Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/35FF2D89B68DE71378B2A03A04E64F9E8E7ECAC4.cer
File: 35FF2D89B68DE71378B2A03A04E64F9E8E7ECAC4.cer (raw, json)
Hash identifier: GLqpvn645ts0RXl+GRLCfDRfURXRLLMZPmmFalgdV3I=
Subject key identifier: 35:FF:2D:89:B6:8D:E7:13:78:B2:A0:3A:04:E6:4F:9E:8E:7E:CA:C4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 5B38687B55B3C6B6F9D811FBE8B6E44975E6C620
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/6QSwnKALRiWzvtZ3LxV8bVX144oPaH6Js6awaBmEmPoe/0/35FF2D89B68DE71378B2A03A04E64F9E8E7ECAC4.mft
caRepository: rsync://rpki-repo.registro.br/repo/6QSwnKALRiWzvtZ3LxV8bVX144oPaH6Js6awaBmEmPoe/0
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 21 Apr 2023 14:24:07 +0000
Certificate not after: Fri 19 Apr 2024 14:29:07 +0000
Subordinate resources: AS: 265126
IP: 143.208.124.0/22
IP: 170.84.216.0/22
IP: 2804:2af0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:38:68:7b:55:b3:c6:b6:f9:d8:11:fb:e8:b6:e4:49:75:e6:c6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Apr 21 14:24:07 2023 GMT
Not After : Apr 19 14:29:07 2024 GMT
Subject: CN=35FF2D89B68DE71378B2A03A04E64F9E8E7ECAC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:34:8b:eb:5e:2b:97:7a:31:28:82:cd:24:
23:38:6c:43:48:01:28:4d:5e:88:f0:e2:e4:d2:0c:
8a:27:e7:18:6d:26:6d:93:c7:fb:c9:d3:11:5b:90:
a3:2c:42:23:4c:5e:af:21:1c:38:f6:f6:c4:f9:a4:
20:5d:61:28:ff:e0:ad:d6:8b:02:d6:9d:ac:34:e4:
f5:d6:22:2b:1a:4a:04:9d:88:e5:32:4e:88:63:20:
4d:64:62:17:e2:0e:62:33:ae:76:1b:e1:71:d7:fa:
45:43:e8:61:ab:6d:51:55:34:1a:73:9c:07:f5:6f:
da:a1:7b:17:26:eb:08:55:db:e7:f2:21:85:c9:a5:
00:a1:96:06:81:e9:e0:8a:d7:97:9d:a2:fd:7f:2a:
c8:46:ec:6a:c4:eb:7f:55:51:8e:ed:fe:c1:bb:60:
d5:32:34:1a:0a:f2:5b:a9:24:d6:30:b2:8d:e5:6c:
97:2a:4a:e2:a4:5c:d0:83:ab:9f:88:14:e1:59:da:
55:e7:cd:95:80:ed:84:0f:1a:4c:d6:4c:bc:77:b4:
b4:b2:45:8b:dc:55:66:8c:1b:0f:6e:87:71:16:30:
74:4f:26:aa:38:bb:e6:d7:9d:6a:5d:68:21:ca:7c:
60:02:1c:3c:f5:12:89:be:a3:04:a1:48:8f:1b:fa:
6f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
35:FF:2D:89:B6:8D:E7:13:78:B2:A0:3A:04:E6:4F:9E:8E:7E:CA:C4
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/6QSwnKALRiWzvtZ3LxV8bVX144oPaH6Js6awaBmEmPoe/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6QSwnKALRiWzvtZ3LxV8bVX144oPaH6Js6awaBmEmPoe/0/35FF2D89B68DE71378B2A03A04E64F9E8E7ECAC4.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.124.0/22
170.84.216.0/22
IPv6:
2804:2af0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265126
Signature Algorithm: sha256WithRSAEncryption
24:c2:cf:78:0a:e2:3d:15:25:00:6d:75:aa:4a:ac:56:0f:ff:
a0:6a:eb:a1:ea:49:1f:cf:d0:0d:d2:11:17:ef:9e:d7:87:c0:
79:06:f3:c8:f8:91:dc:52:4f:d1:69:27:01:ab:4b:a5:5f:cc:
e0:1b:dd:5b:d3:77:e2:b7:27:4c:fd:82:a6:4e:72:37:47:4b:
8d:3d:ab:c4:69:ff:f9:b3:71:f0:6f:7f:6e:17:bd:2b:06:43:
c9:68:e6:db:17:c2:3f:b4:fb:73:47:b9:9e:62:db:96:1e:35:
2b:17:05:76:1c:90:8d:6c:07:1b:a7:56:61:0e:04:42:71:6c:
02:4e:69:a0:cc:2e:85:a6:23:a1:d6:71:ae:64:b2:34:d2:02:
ed:c8:37:f0:ea:bc:e5:81:80:0c:e8:2a:45:c3:73:a9:69:db:
8a:55:a7:ea:ad:16:67:9d:61:b4:0f:f1:ca:6f:7e:ec:e1:dc:
eb:ad:d9:b8:d8:d3:58:9c:9f:82:9b:52:49:fb:a8:3f:ac:da:
6e:a8:90:cd:ee:46:14:79:bb:f5:25:cb:c7:19:4f:91:d1:49:
56:49:f0:f2:cc:4f:e9:3d:99:67:ca:a6:cd:e4:5a:15:3e:41:
e3:1e:3e:0a:ea:fb:19:f3:74:12:82:a9:d0:fa:2b:36:5e:fc:
60:35:82:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org