Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/40209EB56DBE9B90721379291AA6F10A592354FB.cer
File: 40209EB56DBE9B90721379291AA6F10A592354FB.cer (raw, json)
Hash identifier: l8NVZhVv5cIel6oYDKzx26lC+phDIGtt1wL9JISU7k4=
Subject key identifier: 40:20:9E:B5:6D:BE:9B:90:72:13:79:29:1A:A6:F1:0A:59:23:54:FB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 73EE5EC6525FC20F9E3030F10EE47A20074F64BF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/40209EB56DBE9B90721379291AA6F10A592354FB.mft
caRepository: rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 16:26:33 +0000
Certificate not after: Wed 02 Apr 2025 16:31:33 +0000
Subordinate resources: AS: 262417
IP: 168.90.28.0/22
IP: 177.37.64.0/19
IP: 177.129.200.0/22
IP: 179.43.4.0/22
IP: 186.219.56.0/22
IP: 2804:e24::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:ee:5e:c6:52:5f:c2:0f:9e:30:30:f1:0e:e4:7a:20:07:4f:64:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Apr 3 16:26:33 2024 GMT
Not After : Apr 2 16:31:33 2025 GMT
Subject: CN=40209EB56DBE9B90721379291AA6F10A592354FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:48:3f:92:10:48:58:29:f7:24:ed:55:b9:ef:
e6:26:31:b2:f4:de:b6:e4:ef:fc:11:33:79:38:35:
47:cb:4b:78:c8:48:db:68:0b:24:25:bf:10:fa:4d:
55:c5:f4:57:fe:92:8c:2b:7b:2f:5d:59:85:9a:79:
04:ad:e6:0f:37:6e:5c:92:14:33:be:87:f6:f5:5c:
49:a8:8e:3a:35:d6:a6:74:35:3e:ef:2f:f0:0a:0b:
5b:24:79:6f:94:db:28:e1:d0:64:ee:be:b4:67:cd:
4d:b6:42:91:1e:ab:b0:1c:72:e5:c8:e8:ff:ac:5b:
71:b0:0f:6d:a7:ec:74:75:3a:6b:4d:e0:59:68:0a:
9f:f3:8a:32:04:02:f7:40:30:4a:56:14:ab:2a:33:
1d:1a:95:6b:21:cf:5a:da:6a:8b:2a:94:17:62:3b:
51:54:b0:0b:ff:d0:cd:93:b5:ab:64:4c:9e:0b:0c:
14:f7:32:4f:b0:8d:33:a2:39:12:63:07:44:0f:8e:
a9:2e:19:ba:aa:f1:d4:2d:fe:dc:06:20:6b:2d:38:
2d:20:d7:dd:cd:19:ac:54:f1:03:62:af:a4:d1:8b:
65:a0:e9:2c:ed:4b:43:b3:8c:e9:26:0d:f4:20:cd:
0b:1d:d8:ab:f3:d1:e5:c6:63:6d:bc:88:13:ac:a0:
bb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
40:20:9E:B5:6D:BE:9B:90:72:13:79:29:1A:A6:F1:0A:59:23:54:FB
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/40209EB56DBE9B90721379291AA6F10A592354FB.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.28.0/22
177.37.64.0/19
177.129.200.0/22
179.43.4.0/22
186.219.56.0/22
IPv6:
2804:e24::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262417
Signature Algorithm: sha256WithRSAEncryption
44:b2:fb:bc:00:04:4e:38:14:42:75:39:86:c3:1e:91:75:b5:
4b:a9:a6:42:43:a0:50:dd:7a:97:54:96:04:95:01:2f:f0:75:
1e:34:6d:04:90:e7:f4:79:4a:19:5c:29:89:e1:d5:04:5d:11:
4e:a6:2c:a1:67:96:17:50:28:59:46:8a:13:e5:5b:48:d7:ed:
97:5f:84:40:ab:d0:42:67:e3:85:94:a0:1c:5c:64:e1:4c:61:
f1:2c:c6:45:7b:9f:72:60:7f:34:3e:22:95:ab:9e:0b:d7:4f:
6c:80:99:79:14:8d:7c:44:5c:39:45:89:bf:09:dd:b0:f2:6b:
81:00:97:74:5a:92:db:44:13:4a:31:2c:ad:9b:2d:44:72:3e:
27:0d:50:b2:08:84:c8:1f:c5:ae:58:29:19:b8:e6:ad:52:2f:
bf:b2:79:95:ea:99:ff:ab:af:e7:ed:7f:e2:e0:8f:17:04:6f:
d9:0d:78:c8:51:59:7d:d1:14:d1:2b:35:08:fe:99:a9:24:25:
6a:5c:d1:5c:22:7a:f3:72:bc:72:35:e3:c8:eb:a4:09:8e:f1:
a2:7c:5a:63:ff:bc:7d:1a:59:a6:f8:87:b3:24:9f:8a:01:c9:
d0:44:76:64:1f:38:47:2a:02:68:b0:96:b6:d2:3e:80:b6:51:
8a:27:a8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org