identifier: vNuX6l9HKn6vFppP0LbEe5R7bRFj/QF0H7jpTwTtsvo=
Subject key identifier: 0C:7E:5B:A9:0F:8E:96:FE:EE:12:54:FC:BA:3A:12:3C:A1:C7:40:DA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 729008533D4263E6568A8A563708FAC10E82F1C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/0/0C7E5BA90F8E96FEEE1254FCBA3A123CA1C740DA.mft
caRepository: rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/0
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 07 Sep 2023 14:15:10 +0000
Certificate not after: Thu 05 Sep 2024 14:20:10 +0000
Subordinate resources: AS: 264440
IP: 131.221.244.0/22
IP: 138.121.224.0/22
IP: 170.233.156.0/22
IP: 2804:1ea0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:90:08:53:3d:42:63:e6:56:8a:8a:56:37:08:fa:c1:0e:82:f1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Sep 7 14:15:10 2023 GMT
Not After : Sep 5 14:20:10 2024 GMT
Subject: CN=0C7E5BA90F8E96FEEE1254FCBA3A123CA1C740DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b8:68:50:95:3b:ac:70:8e:32:09:62:0e:37:
78:89:e9:39:f2:cc:05:92:10:59:ba:9b:f5:0d:9f:
72:ba:e1:c5:2d:28:7b:66:16:95:b7:2f:57:42:ed:
f8:8c:7a:e3:10:1f:0c:ee:c0:0e:d6:af:3c:28:13:
03:fe:eb:41:2e:0c:ed:19:54:ca:db:fc:fe:f9:e6:
df:8d:fe:33:c8:93:47:25:3b:72:5a:f1:b8:92:c1:
2a:ad:e1:3b:7e:dc:f0:da:50:a5:92:b5:38:62:10:
4d:77:35:94:99:40:7d:39:13:d6:ae:62:00:44:d5:
ce:67:b2:59:64:43:36:0c:e7:96:91:7f:4b:43:6b:
da:5f:71:b5:6c:7b:db:52:57:4d:2b:e9:c4:33:68:
a8:d1:4e:d1:6a:ae:b3:a7:11:93:27:9c:42:77:ef:
27:dd:5a:c8:a4:a7:85:4d:0b:cc:ab:2b:d7:7c:b8:
dd:05:3a:cb:e9:2d:bd:78:d9:36:2f:ca:bf:1c:b3:
4f:75:cf:c6:bd:1d:da:e5:bd:4a:0d:6b:14:0c:bd:
fe:63:e5:a2:78:cd:a0:1a:18:66:d4:26:b8:03:e6:
6b:97:f9:00:c1:87:2d:4a:7b:c3:2f:c3:9a:d1:f2:
85:90:52:99:2f:41:5c:76:dc:61:fb:53:3d:79:8f:
1b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0C:7E:5B:A9:0F:8E:96:FE:EE:12:54:FC:BA:3A:12:3C:A1:C7:40:DA
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/0/0C7E5BA90F8E96FEEE1254FCBA3A123CA1C740DA.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.244.0/22
138.121.224.0/22
170.233.156.0/22
IPv6:
2804:1ea0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264440
Signature Algorithm: sha256WithRSAEncryption
51:bf:38:c4:ae:ee:dc:d0:32:54:24:af:11:46:6f:73:c7:4c:
5a:57:b4:ee:d3:76:06:4f:cc:f9:fa:95:47:d8:40:43:22:d7:
c2:63:58:d6:60:ce:c6:dc:d2:e1:c8:4f:5e:f4:b4:4b:a2:5c:
00:62:6d:32:40:24:19:aa:56:8d:ad:2a:5a:d9:ba:7d:84:01:
ec:11:b6:36:02:b2:36:29:3d:cb:89:25:03:1a:aa:3f:a0:fe:
2a:82:19:65:be:d8:03:e0:20:74:ec:71:3e:10:62:1d:09:a9:
c4:89:75:bb:12:96:74:4e:87:c7:5d:08:dc:50:c5:93:1a:28:
f5:82:34:df:ae:e7:6b:cd:cd:a7:9c:a6:7b:7c:29:ad:9d:a3:
65:6d:76:85:bb:b3:4e:d0:d5:aa:6f:98:b8:cc:62:bd:ad:49:
90:ce:64:69:80:15:e0:d2:8e:f5:59:e7:23:fc:be:8f:96:36:
1f:9a:56:ce:d2:01:7b:5d:52:66:e5:99:23:8d:2c:af:33:06:
d8:fd:00:f8:51:2d:f1:47:31:8e:6e:5e:5f:e6:6e:81:d7:9f:
2b:45:b1:1f:09:92:ec:fe:c9:c6:82:0b:f3:62:43:79:2e:87:
1f:f9:1e:40:0a:e8:e0:cc:c8:ff:a1:f2:f7:c8:a9:b2:4d:d5:
be:4d:1f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org