Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/21D786A9E3E9F6FD8067630222961B177E0DA001.cer
File: 21D786A9E3E9F6FD8067630222961B177E0DA001.cer (raw, json)
Hash identifier: Dk/0LAnXMelenYS3aLInHz2RGnP6C6v6q3XXA1eSrxk=
Subject key identifier: 21:D7:86:A9:E3:E9:F6:FD:80:67:63:02:22:96:1B:17:7E:0D:A0:01
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 70D971BCF69A28B25CA52F888FC661BB5CBBE938
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/21D786A9E3E9F6FD8067630222961B177E0DA001.mft
caRepository: rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 23 May 2023 09:22:22 +0000
Certificate not after: Tue 21 May 2024 09:27:22 +0000
Subordinate resources: AS: 263860
IP: 138.186.128.0/22
IP: 168.227.160.0/22
IP: 2804:26d4::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:d9:71:bc:f6:9a:28:b2:5c:a5:2f:88:8f:c6:61:bb:5c:bb:e9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: May 23 09:22:22 2023 GMT
Not After : May 21 09:27:22 2024 GMT
Subject: CN=21D786A9E3E9F6FD8067630222961B177E0DA001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:66:ae:bc:a9:65:52:00:83:4e:dc:ef:51:28:
4f:7d:38:e3:85:ad:00:0f:c7:cb:74:c8:1f:44:48:
a6:5c:50:45:c9:9f:d3:f0:ff:4c:8f:17:9b:14:48:
6d:54:25:18:7a:85:8d:27:52:cd:72:5d:55:f8:3c:
b6:b6:c4:80:d6:13:fe:2a:eb:ce:9a:66:19:a4:25:
1d:91:5b:1c:ca:dd:ce:90:c8:14:c7:32:b1:f5:71:
a4:03:82:e0:53:d7:f7:4d:d4:df:25:e3:1a:b5:15:
c1:c9:91:3c:d8:58:cb:df:8d:96:9c:98:09:bf:2b:
e4:46:6f:9a:d0:95:0f:f7:9c:6a:3d:cd:bb:bc:94:
c2:54:76:d2:2a:3a:17:0f:26:2b:41:4d:4d:5b:52:
cc:d1:71:c6:52:a9:4e:b1:89:86:8e:80:2e:b4:f2:
e2:3e:f3:4a:6a:5f:83:48:27:b1:d4:20:24:db:cc:
ce:42:a2:32:cb:b3:6c:fc:3b:4b:c1:fa:62:47:09:
e1:ce:20:10:01:5b:a4:31:6b:90:0c:c7:3f:9b:eb:
38:de:5e:b0:2a:2c:dd:e3:4a:90:a6:ec:fc:1c:e9:
10:64:c5:cc:80:d2:93:bb:d0:8a:84:4b:19:f7:f4:
56:4c:4d:7d:a0:b5:f4:3a:b8:5b:a4:01:de:48:83:
0a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
21:D7:86:A9:E3:E9:F6:FD:80:67:63:02:22:96:1B:17:7E:0D:A0:01
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/21D786A9E3E9F6FD8067630222961B177E0DA001.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.128.0/22
168.227.160.0/22
IPv6:
2804:26d4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263860
Signature Algorithm: sha256WithRSAEncryption
62:be:89:62:68:87:d7:9e:58:84:62:4b:22:4d:08:ba:d4:73:
5c:04:d8:b2:17:d2:01:e0:62:2f:6d:7d:1c:0f:c2:45:4b:23:
3c:33:4b:67:81:88:d3:bf:c4:a1:88:cf:48:bc:77:94:22:13:
8f:c2:28:fd:5c:82:44:9c:23:9c:f3:56:f0:cf:84:ce:2e:ee:
39:a1:e6:09:9c:cd:d0:b4:4a:c0:33:58:4f:fd:67:45:b6:09:
9f:cb:62:e0:1e:ca:0f:5f:67:76:9b:43:52:83:74:8d:52:a3:
a6:44:6f:bc:25:2d:56:67:19:8b:44:45:01:cc:3f:a0:eb:a4:
a1:29:29:a4:77:1e:b0:da:7c:72:92:29:cf:90:e7:c2:5f:59:
8b:ad:11:56:93:8e:ef:26:2d:24:52:a4:b0:2c:5f:26:22:be:
53:f2:ad:21:43:41:83:c9:54:ba:4b:76:df:12:cc:2e:59:85:
12:21:7e:d8:fc:e6:f5:f8:8b:7c:52:02:41:92:ec:87:47:76:
03:96:51:bc:df:d5:82:c5:4e:3d:85:a2:c9:b4:b3:83:cf:9b:
fd:60:a8:6e:cc:4b:9c:7b:86:c8:61:92:dc:fd:ea:ba:d4:66:
d3:54:43:3c:da:4e:6f:fa:f2:8c:d5:21:f1:77:f8:cd:50:18:
fc:c7:a6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org