Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5.cer
File: 3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5.cer (raw, json)
Hash identifier: 6kwTzvnaGiERO01wH17ElSL+gt9vvFC+CfufmRTYhrc=
Subject key identifier: 3E:D6:45:BC:CA:E5:5E:7F:42:FC:CB:42:EB:66:12:E3:9B:FC:EC:A5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 47E2011994CC964EBEDFEEA92B26EABD374B193B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5.mft
caRepository: rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 09 Oct 2023 13:17:59 +0000
Certificate not after: Mon 07 Oct 2024 13:22:59 +0000
Subordinate resources: AS: 28352
IP: 187.0.48.0/20
IP: 189.51.192.0/20
IP: 2804:ae0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:e2:01:19:94:cc:96:4e:be:df:ee:a9:2b:26:ea:bd:37:4b:19:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Oct 9 13:17:59 2023 GMT
Not After : Oct 7 13:22:59 2024 GMT
Subject: CN=3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0a:d3:90:19:e3:8a:27:ee:18:ad:cc:cd:b9:
d3:d7:f2:c0:f9:ba:53:9b:83:03:72:f3:3d:88:a1:
83:2c:ff:fd:93:ad:24:2d:5f:20:aa:e1:94:e0:8f:
8a:c5:88:5b:ce:08:82:b3:29:b6:80:a5:2f:d0:6f:
c0:12:83:f5:85:24:3c:a9:30:0c:38:2d:2c:bf:ff:
2c:87:c3:47:22:ec:47:34:8d:84:4c:e1:2c:7c:8b:
34:45:0e:26:a7:6f:f4:e8:a9:2c:11:4f:e9:dd:c6:
33:28:21:0c:39:c4:e2:cd:f1:6d:ff:31:8c:5e:e3:
76:1b:f1:df:a9:13:59:aa:f1:43:e0:35:87:11:56:
fe:34:f2:91:8b:ad:b5:cf:81:50:32:14:7c:8b:3c:
f5:78:e8:75:0f:29:51:c7:5a:b9:cb:a2:9a:4b:07:
69:73:1a:02:e3:87:61:99:f0:a2:ac:49:78:a1:e5:
3a:79:e2:a2:c9:4f:47:84:17:bd:dd:fe:d3:19:2d:
cf:33:d8:db:bf:2b:f8:47:09:b2:d5:08:08:64:fe:
e0:e1:81:66:36:37:89:54:99:bd:e3:77:8c:67:a1:
b1:80:09:42:f0:66:7a:b5:0c:e0:5f:61:12:60:93:
07:cf:fa:a7:07:ea:31:da:dc:42:8a:81:42:ea:ff:
6c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3E:D6:45:BC:CA:E5:5E:7F:42:FC:CB:42:EB:66:12:E3:9B:FC:EC:A5
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3ED645BCCAE55E7F42FCCB42EB6612E39BFCECA5.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.0.48.0/20
189.51.192.0/20
IPv6:
2804:ae0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28352
Signature Algorithm: sha256WithRSAEncryption
39:7f:5a:f8:dc:4f:49:1d:46:63:34:a6:88:e3:21:dd:06:17:
e6:9a:02:d7:33:13:61:c4:b2:98:ba:58:db:7c:26:e7:aa:40:
27:a6:cf:42:81:70:26:68:c2:73:52:91:24:59:ea:06:45:df:
e7:da:a4:f8:ad:a4:86:78:f9:03:2d:03:c2:13:f4:3d:e7:21:
6b:f4:d8:60:b9:de:75:8f:d4:33:3a:ea:6c:d4:12:1b:c0:fa:
a4:32:e9:2b:17:a0:8e:93:3a:64:1e:25:42:bc:7d:88:55:a9:
19:e8:f6:2d:7f:94:c0:f1:92:d2:17:f9:09:48:3f:6a:a4:4f:
e7:91:a5:50:39:43:c3:87:a8:e3:d0:b2:31:49:57:f4:82:55:
84:0c:b8:4e:17:f9:b3:f6:c3:56:48:a9:47:10:f4:74:1b:c5:
cd:b2:34:eb:94:da:ff:71:ba:35:48:28:a2:4e:24:04:03:ed:
49:a7:c8:94:a7:7d:d8:30:fd:fb:48:64:64:ee:8d:a5:cf:bf:
fb:4a:d2:2e:fc:17:03:56:ab:f2:89:e2:b8:25:3a:32:5b:a6:
82:f8:a1:61:86:dd:37:58:ce:29:28:5b:2b:2d:1c:8c:40:09:
a8:d2:64:27:ea:38:ee:84:48:f1:3c:8f:13:92:ee:5a:b9:c8:
02:47:8a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org