Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/33D2D52AEBFE5389EA6D3EC0B86D15B4F14B18D8.cer
File: 33D2D52AEBFE5389EA6D3EC0B86D15B4F14B18D8.cer (raw, json)
Hash identifier: hoSzS5HdfRY/9VsGAm071pM70gzFq2TQOO71FqbmfH8=
Subject key identifier: 33:D2:D5:2A:EB:FE:53:89:EA:6D:3E:C0:B8:6D:15:B4:F1:4B:18:D8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 0295BE07EA9C5FA20759A6A64C67CFA34C0AA90E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/33D2D52AEBFE5389EA6D3EC0B86D15B4F14B18D8.mft
caRepository: rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 15 Sep 2023 16:50:44 +0000
Certificate not after: Fri 13 Sep 2024 16:55:44 +0000
Subordinate resources: AS: 28142
AS: 262430
IP: 177.39.136.0/22
IP: 186.224.64.0/20
IP: 187.49.80.0/20
IP: 2804:fc::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:95:be:07:ea:9c:5f:a2:07:59:a6:a6:4c:67:cf:a3:4c:0a:a9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Sep 15 16:50:44 2023 GMT
Not After : Sep 13 16:55:44 2024 GMT
Subject: CN=33D2D52AEBFE5389EA6D3EC0B86D15B4F14B18D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:51:51:76:83:ba:7c:78:dd:48:49:d8:11:9b:
15:ec:f9:24:5a:ec:6a:0c:b3:70:d7:3d:6e:a1:c1:
e9:f0:e6:5f:aa:4f:cb:bd:91:36:d9:cf:b9:8b:69:
bb:c8:e8:f2:67:32:6a:43:0a:e5:60:4e:bf:df:bc:
ae:be:54:da:f9:fb:25:84:ea:fd:5a:07:b7:46:ac:
08:01:db:30:da:18:2c:3a:ce:4d:04:e8:a9:9a:8f:
5a:af:8e:dd:27:25:98:36:3b:e8:2f:3c:bf:e2:b4:
15:82:7f:53:21:3d:d4:3e:cc:de:29:fc:6b:61:10:
8a:c6:43:ec:d5:6e:16:6c:9f:eb:5e:69:39:1b:64:
a9:a4:d9:9a:5f:36:89:e1:0b:c1:bf:3e:e8:8c:ed:
2d:7d:57:f2:b0:f8:09:ec:a0:50:58:26:52:6d:6a:
44:07:25:fd:af:55:10:31:a6:eb:a0:32:a9:43:16:
5b:b8:52:71:38:97:d4:bb:e5:e5:5f:f7:7b:6c:b6:
9a:f8:4c:93:28:75:64:b6:7c:c5:45:52:87:c7:60:
b0:fa:72:34:32:35:e1:66:66:4c:e4:cd:a6:29:be:
49:4f:ad:a2:7d:c8:d6:98:76:a2:02:75:18:86:39:
2c:d1:3d:67:06:a4:b7:50:47:c9:46:5e:ae:6d:6a:
6a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
33:D2:D5:2A:EB:FE:53:89:EA:6D:3E:C0:B8:6D:15:B4:F1:4B:18:D8
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/33D2D52AEBFE5389EA6D3EC0B86D15B4F14B18D8.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.39.136.0/22
186.224.64.0/20
187.49.80.0/20
IPv6:
2804:fc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28142
262430
Signature Algorithm: sha256WithRSAEncryption
23:64:84:1d:e3:43:52:e0:55:e3:9f:8e:10:9a:be:8e:c9:20:
e7:db:6e:a9:88:0a:ac:f6:fb:70:79:04:e0:43:29:b6:76:aa:
de:99:a2:53:7a:95:77:f5:58:02:a4:4b:6d:7d:57:65:63:de:
b8:a4:28:a0:a3:24:b0:7d:ed:d9:60:68:fc:26:fd:0a:f7:b1:
ab:80:3d:20:2d:5a:3f:3f:80:63:94:6d:d9:71:2a:ab:89:0a:
f3:47:8d:ec:5e:bd:47:1f:57:65:89:c8:13:36:27:40:fb:30:
85:cf:79:1d:a9:d0:c4:a8:66:36:8c:6f:ba:5b:a7:0c:c2:a5:
56:a6:3a:62:37:32:13:c7:e7:98:44:69:07:2a:ed:9e:58:d9:
d6:02:cc:8a:c5:97:2c:08:52:80:17:08:37:a0:8d:36:89:b4:
e2:ed:42:27:23:a2:40:76:2c:bb:f7:95:d4:8f:33:08:b7:f9:
db:d9:80:f2:92:13:1f:7f:d0:89:2b:3b:13:b4:dd:79:3b:47:
e8:9f:ca:45:7e:47:c0:26:66:ab:3c:09:df:5b:c4:86:99:26:
87:21:82:f6:9b:a0:be:3e:da:20:56:34:b7:f5:e7:29:50:f5:
20:5e:dc:c7:40:34:8f:00:ed:3e:dc:1b:16:8d:a5:17:9d:3b:
84:95:c1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org