Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/29B71DADE937BB0D8F9E2E96A8069DE115FCBC68.cer
File: 29B71DADE937BB0D8F9E2E96A8069DE115FCBC68.cer (raw, json)
Hash identifier: YO+v9OjBZajFEAb2k+LM3VbjUJAWzoeUnhJJ9jTg7Zc=
Subject key identifier: 29:B7:1D:AD:E9:37:BB:0D:8F:9E:2E:96:A8:06:9D:E1:15:FC:BC:68
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 6CEEC6E050F3898D80B4A29CC2C69A37D5A509BA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/29B71DADE937BB0D8F9E2E96A8069DE115FCBC68.mft
caRepository: rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 08 Mar 2024 20:03:52 +0000
Certificate not after: Fri 07 Mar 2025 20:08:52 +0000
Subordinate resources: AS: 262805
IP: 177.128.88.0/21
IP: 186.250.40.0/21
IP: 186.250.104.0/21
IP: 2804:74c::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:ee:c6:e0:50:f3:89:8d:80:b4:a2:9c:c2:c6:9a:37:d5:a5:09:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Mar 8 20:03:52 2024 GMT
Not After : Mar 7 20:08:52 2025 GMT
Subject: CN=29B71DADE937BB0D8F9E2E96A8069DE115FCBC68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:02:c3:e9:27:20:08:61:5c:f0:b5:21:67:43:
a8:bb:92:5b:ac:79:30:7e:9d:fa:41:b1:7e:e4:85:
97:d6:76:a5:e7:42:1f:93:48:e8:81:ae:10:c1:74:
b5:c7:75:bf:a5:35:e0:53:58:26:48:b8:f7:54:41:
18:16:39:0c:e1:c0:f1:27:e5:b3:5c:57:59:af:8b:
68:0a:32:66:e7:3a:db:18:93:65:12:32:36:8f:7e:
2e:5f:f9:7a:3a:bb:ee:1e:73:9b:3c:24:31:af:e0:
e8:ba:9c:27:bb:7f:fc:1e:31:ed:d4:b3:1d:14:a7:
4c:54:7e:25:a4:65:b0:e0:3e:79:a9:b9:56:9a:d9:
e9:ef:61:b5:43:7f:f8:ff:1c:d4:ce:1d:4d:a4:73:
7d:65:ae:f1:46:a9:11:48:62:78:74:11:63:b1:db:
3d:cf:c3:a1:d0:1b:b2:23:d8:e3:33:bd:c8:38:ee:
38:fa:b9:e7:a3:79:fb:3a:6b:86:0b:bc:e3:a8:fe:
eb:41:33:5e:92:25:20:1c:67:6b:9a:40:65:4b:39:
4a:9b:b2:52:fd:57:b0:b1:c1:a3:fd:3b:49:39:cf:
ab:2e:1a:6e:49:f6:df:2b:3a:2f:c2:a3:f6:2f:c9:
68:dd:77:71:8c:98:70:67:40:68:e0:f6:ae:88:53:
31:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
29:B7:1D:AD:E9:37:BB:0D:8F:9E:2E:96:A8:06:9D:E1:15:FC:BC:68
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/29B71DADE937BB0D8F9E2E96A8069DE115FCBC68.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.128.88.0/21
186.250.40.0/21
186.250.104.0/21
IPv6:
2804:74c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262805
Signature Algorithm: sha256WithRSAEncryption
8c:bf:ac:0d:a6:d2:23:af:22:c9:eb:c9:0f:e7:99:76:e6:ca:
4a:16:f0:f1:c4:bf:5c:78:69:23:1b:ac:bc:61:a8:91:27:5d:
58:b7:88:97:b2:0d:fe:c7:59:b6:e8:15:e4:dc:7b:c9:e5:a1:
48:f4:4a:63:ec:d2:05:8c:c3:d3:52:96:68:79:3b:be:03:2a:
a4:e7:d5:d7:fa:95:59:31:18:ea:b4:14:f5:58:34:60:08:e9:
f1:5c:60:d8:28:c5:b6:38:a7:aa:92:4e:c9:21:79:b1:a8:ed:
41:f1:24:e9:a7:3e:d6:f9:49:76:1f:7a:95:35:b9:58:b2:ff:
39:2e:a9:c7:0c:52:c4:0a:6f:e3:2d:23:f2:d4:75:e6:4e:94:
69:6f:70:8d:7e:a7:df:35:6d:02:e6:13:1c:d1:95:f0:45:55:
d7:e7:aa:f1:68:32:6d:4a:6e:1c:b0:85:11:f7:68:31:e2:38:
84:ae:81:29:3c:13:75:1a:00:14:dd:7d:a2:f5:e7:6e:ad:d6:
ca:21:d4:90:eb:85:22:9a:02:46:91:8a:81:cc:4f:b4:95:e2:
77:e3:ad:5a:1e:34:c3:46:f7:3c:f0:a9:67:10:42:ef:1b:d3:
b0:43:9e:f9:7f:66:5c:6d:8f:3a:e4:be:b4:b3:fb:27:94:b6:
e0:fa:2e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org