Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
File: 13BB29A4B84BDF66EA401987B87048B7484F4888.cer (raw, json)
Hash identifier: a+NQCrPu7QCFKPCVLcPPdixYdsBtUwzKN6lzVvJgXFQ=
Subject key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 02FE3D950649C22C1C800A8DB0CCEB9AF800DE95
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.mft
caRepository: rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Jan 2024 12:19:12 +0000
Certificate not after: Wed 01 Jan 2025 12:24:12 +0000
Subordinate resources: AS: 262773
IP: 45.175.216.0/22
IP: 45.228.144.0/22
IP: 131.255.220.0/22
IP: 138.36.176.0/22
IP: 138.94.156.0/22
IP: 138.122.76.0/22
IP: 138.185.164.0/22
IP: 143.202.124.0/22
IP: 167.249.48.0/22
IP: 168.194.120.0/22
IP: 168.197.72.0/22
IP: 168.232.112.0/22
IP: 170.79.48.0/22
IP: 170.231.8.0/22
IP: 170.231.220.0/22
IP: 177.22.248.0/22
IP: 177.38.64.0/22
IP: 177.38.128.0/21
IP: 177.70.176.0/20
IP: 177.73.200.0/21
IP: 177.85.88.0/22
IP: 177.86.88.0/21
IP: 177.86.192.0/21
IP: 177.128.220.0/22
IP: 177.137.88.0/21
IP: 177.152.64.0/20
IP: 186.208.96.0/20
IP: 186.226.0.0/20
IP: 186.232.192.0/21
IP: 187.86.80.0/20
IP: 187.95.224.0/19
IP: 191.253.16.0/22
IP: 201.158.24.0/21
IP: 2804:9f8::/32
IP: 2804:ad0::/32
IP: 2804:21f4::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:fe:3d:95:06:49:c2:2c:1c:80:0a:8d:b0:cc:eb:9a:f8:00:de:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Jan 3 12:19:12 2024 GMT
Not After : Jan 1 12:24:12 2025 GMT
Subject: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:50:27:9e:69:7c:df:50:03:57:3e:b1:ed:28:
81:23:6d:8d:fd:ba:ac:71:1f:e1:85:e6:10:5a:57:
39:af:0b:87:7c:65:df:63:e5:e0:f7:7d:29:ac:d6:
5b:e8:11:12:74:1d:47:b5:44:7b:16:5c:1e:9c:80:
ae:a8:33:d2:b1:f1:5d:99:68:30:fc:39:17:8b:ab:
f9:1f:95:79:a5:eb:69:fe:8f:28:c7:2e:e8:d9:a7:
dd:b2:19:aa:0f:23:9e:c9:ac:dd:2f:5f:55:43:0a:
81:1f:43:2b:10:0c:1e:50:b8:d7:35:d3:e1:2d:a4:
64:71:aa:0a:79:e7:51:a4:56:17:f9:49:a5:86:6c:
37:ff:f8:6c:6c:eb:f7:b0:00:2d:d7:69:cb:92:04:
c4:07:35:9c:64:28:f1:8b:2b:d0:77:b2:3a:8b:60:
e1:2a:b3:6a:ad:43:fa:c1:aa:50:5f:ad:a6:8e:e5:
be:b2:de:7f:32:26:ef:f0:d5:a3:34:5c:8d:ad:cf:
cb:38:66:80:f7:91:14:8c:5f:01:bb:c8:36:bf:93:
6f:ab:62:2c:74:68:cf:33:4c:8c:1a:08:18:8b:cb:
e6:0c:17:98:88:67:64:b0:f4:fb:38:dd:a1:04:95:
63:66:dd:2d:e4:74:9e:0e:31:0d:17:5c:19:a6:b4:
92:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.175.216.0/22
45.228.144.0/22
131.255.220.0/22
138.36.176.0/22
138.94.156.0/22
138.122.76.0/22
138.185.164.0/22
143.202.124.0/22
167.249.48.0/22
168.194.120.0/22
168.197.72.0/22
168.232.112.0/22
170.79.48.0/22
170.231.8.0/22
170.231.220.0/22
177.22.248.0/22
177.38.64.0/22
177.38.128.0/21
177.70.176.0/20
177.73.200.0/21
177.85.88.0/22
177.86.88.0/21
177.86.192.0/21
177.128.220.0/22
177.137.88.0/21
177.152.64.0/20
186.208.96.0/20
186.226.0.0/20
186.232.192.0/21
187.86.80.0/20
187.95.224.0/19
191.253.16.0/22
201.158.24.0/21
IPv6:
2804:9f8::/32
2804:ad0::/32
2804:21f4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262773
Signature Algorithm: sha256WithRSAEncryption
66:4c:57:cd:33:68:68:54:b2:36:6d:e5:9a:21:21:03:ef:63:
ea:d5:55:a5:ec:39:86:e1:d0:93:ef:62:0c:04:4f:e3:a8:b3:
e7:d9:a7:8f:cf:e4:e4:fe:43:59:5c:6b:6a:bc:e6:47:9f:4f:
a3:c3:2e:a9:d8:fb:73:e0:28:1c:8f:0c:d7:aa:10:62:28:da:
36:82:1c:7c:03:9f:9a:8c:71:bb:ab:df:21:77:c6:16:76:74:
2f:b7:0e:5a:ea:c9:4f:73:1b:e9:13:f7:b2:f9:eb:62:8f:5b:
f6:43:a7:f7:62:90:e3:a1:49:32:6b:ef:f1:19:47:07:b1:87:
81:03:b7:ba:51:24:d7:f1:04:96:e1:bf:d8:e1:64:a4:a5:f3:
12:4e:48:e1:0e:cc:4b:12:4f:94:eb:f3:fa:f1:d1:32:91:cf:
40:5b:1f:d0:19:a8:ab:56:67:45:49:37:5c:d3:42:85:90:df:
b2:75:f4:b5:63:8d:c0:44:bd:c3:62:42:14:a9:eb:1c:f4:a9:
d7:74:38:bd:6f:01:13:a7:01:ea:36:ab:70:6f:7b:0b:95:d5:
d3:b8:47:ae:7b:1d:86:4e:d0:b8:5e:00:1a:0d:58:b7:44:b9:
ae:00:f1:23:c7:49:ee:82:a6:ea:64:cf:01:64:2a:e2:76:e3:
26:6f:24:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org