Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1AB6D3620CE408DAFAC1AFB6B08613DD2F3C9814.cer
File: 1AB6D3620CE408DAFAC1AFB6B08613DD2F3C9814.cer (raw, json)
Hash identifier: jjNAYoljQYMmuzUgpVnjfgdSTP9NXeWoZcE/kR2z4Cg=
Subject key identifier: 1A:B6:D3:62:0C:E4:08:DA:FA:C1:AF:B6:B0:86:13:DD:2F:3C:98:14
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 6D15E70A85A10FA71D983C7D2F29480E896CC11B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/1AB6D3620CE408DAFAC1AFB6B08613DD2F3C9814.mft
caRepository: rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 31 May 2023 15:39:45 +0000
Certificate not after: Wed 29 May 2024 15:44:45 +0000
Subordinate resources: AS: 52999
IP: 168.195.68.0/22
IP: 177.66.32.0/21
IP: 186.216.216.0/21
IP: 186.226.96.0/20
IP: 2804:508::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:15:e7:0a:85:a1:0f:a7:1d:98:3c:7d:2f:29:48:0e:89:6c:c1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: May 31 15:39:45 2023 GMT
Not After : May 29 15:44:45 2024 GMT
Subject: CN=1AB6D3620CE408DAFAC1AFB6B08613DD2F3C9814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:f8:17:ae:bc:c4:3c:ee:ca:df:5a:74:19:
13:13:54:86:76:c6:b8:29:6e:83:ed:b0:b5:50:8f:
f2:b2:25:77:cd:4d:19:95:5a:b1:c7:99:8f:53:66:
13:c2:a3:69:a7:fd:44:6d:60:b1:0e:0e:96:35:a1:
77:b1:a3:07:c0:c2:fa:df:cc:37:ed:8a:b5:87:7e:
9c:c4:f4:35:5c:6b:09:7f:51:e5:c5:23:eb:e6:2f:
df:ac:b7:2d:ba:5a:f8:1e:77:59:fd:04:73:0d:3c:
cb:e3:43:f9:6e:c3:36:af:c9:d6:ec:bc:68:c5:81:
09:3e:a2:aa:7c:c1:d0:66:74:3b:47:52:54:fc:10:
8b:64:26:31:37:8a:35:7a:17:bf:71:30:0a:51:21:
70:8e:51:ac:89:47:e9:d8:2b:6b:24:7c:14:80:ed:
b4:73:2e:d3:62:af:c5:a8:0e:f5:f9:6c:11:cd:11:
de:75:b4:59:27:d9:57:8f:51:e4:8b:6e:b5:c8:ca:
60:fe:e8:2d:99:07:bc:b6:31:cd:c5:0d:c2:dc:c8:
17:0d:20:50:f1:f3:db:ec:c1:65:e1:e5:f1:91:5c:
4e:95:12:1c:3e:86:b1:96:16:c7:13:cd:ae:a1:76:
51:2e:5c:86:c4:99:5c:c8:19:b3:f0:c5:3a:5a:74:
d5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1A:B6:D3:62:0C:E4:08:DA:FA:C1:AF:B6:B0:86:13:DD:2F:3C:98:14
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/1AB6D3620CE408DAFAC1AFB6B08613DD2F3C9814.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.68.0/22
177.66.32.0/21
186.216.216.0/21
186.226.96.0/20
IPv6:
2804:508::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52999
Signature Algorithm: sha256WithRSAEncryption
27:02:7b:b3:66:7d:98:b0:54:0a:5e:26:bd:df:e1:16:00:c2:
f1:72:08:32:39:03:d2:5e:cc:12:ef:9f:2a:37:e4:65:22:30:
b0:dc:38:e8:13:67:ed:17:ab:cd:b4:4f:4f:bc:d8:ee:4f:40:
6a:60:68:35:7e:ed:d6:71:9e:12:eb:50:8f:d9:8d:7e:42:52:
3e:fa:7b:e0:42:4a:16:6d:84:b9:e3:35:aa:a2:7e:e6:78:14:
91:08:1d:b2:5f:f9:6c:b2:e8:d5:27:06:15:2c:d2:25:25:4b:
dd:63:85:a1:57:00:5e:2b:ed:ed:2e:05:fb:9a:40:cc:6d:eb:
32:56:b0:7c:03:08:dd:c5:f0:39:ac:e2:f6:29:7a:d3:a8:fc:
1e:d0:e5:b2:ca:2e:a9:29:44:8a:1f:0d:a9:29:0d:5e:6a:94:
a5:08:71:0c:32:5b:c3:96:0a:a7:ff:7a:bd:23:2d:3a:da:10:
62:0c:cd:57:ef:00:dd:9a:ed:32:6c:7a:94:4b:03:ff:6a:a5:
cd:5b:03:5e:7d:34:8b:47:90:9b:a6:a7:7e:ec:a8:4b:69:99:
9d:e5:2e:9a:16:0b:25:95:42:0a:6f:58:48:b7:b1:9a:19:25:
f0:6e:47:8d:c1:e0:25:f2:15:0a:8c:85:d9:4d:a2:66:1f:c9:
5a:66:80:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:44 2025 by rpki-client