Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/16B9491586C88CA8ADA40A7116E4AA83978B76D0.cer
File: 16B9491586C88CA8ADA40A7116E4AA83978B76D0.cer (raw, json)
Hash identifier: Nngjn6weylDvP+6z7BZ9Yi9X0lLx0sgpb1qQPrb/oqM=
Subject key identifier: 16:B9:49:15:86:C8:8C:A8:AD:A4:0A:71:16:E4:AA:83:97:8B:76:D0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 0AC4B82E2E70F6D1FBBF9B9B33E066286E832932
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/16B9491586C88CA8ADA40A7116E4AA83978B76D0.mft
caRepository: rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 27 Jul 2023 18:15:10 +0000
Certificate not after: Thu 25 Jul 2024 18:20:10 +0000
Subordinate resources: AS: 27693
IP: 131.255.24.0/22
IP: 179.109.16.0/20
IP: 186.236.64.0/19
IP: 189.127.0.0/20
IP: 200.220.128.0/20
IP: 2804:64::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:c4:b8:2e:2e:70:f6:d1:fb:bf:9b:9b:33:e0:66:28:6e:83:29:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Jul 27 18:15:10 2023 GMT
Not After : Jul 25 18:20:10 2024 GMT
Subject: CN=16B9491586C88CA8ADA40A7116E4AA83978B76D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:49:41:9a:72:24:c9:9f:cc:ec:c4:d9:f0:
d1:69:90:4c:50:83:4b:1a:2f:b2:07:03:62:4b:c9:
2a:b0:b1:9a:71:c4:a8:13:ca:17:b2:16:da:f4:b0:
bc:ea:ce:7d:36:87:6e:3b:43:cb:d9:5c:8a:63:da:
91:7f:ad:53:64:04:5a:e4:cd:2e:72:db:13:fe:80:
57:87:60:0c:88:40:df:67:7f:3a:5d:0b:c3:f4:17:
a5:1e:74:79:69:a7:23:cb:a0:cd:6a:09:46:49:cc:
d8:1b:1e:52:1a:d6:f9:08:ee:1d:47:6a:b1:11:5c:
16:1f:b4:33:fd:7e:36:a7:36:73:cb:06:36:02:6d:
81:af:7b:e2:2d:aa:1a:3e:5c:41:61:f9:53:24:0a:
a4:a5:5a:e9:1a:30:e7:ed:f2:b1:c4:07:bb:52:82:
ca:98:61:22:d5:f5:d4:ae:c9:3e:19:4f:38:f7:88:
59:f5:65:07:dc:04:c1:20:af:55:08:70:96:d0:ef:
c3:9d:f6:cc:12:61:6f:e8:67:d7:57:a4:01:46:bb:
e3:e5:5a:1a:05:96:67:d3:d9:a2:0e:7d:c2:04:72:
9a:2f:aa:a8:4c:c4:e9:37:81:17:ab:49:40:c7:23:
bd:db:3e:74:b0:99:cc:4c:b4:71:54:86:6b:96:30:
32:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
16:B9:49:15:86:C8:8C:A8:AD:A4:0A:71:16:E4:AA:83:97:8B:76:D0
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/16B9491586C88CA8ADA40A7116E4AA83978B76D0.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.24.0/22
179.109.16.0/20
186.236.64.0/19
189.127.0.0/20
200.220.128.0/20
IPv6:
2804:64::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
27693
Signature Algorithm: sha256WithRSAEncryption
51:09:16:2b:79:8d:44:ab:3f:e5:e8:ed:0a:be:38:e3:4a:38:
af:2e:24:b3:d5:7d:44:c4:c2:af:9a:2d:18:9a:27:db:af:29:
4b:49:4f:a8:cd:96:12:ef:1b:46:c2:37:12:20:82:3c:aa:39:
6b:b3:50:90:49:86:08:96:9f:e6:c8:de:04:68:32:6a:4f:fb:
f0:8a:19:9c:ff:00:df:71:71:b7:b5:c4:86:bb:a4:84:7b:9e:
5b:5f:18:4a:e6:86:bd:0d:7f:73:0f:3a:91:bc:5f:ce:52:b5:
78:82:e1:07:73:68:d0:fd:26:f5:89:96:0c:23:37:92:50:c2:
4d:52:01:c8:d7:4b:53:e7:77:b5:20:49:bd:18:1c:62:0e:93:
fe:52:2a:e3:ea:b9:12:53:53:b7:08:73:8c:f7:a9:a3:16:bc:
15:2b:5b:67:bb:b1:1a:75:71:93:43:55:89:09:a6:ac:59:93:
c4:9f:1f:b4:41:6e:1d:4f:6c:07:5b:b9:6a:bc:b5:c4:fe:73:
2c:d8:64:fe:6c:1d:e2:4d:e0:22:c0:4f:42:3f:6d:b6:9c:fa:
30:94:01:a5:f4:65:5a:ab:56:fb:9e:c0:39:74:b6:50:0e:3e:
2e:0c:1f:47:bf:2b:9e:ea:55:37:75:98:c9:ab:c2:0b:53:88:
99:1f:5a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org