Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3D5D40CF30F71728D13ED1EDA1B87700FA2696DD.cer
File: 3D5D40CF30F71728D13ED1EDA1B87700FA2696DD.cer (raw, json)
Hash identifier: nalEvyTCv8rUQnFHpudin7uXhsQqKvfru/ZIdV+Qoec=
Subject key identifier: 3D:5D:40:CF:30:F7:17:28:D1:3E:D1:ED:A1:B8:77:00:FA:26:96:DD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 1E2B2C9D8034D75520D2214CD89F50EB216F84AF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3D5D40CF30F71728D13ED1EDA1B87700FA2696DD.mft
caRepository: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 02 Apr 2024 23:07:05 +0000
Certificate not after: Tue 01 Apr 2025 23:12:05 +0000
Subordinate resources: AS: 28598
AS: 52759
AS: 61832
AS: 61946
AS: 268018
IP: 45.7.104.0/22
IP: 45.165.228.0/22
IP: 45.172.124.0/22
IP: 45.179.224.0/22
IP: 45.229.212.0/22
IP: 45.236.68.0/22
IP: 138.59.228.0/22
IP: 138.122.80.0/21
IP: 167.250.136.0/22
IP: 170.78.4.0/22
IP: 170.81.4.0/22
IP: 170.81.192.0/22
IP: 177.38.200.0/21
IP: 177.39.56.0/21
IP: 177.53.216.0/21
IP: 177.66.120.0/22
IP: 177.72.0.0/21
IP: 177.104.112.0/20
IP: 177.190.208.0/22
IP: 179.96.216.0/21
IP: 187.60.240.0/20
IP: 187.84.64.0/20
IP: 187.94.8.0/22
IP: 187.110.224.0/20
IP: 187.120.48.0/20
IP: 191.6.8.0/21
IP: 191.52.224.0/20
IP: 201.20.64.0/18
IP: 201.139.184.0/21
IP: 201.148.100.0/22
IP: 201.148.120.0/22
IP: 2804:248::/32
IP: 2804:b3c::/32
IP: 2804:18ac::/32
IP: 2804:1a04::/32
IP: 2804:56b0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:2b:2c:9d:80:34:d7:55:20:d2:21:4c:d8:9f:50:eb:21:6f:84:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Apr 2 23:07:05 2024 GMT
Not After : Apr 1 23:12:05 2025 GMT
Subject: CN=3D5D40CF30F71728D13ED1EDA1B87700FA2696DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:22:d8:1e:a3:9e:35:09:c9:f4:6c:0b:4c:76:
17:ca:bc:8d:ec:27:b2:30:16:81:e1:83:7c:ee:2a:
f1:ee:63:d5:f3:b9:5f:f0:bb:71:ed:cb:26:b4:18:
50:16:74:5e:50:d4:86:16:88:bf:48:22:3f:4a:f8:
d2:aa:49:67:58:ef:88:74:cb:ef:57:a8:51:e0:87:
47:61:24:94:e8:57:9f:50:ea:1c:14:af:f0:cf:f5:
3f:f8:0f:5e:42:f2:d7:39:76:67:38:cd:9b:04:59:
72:c9:79:28:be:e3:e0:60:27:68:ab:c6:6a:d0:6e:
78:da:e5:59:ef:fc:63:2a:7f:4a:67:fb:36:2a:fc:
3e:3c:4e:92:7f:48:dd:32:e5:1c:34:72:73:5c:fa:
3f:2f:18:6a:49:3f:67:29:d3:01:67:da:13:1c:09:
95:e9:a5:77:20:a6:d4:c8:c2:9e:21:26:a9:a6:a7:
4c:13:c5:9d:43:05:b6:48:e3:93:43:4a:d9:90:f3:
0d:dd:4a:70:d9:5b:71:6c:00:9a:7b:d3:45:d7:95:
8c:6f:33:6e:11:a8:a4:a0:fa:9c:86:dd:55:6c:48:
7e:a8:a1:d9:b5:2c:fa:47:ed:43:16:12:f8:a4:c2:
1b:ef:4b:a3:bd:46:a7:e4:2b:a3:75:41:8a:9a:5b:
9b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3D:5D:40:CF:30:F7:17:28:D1:3E:D1:ED:A1:B8:77:00:FA:26:96:DD
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3D5D40CF30F71728D13ED1EDA1B87700FA2696DD.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.104.0/22
45.165.228.0/22
45.172.124.0/22
45.179.224.0/22
45.229.212.0/22
45.236.68.0/22
138.59.228.0/22
138.122.80.0/21
167.250.136.0/22
170.78.4.0/22
170.81.4.0/22
170.81.192.0/22
177.38.200.0/21
177.39.56.0/21
177.53.216.0/21
177.66.120.0/22
177.72.0.0/21
177.104.112.0/20
177.190.208.0/22
179.96.216.0/21
187.60.240.0/20
187.84.64.0/20
187.94.8.0/22
187.110.224.0/20
187.120.48.0/20
191.6.8.0/21
191.52.224.0/20
201.20.64.0/18
201.139.184.0/21
201.148.100.0/22
201.148.120.0/22
IPv6:
2804:248::/32
2804:b3c::/32
2804:18ac::/32
2804:1a04::/32
2804:56b0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28598
52759
61832
61946
268018
Signature Algorithm: sha256WithRSAEncryption
aa:3e:62:1c:fb:fc:c7:3e:2f:09:1b:87:7e:1f:3a:e9:a0:2e:
ea:5b:85:fe:56:ad:81:a9:60:28:57:42:d8:3d:93:0a:b0:64:
ac:78:10:90:41:bc:42:b9:9a:08:07:cc:30:ab:fd:d3:a9:f8:
de:ff:fe:b1:42:3f:70:77:c2:96:ee:73:05:cb:7d:3b:8f:9a:
77:cb:09:70:f0:8f:82:7a:35:4b:15:15:20:44:7c:0c:b9:ed:
c7:69:d6:6d:90:f4:a3:79:26:bc:df:c5:1a:64:c5:51:f8:8b:
a5:2c:8b:ab:25:b4:d6:7b:aa:1b:8b:a9:98:a6:43:6b:35:a4:
62:a9:ef:87:ea:88:fc:3c:18:35:a7:a4:3b:1b:ac:33:bd:05:
49:35:0d:f7:76:78:7a:ea:66:6c:ba:81:ee:b7:c5:71:67:6b:
e0:9a:13:70:07:d7:0b:71:b5:fa:6c:9c:9b:38:4b:d6:10:9a:
e0:95:0b:3b:a4:9c:a6:3a:fa:4b:24:ae:d6:70:a4:83:ad:0d:
a0:eb:5b:a1:fe:29:0e:6d:09:60:5f:e6:9c:3f:e3:47:43:aa:
a3:e4:1b:f7:3f:48:80:20:33:01:db:9a:d8:6c:12:45:74:b3:
b3:95:39:b7:7a:3a:ae:1e:54:65:8a:a5:b6:2a:15:25:8d:a9:
b2:11:99:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:38 2024 by rpki-client on console-ams.rpki-client.org