Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3F5605C55C36989F0F2C6640A7F7FDBBDB0B62F6.cer
File: 3F5605C55C36989F0F2C6640A7F7FDBBDB0B62F6.cer (raw, json)
Hash identifier: Wep2xN+Jobi8yglBjcLz22UCvhopsyN0OdU6V87+3KU=
Subject key identifier: 3F:56:05:C5:5C:36:98:9F:0F:2C:66:40:A7:F7:FD:BB:DB:0B:62:F6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 5EB044C78C55E71EF784B12812DB58B1BA90ABDA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3F5605C55C36989F0F2C6640A7F7FDBBDB0B62F6.mft
caRepository: rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 10 Aug 2023 19:47:45 +0000
Certificate not after: Thu 08 Aug 2024 19:52:45 +0000
Subordinate resources: AS: 262376
IP: 143.255.168.0/22
IP: 177.74.148.0/22
IP: 177.128.168.0/22
IP: 2804:10d4::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:b0:44:c7:8c:55:e7:1e:f7:84:b1:28:12:db:58:b1:ba:90:ab:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Aug 10 19:47:45 2023 GMT
Not After : Aug 8 19:52:45 2024 GMT
Subject: CN=3F5605C55C36989F0F2C6640A7F7FDBBDB0B62F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9d:98:ac:7e:c1:f8:ce:0e:5f:68:e5:ac:9b:
62:31:86:a4:16:9b:2d:23:76:ac:a8:be:24:52:d1:
3a:55:87:73:de:16:cc:be:19:8f:69:90:0e:3d:ba:
4f:ca:95:f9:00:db:4c:28:b4:85:c9:f1:f4:03:ce:
53:9d:b7:7a:4b:76:b7:f5:4b:6d:1a:bd:f0:03:5d:
b2:8b:44:91:ea:aa:ec:c1:16:46:4a:21:75:39:c9:
67:c2:dc:9e:67:71:4d:ce:b0:61:be:ed:7d:d1:45:
44:ad:83:43:c4:57:36:b4:07:a3:cc:ee:e6:65:fa:
c4:fb:72:6f:b2:80:d7:36:32:da:e8:35:73:fc:d0:
b9:7f:cd:2b:d1:82:63:7c:70:89:fa:e1:b5:74:d6:
f9:37:a0:5d:92:bd:08:64:0e:ad:03:3d:12:42:39:
68:6f:58:b6:d9:d8:3c:10:3f:e8:a3:6d:bf:73:af:
cd:2c:ca:7d:d4:8e:fb:d9:32:13:f5:c8:8e:52:0b:
7d:01:fd:d9:24:61:09:22:4e:77:18:8a:93:ac:f6:
7e:14:68:0d:b4:9f:33:45:65:7b:db:16:bf:52:e0:
f1:71:3a:bd:81:fa:a5:fe:f2:96:e3:83:e8:f6:b0:
70:d6:ac:a6:fe:c8:42:8b:7a:39:e0:64:8b:a5:ab:
b9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3F:56:05:C5:5C:36:98:9F:0F:2C:66:40:A7:F7:FD:BB:DB:0B:62:F6
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3F5605C55C36989F0F2C6640A7F7FDBBDB0B62F6.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.168.0/22
177.74.148.0/22
177.128.168.0/22
IPv6:
2804:10d4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262376
Signature Algorithm: sha256WithRSAEncryption
a2:fe:de:d0:64:ce:a7:ea:d4:20:ac:6a:8a:ce:68:e6:ad:0f:
c9:6d:5d:84:a5:ac:02:60:8c:75:e4:2e:4d:7b:b2:e5:12:aa:
f0:64:66:e3:6b:41:7f:8f:f0:74:4b:53:f5:36:36:1e:53:33:
f7:2d:a8:5e:a3:5c:1c:33:c7:e1:2c:ff:af:38:36:41:98:db:
aa:0a:3c:e8:fc:aa:fa:09:e2:aa:84:00:20:09:80:60:b0:18:
49:19:49:fd:92:3a:38:e2:03:ac:ae:26:6a:4b:35:9d:83:94:
8e:2c:f3:66:0b:12:4d:f2:95:3d:a2:64:f9:33:f2:a0:1e:3a:
ec:1b:a0:01:64:dc:2a:a8:fd:51:01:4a:6f:a5:d3:78:52:cd:
e5:2c:64:eb:11:22:3d:2a:b2:fe:02:ed:37:64:70:6a:16:1e:
cf:9a:c5:46:8c:27:da:d5:22:be:b8:1c:2f:48:9f:c7:e8:58:
5e:71:da:a4:95:e5:2e:86:76:ca:47:53:d0:b5:cd:53:55:f2:
ec:12:1b:89:ad:9a:45:be:16:4e:6f:54:3c:fd:f9:14:64:da:
b0:86:33:6e:46:3c:fd:39:07:45:4c:a3:b2:e6:2f:e0:33:77:
17:f8:45:fe:4e:cf:82:e5:f1:b1:0c:22:3c:08:09:a6:05:ba:
39:4f:07:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org