Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/24C528B0C571137D15EAEA7A144B7B574A83ADA7.cer
File: 24C528B0C571137D15EAEA7A144B7B574A83ADA7.cer (raw, json)
Hash identifier: tQO7mEjt0Nvb3deyXypew6KKj2idBH2/hTEeBu2+cbA=
Subject key identifier: 24:C5:28:B0:C5:71:13:7D:15:EA:EA:7A:14:4B:7B:57:4A:83:AD:A7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 68AEF078A2043675D0F9D453FEBE9C9B695EC379
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/24C528B0C571137D15EAEA7A144B7B574A83ADA7.mft
caRepository: rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 15 Jan 2024 12:00:15 +0000
Certificate not after: Mon 13 Jan 2025 12:05:15 +0000
Subordinate resources: AS: 268097
IP: 45.169.44.0/22
IP: 131.108.88.0/22
IP: 168.194.208.0/22
IP: 2804:57f4::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:ae:f0:78:a2:04:36:75:d0:f9:d4:53:fe:be:9c:9b:69:5e:c3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Jan 15 12:00:15 2024 GMT
Not After : Jan 13 12:05:15 2025 GMT
Subject: CN=24C528B0C571137D15EAEA7A144B7B574A83ADA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cc:65:d5:ff:4e:cc:9e:5f:fc:ab:59:8c:ea:
0d:70:b5:f3:9b:6b:8b:c2:25:98:06:c6:71:ae:a5:
44:b9:f0:05:c3:8c:75:6f:39:0d:5d:24:99:8f:90:
88:43:2d:2d:87:6e:9f:a6:1c:18:9d:53:f4:1a:80:
76:ad:5e:9c:9d:cc:de:41:c3:05:6b:da:07:88:8c:
7d:1d:12:5b:b1:11:f8:f4:d1:54:61:90:76:f8:13:
bd:6d:4c:04:fb:23:7f:b4:a3:38:5a:87:bd:a4:7d:
f0:c8:4b:2e:80:9d:ec:3d:ff:41:87:8f:1f:d9:5e:
f9:70:44:3b:6e:09:b9:0b:2e:4d:a9:ef:31:12:c6:
a3:5a:52:ea:52:72:d1:d1:98:8b:15:d3:29:6d:e3:
cf:9d:d5:c2:94:e3:f1:d3:02:bb:ba:29:64:fc:36:
c8:a9:38:64:0a:2a:34:8f:dd:8b:37:8d:f3:e2:2e:
31:40:b8:99:a0:49:03:e8:8c:94:2c:39:a3:c4:59:
57:90:6e:73:27:02:f2:e7:52:a1:89:c4:6f:66:d6:
c5:80:8a:fe:90:e4:43:fd:fd:a4:22:fa:2c:a6:b6:
1d:88:2b:c4:2e:47:f5:21:38:22:db:a0:cc:76:87:
d7:c6:8f:3c:82:3a:c0:e2:ec:7c:84:79:58:4a:ce:
ef:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
24:C5:28:B0:C5:71:13:7D:15:EA:EA:7A:14:4B:7B:57:4A:83:AD:A7
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/24C528B0C571137D15EAEA7A144B7B574A83ADA7.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.44.0/22
131.108.88.0/22
168.194.208.0/22
IPv6:
2804:57f4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268097
Signature Algorithm: sha256WithRSAEncryption
65:7d:1e:c0:38:56:8b:9f:77:f2:c2:b1:36:22:1e:af:7d:0d:
37:29:a4:df:1a:76:bd:82:18:85:49:72:67:27:08:23:7e:f7:
a1:c9:15:0d:67:99:49:16:87:c1:a6:3a:e6:45:ef:16:02:6c:
3e:8c:2d:a7:b6:a7:9a:c1:94:87:99:8e:47:1d:a7:33:83:68:
00:56:0e:1e:51:16:c4:f7:53:d2:c5:44:a6:42:f5:3c:e2:dc:
e3:56:ec:d9:21:8b:ae:a5:1f:5b:0d:30:1a:8d:4d:1c:6b:9a:
a3:e3:a6:0d:ac:02:4d:f7:a2:04:66:99:dc:f0:2a:3f:4e:a0:
08:ea:e5:aa:b0:c1:65:8b:4c:20:54:47:d0:32:3a:10:8d:1c:
bf:2d:20:1f:bc:dd:e3:fb:23:e7:f0:2a:12:ee:e7:eb:4d:01:
b0:d5:95:13:06:eb:34:c7:1b:df:45:de:77:55:33:a4:1a:17:
20:ea:c3:f7:93:78:2b:0c:30:a0:99:82:38:b8:92:e8:5b:88:
d1:15:39:5e:6b:83:36:40:82:32:13:f4:d6:1d:76:e4:1d:ec:
3f:fb:0f:26:9b:29:48:30:8f:12:05:88:dc:e3:6a:a2:e0:a6:
9b:77:84:0b:cb:69:de:20:a1:f0:2f:87:b7:53:68:ba:58:2b:
e7:e0:38:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org