Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/133EC73F873552B7C1C2E7AA61D3014E33FB793E.cer
File: 133EC73F873552B7C1C2E7AA61D3014E33FB793E.cer (raw, json)
Hash identifier: Ey4appA6lEyBlDcumV+mKCuSCK+MomlYVyjt8cWM8UE=
Subject key identifier: 13:3E:C7:3F:87:35:52:B7:C1:C2:E7:AA:61:D3:01:4E:33:FB:79:3E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 5F480A67C7A78C80E3DD2EC095698F7FEF0A8A82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/133EC73F873552B7C1C2E7AA61D3014E33FB793E.mft
caRepository: rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 26 Mar 2024 13:57:19 +0000
Certificate not after: Tue 25 Mar 2025 14:02:19 +0000
Subordinate resources: AS: 28642
IP: 168.228.180.0/22
IP: 170.246.128.0/22
IP: 179.108.160.0/20
IP: 201.76.0.0/20
IP: 2804:ef4::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:48:0a:67:c7:a7:8c:80:e3:dd:2e:c0:95:69:8f:7f:ef:0a:8a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Mar 26 13:57:19 2024 GMT
Not After : Mar 25 14:02:19 2025 GMT
Subject: CN=133EC73F873552B7C1C2E7AA61D3014E33FB793E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fc:f1:f0:a8:fb:df:90:93:06:73:35:13:b6:
39:56:3e:a6:a9:05:da:96:67:4a:76:d8:9f:38:64:
d1:88:b4:0f:35:2a:1b:fb:d8:0c:18:a3:95:61:45:
7b:09:d4:cd:aa:2b:de:8d:f1:5b:41:db:47:b9:65:
41:35:b2:b9:c7:9f:85:af:26:aa:3d:c5:2a:53:35:
58:0c:7a:d8:cc:b1:bb:90:6e:c1:c1:e2:27:98:a5:
13:79:71:a0:b9:97:08:8e:0f:93:f7:f9:ff:f7:3d:
d5:5f:e4:c8:0e:f1:e1:78:32:4a:9d:d9:42:66:75:
b2:b2:69:b6:15:b3:28:74:2d:bf:33:bb:87:ea:20:
c1:02:94:5e:c8:fe:94:01:1a:1a:ef:f8:b1:fd:d8:
5b:73:59:ce:13:09:c7:ca:0e:ab:7a:f0:4e:b7:43:
40:af:d8:f9:e2:c2:c6:82:e9:39:e0:42:e3:8a:6a:
e8:fd:34:8d:d4:d8:56:51:60:c0:b6:e2:a6:18:a5:
78:91:f4:e8:be:39:09:8e:58:ff:3d:63:d1:f0:ef:
4b:e2:c5:d1:c8:d8:88:eb:58:c1:47:ee:ac:f6:29:
cc:a2:68:8d:d7:d1:e3:58:80:20:ed:81:de:41:03:
b2:00:4e:3f:b4:24:37:4d:d6:be:21:a4:b5:f3:c8:
7c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
13:3E:C7:3F:87:35:52:B7:C1:C2:E7:AA:61:D3:01:4E:33:FB:79:3E
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/133EC73F873552B7C1C2E7AA61D3014E33FB793E.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.180.0/22
170.246.128.0/22
179.108.160.0/20
201.76.0.0/20
IPv6:
2804:ef4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28642
Signature Algorithm: sha256WithRSAEncryption
89:77:1e:ef:2b:9e:3f:52:6e:08:18:98:65:45:9f:96:71:68:
5a:d8:10:33:1d:77:8c:87:df:15:11:b5:76:41:99:3d:16:5a:
e3:ad:17:6e:e7:ed:82:2d:36:d0:79:5e:92:c5:7a:5c:13:26:
45:79:81:83:0e:5b:ab:5d:fa:92:ad:c2:65:db:dd:7a:d0:c2:
7a:a6:94:4c:99:32:f9:5e:79:de:e0:40:21:65:24:b3:c0:6e:
4c:b0:a2:c3:38:40:8d:fd:10:e5:23:5f:8a:af:05:74:08:ef:
b9:e4:fa:9c:14:a6:d4:d6:8f:06:bb:cd:ae:85:fb:a6:1f:2a:
79:fd:4b:4b:68:5f:7b:6e:65:b3:39:18:15:0f:55:1b:fb:9b:
93:40:86:56:f0:f2:af:b2:78:95:58:53:71:9c:78:6b:19:ec:
43:1b:b6:4e:b6:ad:72:6b:71:cb:16:e7:ad:1a:b8:93:c7:b6:
cc:d9:a6:d4:e8:7d:4f:67:ad:24:a8:be:39:74:45:83:41:8f:
61:d0:b4:a0:79:60:77:e2:28:74:00:bf:40:f6:ca:07:ef:36:
73:a9:f1:50:dc:a5:fd:55:a6:69:11:43:61:c4:ea:0d:b2:df:
c1:22:49:bc:e8:19:09:7c:b0:1c:b5:52:06:2e:53:90:2f:d3:
11:68:c8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org