Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2563708FFC494233FAD9ABD11B7C61F83F089E7B.cer
File: 2563708FFC494233FAD9ABD11B7C61F83F089E7B.cer (raw, json)
Hash identifier: XcTOKYTLBC9hq5aH9GPmAqDBsFSlIHdQB2wlw/JirTA=
Subject key identifier: 25:63:70:8F:FC:49:42:33:FA:D9:AB:D1:1B:7C:61:F8:3F:08:9E:7B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 5EB458ABCF40AD6D887F11E7D75DFA2817A9B98E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/2563708FFC494233FAD9ABD11B7C61F83F089E7B.mft
caRepository: rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 11 Jul 2023 16:10:06 +0000
Certificate not after: Tue 09 Jul 2024 16:15:06 +0000
Subordinate resources: AS: 28642
IP: 168.228.180.0/22
IP: 170.246.128.0/22
IP: 179.108.160.0/20
IP: 201.76.0.0/20
IP: 2804:ef4::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:b4:58:ab:cf:40:ad:6d:88:7f:11:e7:d7:5d:fa:28:17:a9:b9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Jul 11 16:10:06 2023 GMT
Not After : Jul 9 16:15:06 2024 GMT
Subject: CN=2563708FFC494233FAD9ABD11B7C61F83F089E7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:59:b6:4b:f7:09:fb:d5:79:95:b1:d9:b9:12:
46:9e:fd:1e:c4:eb:d9:8c:0d:ea:f7:19:ea:36:d8:
a2:d0:bb:e7:b0:f0:f5:bd:b0:78:fd:dc:a4:3b:f5:
78:3d:7e:56:b3:64:29:58:c7:1d:8a:86:1b:a3:44:
10:29:3d:8e:95:38:35:06:37:70:21:77:fc:38:6d:
8f:13:0c:5b:75:40:16:bd:8f:20:c4:e0:eb:59:1c:
0b:6d:e5:92:2b:fa:42:1e:69:4e:9b:75:48:75:ff:
90:cd:23:d4:a7:c1:3e:4f:dd:32:91:b0:91:df:c6:
1c:12:df:e5:be:cb:cf:1d:60:74:71:18:0f:05:b3:
fb:85:6a:98:82:4f:7b:54:94:d9:c5:ea:c3:9f:3e:
0d:41:a9:ce:07:89:be:8b:e1:32:25:b6:a1:3b:ef:
79:38:b4:12:78:1c:77:e1:9e:cf:f3:40:b8:df:12:
4a:8d:14:b0:94:04:15:a7:de:32:12:8f:3e:51:75:
2e:f7:41:24:b5:f0:ae:6f:a3:79:ee:2a:ea:23:c6:
ef:1b:5e:ac:94:0f:6b:be:6b:97:d2:30:c3:d0:20:
be:c0:f8:53:6c:9d:e5:76:87:e5:cf:f4:e0:2b:1d:
0e:d5:70:21:89:88:ca:16:25:a2:eb:8a:2f:08:6d:
00:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
25:63:70:8F:FC:49:42:33:FA:D9:AB:D1:1B:7C:61:F8:3F:08:9E:7B
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/2563708FFC494233FAD9ABD11B7C61F83F089E7B.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.180.0/22
170.246.128.0/22
179.108.160.0/20
201.76.0.0/20
IPv6:
2804:ef4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28642
Signature Algorithm: sha256WithRSAEncryption
06:bb:7f:aa:62:85:c0:70:c8:8f:d0:f7:9b:72:e3:82:e6:61:
2c:d5:1b:2d:ce:3f:5a:02:3e:49:48:39:f3:92:8c:39:29:04:
18:10:d1:ff:f7:24:c3:ab:0d:3b:4c:eb:56:e1:42:8b:26:ca:
f0:9f:d6:8d:70:7c:a2:a1:ea:4e:52:d7:b8:b4:4a:cf:74:d8:
9c:28:e6:ae:14:51:6a:c1:f4:6d:39:cd:12:90:56:18:d1:cb:
52:76:d1:88:f7:c8:3f:a9:0f:39:78:c4:04:78:fb:d6:38:e8:
6c:40:53:07:9c:6b:f5:8d:b1:81:3f:39:c1:1e:8c:e0:37:29:
3f:2f:ee:30:f1:8c:e7:09:c3:38:83:c5:84:a8:ec:06:13:30:
75:3f:c0:0d:b3:ff:e2:28:43:ea:eb:09:ff:84:14:3e:8c:ac:
32:6b:69:17:fe:61:27:16:7d:f3:e2:d2:ca:e1:77:72:83:a0:
4f:33:a2:25:b6:54:ee:04:3a:6d:7e:d2:8f:9f:db:d5:c3:74:
f4:e0:f1:0b:bd:e9:32:7f:27:44:ed:b0:05:fe:95:69:b4:3b:
53:42:cd:6b:0b:ad:a2:08:e7:1a:a6:78:16:5b:49:21:23:6d:
6b:03:fc:33:2b:b8:71:5a:c7:4a:04:f9:a2:7d:97:79:ff:34:
96:83:37:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org