Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3235A266D447CA3B72A35513BA9761F5805F23E2.cer
File: 3235A266D447CA3B72A35513BA9761F5805F23E2.cer (raw, json)
Hash identifier: HtnHJYgLWAOBml+KfsrKnC3Ozfic+HHpOWH9+KaK8PA=
Subject key identifier: 32:35:A2:66:D4:47:CA:3B:72:A3:55:13:BA:97:61:F5:80:5F:23:E2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 6AE565A1B41AD511964E8929C9BBA248F75CF627
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3235A266D447CA3B72A35513BA9761F5805F23E2.mft
caRepository: rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 09 Mar 2023 17:20:09 +0000
Certificate not after: Thu 07 Mar 2024 17:25:09 +0000
Subordinate resources: AS: 52965
IP: 131.0.224.0/22
IP: 177.36.0.0/20
IP: 177.72.208.0/21
IP: 177.221.32.0/20
IP: 179.124.136.0/21
IP: 187.103.64.0/20
IP: 2804:3b8::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:e5:65:a1:b4:1a:d5:11:96:4e:89:29:c9:bb:a2:48:f7:5c:f6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Mar 9 17:20:09 2023 GMT
Not After : Mar 7 17:25:09 2024 GMT
Subject: CN=3235A266D447CA3B72A35513BA9761F5805F23E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ee:c3:ac:ed:de:b2:9f:9e:9f:32:63:99:b8:
10:4c:a8:15:39:ca:5c:2c:ff:e0:5c:28:ee:c6:dc:
78:ac:e0:61:c4:3d:c0:87:a2:08:70:4d:4b:02:41:
dd:28:34:39:11:2a:12:d8:99:c8:5a:6f:02:57:9e:
0e:f6:6b:6a:c1:24:b9:9a:67:b1:82:e6:5f:b0:9d:
11:79:e5:cc:2c:9f:c6:f3:df:14:c8:d8:35:71:ee:
17:46:74:9a:30:04:03:e8:5d:85:fa:8e:1e:d7:8f:
ca:b3:51:be:65:47:5b:5a:76:38:be:3a:4b:8f:12:
82:63:aa:66:aa:a9:8d:b7:f7:38:da:cc:9c:72:09:
cb:df:18:9f:99:8b:61:7d:57:97:08:a2:7c:7a:f7:
ee:ec:3e:6b:c5:0c:e5:45:e2:c3:1e:4c:7c:29:f7:
19:db:50:f7:2a:b4:6b:32:9f:f8:6d:25:12:3d:81:
23:72:df:3c:e4:36:06:5e:dc:a1:56:5f:b1:4d:6c:
39:ff:0c:3c:79:c9:69:ee:e3:e4:36:d6:d7:f5:14:
68:9d:ae:a2:42:3d:a4:0a:8f:24:91:92:de:eb:ae:
6e:70:7c:8f:af:df:d8:7b:bd:cf:20:3f:62:e4:b4:
ee:ee:a2:87:be:1d:19:b6:2b:6a:6d:e7:b2:92:5d:
17:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
32:35:A2:66:D4:47:CA:3B:72:A3:55:13:BA:97:61:F5:80:5F:23:E2
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3235A266D447CA3B72A35513BA9761F5805F23E2.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.224.0/22
177.36.0.0/20
177.72.208.0/21
177.221.32.0/20
179.124.136.0/21
187.103.64.0/20
IPv6:
2804:3b8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52965
Signature Algorithm: sha256WithRSAEncryption
52:96:af:03:97:ac:b2:3e:ab:25:58:a9:16:fa:3e:78:d3:3a:
5a:4c:d0:3c:01:b8:e7:7a:17:e7:39:49:61:2e:15:9e:06:ab:
c2:b9:7b:a6:c4:25:41:c5:d5:63:39:81:f4:e9:31:6c:0c:ed:
54:e8:55:49:bc:3b:e9:99:d0:39:69:af:f8:af:00:3c:00:eb:
c7:02:a3:6f:d0:6b:91:4d:89:b1:83:ff:05:4c:4e:58:a8:02:
fb:10:2f:1d:e6:b2:b1:e1:5b:db:46:27:77:ab:bb:64:76:d7:
59:b8:f3:84:b6:db:bd:d0:36:5f:aa:52:4e:2e:88:7c:77:d1:
11:34:54:04:2e:92:56:e9:bd:4b:90:37:8f:5c:39:8b:3c:4e:
14:fd:fd:97:05:58:50:c1:e0:b9:d3:f6:f5:ae:5c:a0:b4:30:
ce:38:1d:55:71:4b:fb:1e:ad:5e:f0:97:eb:15:a1:45:e1:83:
03:af:d0:6c:2c:22:b6:fb:29:72:b5:68:1b:1d:c4:83:df:f5:
fb:08:9f:0b:9a:62:a7:e1:a3:f1:19:ef:0e:67:de:f3:db:25:
c7:56:ef:96:c7:2b:9a:6d:7b:36:5c:79:17:2f:97:a4:11:86:
f5:b9:13:10:05:43:33:af:3e:7e:90:08:a1:ad:85:9a:8d:d9:
05:21:84:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org