Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/20D323C3A8807050602FC60FBA8706745F256862.cer
File: 20D323C3A8807050602FC60FBA8706745F256862.cer (raw, json)
Hash identifier: 3cgseBOG8YJcvBIWbEKcH4NHV1YEFdQaJk/YPwZ48CQ=
Subject key identifier: 20:D3:23:C3:A8:80:70:50:60:2F:C6:0F:BA:87:06:74:5F:25:68:62
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 5B240D182E12A66470AA8E9B6B24A423BA1E1670
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/20D323C3A8807050602FC60FBA8706745F256862.mft
caRepository: rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 23 Dec 2023 14:27:48 +0000
Certificate not after: Sat 21 Dec 2024 14:32:48 +0000
Subordinate resources: AS: 263569
IP: 45.5.220.0/22
IP: 45.163.152.0/22
IP: 45.172.252.0/22
IP: 45.186.72.0/22
IP: 45.225.160.0/22
IP: 45.225.236.0/22
IP: 131.161.60.0/22
IP: 138.118.168.0/22
IP: 143.202.244.0/22
IP: 168.232.216.0/22
IP: 170.80.208.0/22
IP: 186.249.216.0/22
IP: 200.4.116.0/22
IP: 2804:f30::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:24:0d:18:2e:12:a6:64:70:aa:8e:9b:6b:24:a4:23:ba:1e:16:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Dec 23 14:27:48 2023 GMT
Not After : Dec 21 14:32:48 2024 GMT
Subject: CN=20D323C3A8807050602FC60FBA8706745F256862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:61:80:25:9a:76:90:e6:6b:8c:7b:01:e0:09:
85:a7:4b:3c:10:f8:6d:fa:16:5d:b0:c7:a5:1e:1a:
63:91:84:e7:1f:d3:52:e2:bf:23:f9:7d:ab:ff:f9:
58:68:27:a0:d9:c9:d1:bf:f9:f4:cf:5e:1e:a7:4a:
e4:a4:8c:f8:de:3f:fa:55:5c:3a:86:ad:d0:89:19:
6e:07:01:97:92:26:1e:7c:75:2a:52:66:4c:26:69:
6f:c1:77:1c:83:ff:1a:a3:ec:f6:16:80:50:19:48:
06:0d:54:92:0b:69:0f:97:d1:9c:da:93:a2:8a:3a:
61:dd:0b:33:54:18:42:f0:15:2a:02:4d:7e:23:db:
19:e8:22:ba:5e:c0:59:ad:27:61:a8:30:c2:c7:93:
ea:c6:b6:33:34:bc:d0:4a:96:52:cb:67:c6:ec:a8:
5a:4a:a0:80:ff:6e:cf:00:f7:fc:e7:3d:65:39:60:
1a:ba:21:6c:ee:87:55:66:1c:9b:df:a3:c0:e1:ed:
3d:4a:79:5b:96:43:f0:0f:37:41:5d:8a:ca:2d:29:
a9:87:5c:a7:2b:41:6f:e8:bd:7e:25:0b:73:3e:5f:
42:69:9c:65:f4:6a:08:d8:34:28:0a:df:12:15:79:
d5:a0:3f:0b:ec:14:a1:0a:e9:99:56:4f:bf:d1:ec:
c7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
20:D3:23:C3:A8:80:70:50:60:2F:C6:0F:BA:87:06:74:5F:25:68:62
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/20D323C3A8807050602FC60FBA8706745F256862.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.220.0/22
45.163.152.0/22
45.172.252.0/22
45.186.72.0/22
45.225.160.0/22
45.225.236.0/22
131.161.60.0/22
138.118.168.0/22
143.202.244.0/22
168.232.216.0/22
170.80.208.0/22
186.249.216.0/22
200.4.116.0/22
IPv6:
2804:f30::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263569
Signature Algorithm: sha256WithRSAEncryption
5c:7d:1f:94:5f:67:f2:a3:4c:4c:82:95:c8:50:0a:35:eb:5e:
41:57:00:ff:e8:ee:b9:65:08:b8:48:1d:dc:f1:8b:37:2c:76:
3b:95:6a:cc:e3:a3:84:52:80:60:a9:a0:63:c5:a4:c8:57:b9:
2a:04:05:f3:7a:64:5d:4a:fd:08:b1:6b:22:d0:dc:4d:86:d7:
7c:86:ec:36:4e:4d:0d:a4:85:4b:00:74:1d:1e:d4:3e:0f:ba:
ca:f8:78:83:46:28:f6:cf:05:57:e3:38:f2:9c:0d:d3:dd:1c:
43:92:a9:3f:11:b8:5d:a4:47:0d:09:39:0e:c9:bc:c4:17:44:
a8:bc:dc:9e:5b:5b:d4:4a:7d:37:5c:a2:d7:59:62:38:0d:50:
db:b2:0b:ba:3f:01:fd:fe:54:77:18:de:db:92:57:ff:7d:3d:
b8:55:32:b1:b9:81:93:b8:14:87:b5:38:63:f2:ca:f8:0c:85:
c2:89:5a:b2:7e:70:c4:90:0c:1f:2d:37:d8:c0:45:83:e6:73:
41:fe:70:26:ab:1c:68:eb:17:54:af:39:e1:e2:40:02:53:96:
53:0d:c5:62:76:87:1b:e0:95:b9:79:09:dd:f8:9b:eb:05:ee:
08:5e:1c:48:c0:14:e5:fc:49:af:ad:56:b2:9c:2e:08:1f:39:
81:09:5b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org