Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3B650AE130217DC191EA44A022BABF2EECE6BA37.cer
File: 3B650AE130217DC191EA44A022BABF2EECE6BA37.cer (raw, json)
Hash identifier: /+VoKHdp2+ri+fJay/aiUK68qCdgyfp9PljyNUuYxwY=
Subject key identifier: 3B:65:0A:E1:30:21:7D:C1:91:EA:44:A0:22:BA:BF:2E:EC:E6:BA:37
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 2B115A89CDC3619BBA778021FF46219EBFE5A303
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/0/3B650AE130217DC191EA44A022BABF2EECE6BA37.mft
caRepository: rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/0
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 23 Feb 2024 11:04:12 +0000
Certificate not after: Fri 21 Feb 2025 11:09:12 +0000
Subordinate resources: AS: 28279
IP: 177.92.224.0/20
IP: 186.208.192.0/20
IP: 187.17.144.0/20
IP: 189.28.0.0/20
IP: 2804:168::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:11:5a:89:cd:c3:61:9b:ba:77:80:21:ff:46:21:9e:bf:e5:a3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Feb 23 11:04:12 2024 GMT
Not After : Feb 21 11:09:12 2025 GMT
Subject: CN=3B650AE130217DC191EA44A022BABF2EECE6BA37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0e:98:21:1f:64:51:6c:3d:e6:19:48:c9:17:
92:fd:1c:d5:aa:e3:3c:10:f1:ed:03:0a:77:0a:f3:
b7:88:3d:86:67:0e:80:60:1b:08:3c:5f:2e:23:ae:
b7:a6:27:48:2e:a4:4f:d2:22:7b:1f:82:32:fc:01:
2e:9a:00:e7:4a:a9:a2:94:2f:6c:f2:74:66:49:b9:
43:5b:3e:50:01:12:03:6c:b9:b8:cb:f4:5e:3d:b5:
62:46:01:4f:b3:26:4d:e1:73:ce:bc:43:3f:69:83:
e7:bb:fb:ee:ee:9c:7e:b3:99:5f:7b:21:9b:a3:56:
10:77:ce:23:97:0f:2a:08:12:91:71:ac:c7:f4:15:
63:0d:b2:d0:f5:d0:39:59:e3:a3:34:4e:6f:3b:02:
ae:d2:7d:b7:ae:59:be:31:dc:23:36:97:bc:34:a8:
b7:a4:e7:74:95:b4:48:84:83:be:08:33:a5:78:fc:
fb:a1:07:ed:df:76:c6:31:27:ce:94:ee:e2:d6:06:
05:51:34:64:16:82:48:d3:13:5c:5a:ff:82:c0:5c:
eb:b8:69:f4:ad:9b:c1:d9:e3:1a:46:55:aa:d7:af:
11:9b:a2:23:75:b1:4f:21:9a:d1:ef:b0:49:3d:49:
64:0c:28:84:da:9e:09:03:5b:7e:71:51:a5:90:1d:
a1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3B:65:0A:E1:30:21:7D:C1:91:EA:44:A0:22:BA:BF:2E:EC:E6:BA:37
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/0/3B650AE130217DC191EA44A022BABF2EECE6BA37.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.92.224.0/20
186.208.192.0/20
187.17.144.0/20
189.28.0.0/20
IPv6:
2804:168::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28279
Signature Algorithm: sha256WithRSAEncryption
29:fb:f1:cd:3b:45:0b:16:72:3a:20:bf:7b:af:0d:d5:06:e2:
3f:11:2c:ff:a5:da:e3:6a:9d:d1:07:7a:58:22:a3:d1:b6:16:
cd:eb:de:69:be:af:f2:a4:8b:12:89:59:61:d7:69:34:b7:7c:
b5:19:91:f9:a5:ff:81:15:48:ea:b8:9d:20:e6:77:73:ac:71:
75:94:a6:b6:e6:2e:81:26:d0:80:71:4c:5e:90:7a:70:28:c4:
09:46:90:66:89:6b:51:9f:19:fe:51:af:80:00:5f:f1:fd:3b:
ca:35:e3:19:8f:cd:5b:cd:b4:3e:06:4d:d7:42:dc:44:b6:0a:
a1:82:4e:0a:9c:fe:02:f3:3a:13:cb:27:46:6c:d0:19:1e:d2:
d9:e8:db:ad:cf:3e:7a:30:34:b9:31:a2:f5:34:28:72:89:37:
cd:f0:c1:b8:64:27:c6:6d:25:92:52:57:3d:2e:d3:4b:e3:e1:
a7:4e:cb:17:92:4f:36:c7:01:bb:c4:77:19:01:6e:a6:6f:80:
7a:49:03:bb:60:6f:da:bb:7e:25:69:5a:39:e8:77:c8:dd:7a:
72:bd:48:29:36:9b:61:b9:a9:8a:9e:9e:d8:7a:b1:ea:2b:94:
0d:c1:d9:50:35:e1:2c:16:65:97:28:b0:22:5d:e4:5c:20:e7:
c8:4a:91:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org