Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.cer
File: 28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.cer (raw, json)
Hash identifier: 8zTIyRhTrgLjk86ORO9LzUbq6a7UtA90VsBzz7eDyqc=
Subject key identifier: 28:F2:1F:17:4B:29:1C:E2:F7:F9:20:E2:42:2D:1D:C6:AF:FF:CD:6C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 593F0BD4D46704979E01D3A7A5D259446BAA5478
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.mft
caRepository: rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 01 Jun 2023 11:50:15 +0000
Certificate not after: Thu 30 May 2024 11:55:15 +0000
Subordinate resources: AS: 28264
IP: 177.22.240.0/21
IP: 179.124.0.0/21
IP: 187.17.176.0/20
IP: 2804:130::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:3f:0b:d4:d4:67:04:97:9e:01:d3:a7:a5:d2:59:44:6b:aa:54:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Jun 1 11:50:15 2023 GMT
Not After : May 30 11:55:15 2024 GMT
Subject: CN=28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9d:dc:35:e9:87:5c:a1:3d:e9:76:f9:7b:37:
9a:a3:1e:32:50:2c:7a:b3:fc:ea:0f:09:74:4b:9b:
15:be:fb:2d:86:a5:bf:42:9d:0e:dc:2f:c0:ce:a9:
72:df:7b:e8:f6:1e:d1:b6:40:31:26:04:fa:a3:c7:
c2:ce:ad:09:a4:fd:48:c9:b0:4d:eb:04:69:40:a9:
3e:cc:9f:63:98:60:d9:ec:c7:fb:be:26:30:93:8e:
6c:d8:c5:47:ec:ac:08:86:3e:30:73:8b:d7:1d:fd:
41:43:00:07:ff:fb:fd:5a:df:e5:18:a1:2f:18:fb:
06:5d:84:3e:c2:52:ff:e9:25:83:5b:5c:4e:e0:ba:
5b:51:11:a2:0e:be:0a:ed:2c:36:be:6d:85:ac:c9:
cf:37:c5:09:ec:18:ea:bb:00:36:ce:9e:7f:f3:df:
67:48:2a:b7:d8:2c:a4:8d:3f:a9:e8:78:c7:f7:f4:
3e:cc:77:e7:b9:06:b1:b9:97:81:e9:90:ce:95:96:
b0:40:fe:d6:e5:11:dd:96:71:be:4e:29:44:0f:d1:
53:11:db:98:68:da:05:86:12:82:e9:2e:92:78:5e:
6a:6d:d2:23:a7:b9:c9:a2:e0:b4:e3:f1:5e:b6:45:
69:ff:34:fe:fa:41:be:15:d5:1c:ed:72:d6:21:aa:
43:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
28:F2:1F:17:4B:29:1C:E2:F7:F9:20:E2:42:2D:1D:C6:AF:FF:CD:6C
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.22.240.0/21
179.124.0.0/21
187.17.176.0/20
IPv6:
2804:130::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28264
Signature Algorithm: sha256WithRSAEncryption
a2:4a:39:b2:9e:5f:59:2e:0a:19:51:7e:58:56:76:52:6d:39:
c9:9b:a0:9e:a7:50:dd:cd:c3:71:5e:3f:e2:18:75:f6:ea:a9:
25:c4:78:7b:3f:f4:d4:34:ca:5d:f8:33:ad:1e:23:46:ee:50:
31:48:32:a8:e9:d2:21:a7:72:bc:f5:fc:53:d8:4e:05:18:21:
4f:5f:c1:47:8d:1a:27:5f:fd:05:c7:06:ec:9c:88:da:0b:84:
70:29:66:22:c1:62:a7:2d:8a:4f:9c:64:4c:2c:22:d6:80:b6:
74:45:dd:f6:e1:43:59:df:99:6a:c9:55:73:be:6b:33:bb:24:
4d:42:32:2a:c7:53:76:ab:bf:1b:96:f2:96:9a:a0:aa:fd:ab:
e3:f3:ae:6a:96:b9:8a:04:cd:0a:de:82:a2:32:31:1c:51:4c:
59:31:b2:21:04:63:02:cc:f2:eb:71:f1:dd:44:72:fb:43:05:
22:e9:aa:b2:71:88:3e:30:98:03:25:6b:de:13:0a:7c:5e:97:
5e:12:ef:9a:e3:57:89:3b:c3:49:5a:d7:c2:c5:b4:fa:85:d8:
43:24:78:59:ec:12:e9:a5:06:01:68:a2:0d:29:6d:e3:69:cb:
d1:c0:8c:ea:75:b2:f0:77:5d:17:a4:d5:ff:e6:13:89:96:3c:
68:2a:66:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org