Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2DDEAAE019C1DCADF9D77FB4584FB03336610629.cer
File: 2DDEAAE019C1DCADF9D77FB4584FB03336610629.cer (raw, json)
Hash identifier: 1xo4NV3HpOjfS0zSEOqGEKvsbfC/zF0X9BkwNH3u8oI=
Subject key identifier: 2D:DE:AA:E0:19:C1:DC:AD:F9:D7:7F:B4:58:4F:B0:33:36:61:06:29
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 2EB9C5DAAC13ED77CB874189DFC226D23C519852
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/2DDEAAE019C1DCADF9D77FB4584FB03336610629.mft
caRepository: rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 08 Jan 2024 17:26:04 +0000
Certificate not after: Mon 06 Jan 2025 17:31:04 +0000
Subordinate resources: AS: 262417
IP: 168.90.28.0/22
IP: 177.37.64.0/19
IP: 177.129.200.0/22
IP: 179.43.4.0/22
IP: 2804:e24::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:b9:c5:da:ac:13:ed:77:cb:87:41:89:df:c2:26:d2:3c:51:98:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Jan 8 17:26:04 2024 GMT
Not After : Jan 6 17:31:04 2025 GMT
Subject: CN=2DDEAAE019C1DCADF9D77FB4584FB03336610629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d6:ee:76:44:a3:01:bb:11:ce:a2:5b:38:06:
3e:d4:a7:d9:b1:1b:75:9f:16:d5:70:15:ee:08:f0:
60:f5:db:40:90:19:45:fb:0f:a0:7a:04:2b:82:aa:
3a:c0:30:8d:66:35:60:ac:9e:48:0f:8b:04:65:4c:
10:14:4a:50:77:af:00:ca:f4:f9:8b:f8:a4:11:c2:
46:42:50:6c:f5:39:cb:94:f9:51:01:75:b9:32:84:
1f:54:e3:87:18:33:b1:4f:1e:4f:5a:4f:06:0b:aa:
47:5f:2e:98:f3:ac:d4:2c:18:f8:a5:46:23:4b:a2:
30:03:8f:da:10:da:73:ad:ba:ad:56:f2:b6:af:a7:
8c:09:56:2d:c8:a6:6e:98:43:02:88:23:1e:da:1b:
ff:aa:f6:58:69:39:22:7e:64:21:fa:60:2d:df:1e:
4c:e5:d7:63:c4:55:19:ff:73:05:ac:c9:d0:2f:0d:
dc:8c:b9:08:13:bd:c7:e2:5f:4c:04:84:f2:ae:b3:
66:ab:61:92:f9:aa:19:6d:3c:98:05:dd:48:e3:0b:
a1:86:1e:b5:68:20:74:60:f6:eb:f2:e0:ea:39:a9:
db:31:14:61:c6:ab:c9:de:ef:20:11:24:a3:bd:45:
29:d1:ba:1d:fb:2b:53:4b:43:92:57:a9:06:1c:8b:
40:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2D:DE:AA:E0:19:C1:DC:AD:F9:D7:7F:B4:58:4F:B0:33:36:61:06:29
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/2DDEAAE019C1DCADF9D77FB4584FB03336610629.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.28.0/22
177.37.64.0/19
177.129.200.0/22
179.43.4.0/22
IPv6:
2804:e24::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262417
Signature Algorithm: sha256WithRSAEncryption
12:ba:45:77:72:ba:df:9e:6c:f3:d8:93:f7:f6:06:7a:d0:4e:
58:56:9b:78:9f:31:5c:5a:0b:24:6f:98:35:d5:9b:8a:c4:71:
6b:3d:8d:5e:56:79:c9:81:49:68:7e:f3:ec:3c:4d:d9:c2:52:
d3:5f:a1:d2:92:32:e7:62:0c:64:cf:f9:16:ab:d7:de:ab:2f:
46:12:f8:c5:0e:3b:5a:c1:15:34:c6:07:1f:26:1e:75:d7:f6:
f4:de:5b:dd:f6:1f:a2:d8:f9:c7:c1:d2:25:6e:a2:c8:de:b3:
6f:bc:51:04:4e:1a:9c:32:d0:36:3e:de:10:8b:eb:43:81:5c:
82:d7:b3:f3:93:8a:7f:8a:b8:d8:02:90:fe:b1:02:b3:db:19:
b6:97:b6:0f:63:20:e8:38:b4:1f:6f:dc:7f:19:ab:00:ef:07:
41:20:3f:f2:05:ba:b3:b5:ca:e3:06:2c:a3:65:f3:75:09:ef:
ef:a8:c8:be:c7:9e:40:45:7f:28:6e:9c:b5:a0:37:43:b3:8c:
8f:19:87:4a:14:e9:96:38:30:96:ef:c0:f5:7c:ba:3b:c5:04:
da:d1:10:4e:c0:a9:fc:7d:1b:6f:69:21:17:40:aa:c0:d1:6b:
ec:20:e5:a8:2a:9f:02:17:66:d8:ae:cc:9a:0a:40:ea:08:8e:
e6:68:ff:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org