Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.cer
File: 2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.cer (raw, json)
Hash identifier: Kxn5v6h52OUYLi9OoiK4ELf1x8Hgi3jvTr0Ow8rkHSM=
Subject key identifier: 2D:57:91:AB:CD:F8:9E:4D:D6:E3:B3:B0:E1:BC:61:A1:4A:14:7C:23
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 68FD7AA03E3CDD681FD08FFF3F61EE420D059E16
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.mft
caRepository: rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 23 Mar 2023 12:15:27 +0000
Certificate not after: Thu 21 Mar 2024 12:20:27 +0000
Subordinate resources: AS: 264552
IP: 45.172.80.0/22
IP: 138.0.172.0/22
IP: 170.79.52.0/22
IP: 201.148.112.0/22
IP: 2804:2164::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:fd:7a:a0:3e:3c:dd:68:1f:d0:8f:ff:3f:61:ee:42:0d:05:9e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Mar 23 12:15:27 2023 GMT
Not After : Mar 21 12:20:27 2024 GMT
Subject: CN=2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:73:8c:d7:94:f2:2f:b4:65:42:98:e4:c0:22:
ee:42:58:bc:68:b2:ac:b0:4e:b8:8f:4f:d7:eb:94:
87:a7:d4:23:bb:f3:34:64:3f:74:ea:1b:b2:82:28:
40:9a:90:e7:3a:61:ca:f9:49:c4:4e:3b:bf:86:30:
9a:e4:0c:a1:35:f9:21:c4:61:5f:1d:bc:7d:27:45:
f8:06:06:a1:30:75:32:1d:a9:f6:da:23:1f:05:1b:
b8:13:87:f6:10:00:4b:9f:09:74:12:64:6c:8e:da:
2a:2c:6d:eb:b7:58:5a:e7:3f:8c:ab:54:e9:2b:04:
64:4d:4d:62:73:6b:4c:9c:78:d5:37:dc:35:57:ba:
aa:8c:b9:ae:02:2b:22:68:92:bd:24:61:a2:66:19:
aa:08:30:2f:52:75:18:a6:04:93:46:29:a7:b9:26:
70:60:a3:f6:cc:ac:06:17:79:b5:c4:5e:1e:de:d7:
aa:93:3a:5b:b8:33:6c:cb:a6:10:fe:20:98:0c:d1:
39:7f:db:bf:bb:8a:12:01:fb:af:d0:23:e3:8c:bb:
49:3e:71:d3:d4:24:64:85:e2:88:e2:e0:2c:8c:cf:
49:c7:4a:64:21:2c:55:a9:79:d0:9d:de:84:e6:29:
cd:2e:15:67:1f:b7:b2:f5:a8:dd:53:2f:02:a0:57:
27:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2D:57:91:AB:CD:F8:9E:4D:D6:E3:B3:B0:E1:BC:61:A1:4A:14:7C:23
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.80.0/22
138.0.172.0/22
170.79.52.0/22
201.148.112.0/22
IPv6:
2804:2164::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264552
Signature Algorithm: sha256WithRSAEncryption
5d:1a:43:1a:e5:db:50:f7:cd:15:9a:47:8d:4d:46:db:4d:3a:
35:a6:72:76:b7:59:1e:6d:d5:d3:78:00:e5:59:6e:a9:5e:0b:
71:63:42:76:15:78:0d:c7:7c:96:78:a7:90:b2:ca:3d:3b:8f:
78:d0:07:e6:e7:ff:3f:8b:ae:40:03:33:5b:dc:83:1b:7c:59:
a4:b4:23:88:aa:4b:23:e1:1e:6e:f2:13:59:9b:3b:a6:21:a3:
58:fd:fa:dd:1e:7d:3c:08:21:53:51:0b:05:4f:ab:45:56:5c:
28:57:25:3e:bf:ba:38:e1:34:34:62:38:ff:74:a1:d8:14:7a:
8d:2a:d1:a0:63:7e:48:2f:0d:db:f5:32:87:34:a7:36:1f:65:
cf:b6:0f:fa:34:98:4a:a7:bd:e1:b1:e4:30:3e:3e:c9:86:e3:
ee:a1:b6:8a:0a:83:e5:97:fb:49:3e:92:49:95:dd:7e:df:50:
72:81:2f:f1:91:83:16:4c:d5:3a:ac:e8:19:0e:9a:2b:ac:68:
18:f7:8b:83:25:cc:21:15:e1:b4:9e:10:26:6f:13:3b:49:75:
99:f2:9c:d1:a9:5b:9d:ef:8b:95:8c:d5:54:2e:d9:71:4e:bf:
75:73:c9:20:d6:64:57:2a:ec:ea:50:c5:59:03:67:7d:31:95:
f0:92:7f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org