Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/35948C139B708ABFE4A11AE018A8F5E25A09BA20.cer
File: 35948C139B708ABFE4A11AE018A8F5E25A09BA20.cer (raw, json)
Hash identifier: bSMX+7QIzo7nBEKYaFSwUDbwKD7t+GUxP59qT+jqrZU=
Subject key identifier: 35:94:8C:13:9B:70:8A:BF:E4:A1:1A:E0:18:A8:F5:E2:5A:09:BA:20
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 48727B5D7B8B0CEF191B68C57FD27BCC81811074
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/35948C139B708ABFE4A11AE018A8F5E25A09BA20.mft
caRepository: rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 05 Jan 2024 19:07:32 +0000
Certificate not after: Fri 03 Jan 2025 19:12:32 +0000
Subordinate resources: AS: 266445
AS: 268230
IP: 45.235.220.0/22
IP: 170.82.180.0/22
IP: 2804:37f0::/32
IP: 2804:4df4::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:72:7b:5d:7b:8b:0c:ef:19:1b:68:c5:7f:d2:7b:cc:81:81:10:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Jan 5 19:07:32 2024 GMT
Not After : Jan 3 19:12:32 2025 GMT
Subject: CN=35948C139B708ABFE4A11AE018A8F5E25A09BA20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:59:e3:28:28:c8:2f:2b:a8:32:58:13:a9:b8:
ca:c9:82:0c:54:aa:46:f6:7b:87:50:e8:46:79:06:
bb:77:3b:17:83:35:35:6f:18:07:61:cc:73:03:f6:
b4:b6:81:c1:96:92:e5:b1:a5:57:48:6c:d1:3c:2e:
39:77:ee:13:03:b1:cf:86:ed:d5:5b:54:c3:57:f7:
84:cf:a5:f5:f9:c2:2b:b2:69:8c:95:ab:de:a6:75:
cf:98:de:57:72:80:5d:d1:01:64:2f:3f:a0:0f:f4:
3f:91:86:1d:b8:dc:4f:c9:2b:fd:67:48:27:41:09:
1f:e5:8a:85:19:c8:33:cc:d0:2b:61:2b:ef:52:78:
1c:d0:0d:19:16:11:d0:5c:75:d8:e6:54:3d:24:a9:
f8:3b:71:1b:44:68:e2:71:72:9a:99:1e:bb:89:ad:
16:7c:1a:f8:62:18:45:e4:22:c0:93:f8:55:eb:96:
31:03:36:c5:3c:95:e6:26:31:0e:2e:31:64:b5:61:
40:bf:59:53:cc:ea:f1:d4:32:09:a1:51:02:29:a1:
16:bf:1c:fe:01:1b:6f:62:e0:0f:72:85:cc:71:ab:
c1:69:8b:90:72:09:ca:d0:97:20:53:b1:4a:09:49:
08:ff:39:d0:bb:af:57:d1:17:57:d4:cf:7d:31:fb:
a7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
35:94:8C:13:9B:70:8A:BF:E4:A1:1A:E0:18:A8:F5:E2:5A:09:BA:20
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/35948C139B708ABFE4A11AE018A8F5E25A09BA20.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.220.0/22
170.82.180.0/22
IPv6:
2804:37f0::/32
2804:4df4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266445
268230
Signature Algorithm: sha256WithRSAEncryption
5d:ae:00:e6:78:2b:e2:25:38:dc:cb:aa:bb:bd:e2:9c:d7:ee:
f2:51:cf:44:8f:15:5a:22:18:6c:fe:99:d9:99:2c:5d:61:37:
1e:d7:e2:7f:5d:8e:50:a0:5f:fc:f8:6d:f4:b7:47:b2:5e:22:
37:d9:91:6f:3f:84:ab:fb:e0:08:1e:1e:3a:de:76:7b:01:c9:
7b:70:3d:10:80:ca:c3:e2:10:e4:2d:34:17:a6:0d:2d:e9:90:
59:0b:b6:52:6a:84:34:8d:d0:9b:83:8a:e8:b3:ec:95:78:e6:
62:77:e0:b2:0c:91:ac:f4:b8:89:c3:91:d0:5b:8e:5e:01:db:
51:c5:ca:8f:3e:10:10:cf:19:ae:cd:da:af:49:c5:41:50:9c:
de:8f:e7:b4:70:47:5d:78:75:54:ca:aa:62:aa:67:ab:f9:a6:
8f:f0:53:1c:be:cc:8a:69:81:b2:61:bc:f4:d5:4b:be:64:78:
d3:17:58:cf:a2:5c:20:f5:3e:84:5e:92:07:fc:17:a5:f3:4a:
f1:c4:b0:65:50:be:77:3c:ac:41:9d:40:9f:3c:3b:bc:16:3a:
81:f1:3b:d0:ac:96:4b:6f:df:39:f7:1e:91:ce:b5:93:b1:d2:
d0:31:f0:fb:04:e6:00:5d:cf:7a:50:92:ef:ca:83:31:50:7e:
cb:ba:cd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org