Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/40F7219B2EA11F86580542EBE162507BE414E3D9.cer
File: 40F7219B2EA11F86580542EBE162507BE414E3D9.cer (raw, json)
Hash identifier: 3LX4hm4rDqiw2Vl0dpRLCurPwj3L+wCJjV79xjh6YN8=
Subject key identifier: 40:F7:21:9B:2E:A1:1F:86:58:05:42:EB:E1:62:50:7B:E4:14:E3:D9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 3BA3512F43EF6B5FF31ABC87A9F76D8F3BBDEC31
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/40F7219B2EA11F86580542EBE162507BE414E3D9.mft
caRepository: rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 15 Jun 2023 00:35:11 +0000
Certificate not after: Thu 13 Jun 2024 00:40:11 +0000
Subordinate resources: AS: 263573
IP: 170.231.240.0/22
IP: 177.184.216.0/22
IP: 2804:f40::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:a3:51:2f:43:ef:6b:5f:f3:1a:bc:87:a9:f7:6d:8f:3b:bd:ec:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Jun 15 00:35:11 2023 GMT
Not After : Jun 13 00:40:11 2024 GMT
Subject: CN=40F7219B2EA11F86580542EBE162507BE414E3D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:56:e8:15:9e:5e:a3:cc:92:47:ca:ea:a5:58:
dc:15:69:6d:cf:5f:64:7e:b7:6d:28:3b:f4:ce:e9:
a8:36:11:ca:8d:dc:1c:48:9c:f1:12:7d:ff:04:d2:
d0:fa:d8:43:20:2f:d2:e3:3c:1d:61:34:ff:43:3f:
09:db:bf:b0:ff:28:97:d4:2b:94:d8:ff:2c:26:7b:
ba:a1:da:e8:d3:d7:24:83:b7:6b:73:f0:06:f3:b7:
80:86:ef:51:7f:5f:dc:42:61:4f:39:f2:0f:4c:97:
fc:e6:60:67:07:e6:53:35:d0:bc:5e:9d:80:dc:28:
d9:b5:f1:5b:8d:12:ef:0f:91:f3:eb:4a:cd:c0:df:
5f:2a:86:f1:a0:0a:e0:c1:1c:f2:d5:e5:58:90:db:
93:57:f3:ef:fb:70:29:d6:cc:b8:9a:1f:eb:6b:a2:
1a:39:f1:4b:5a:7e:18:c7:04:82:73:fa:64:6e:da:
8a:9d:ae:5a:03:56:f1:5e:d5:81:d5:d2:c2:50:34:
61:8b:74:5c:6b:2a:26:99:9e:15:45:e1:b2:fb:dd:
a6:4e:92:4e:88:f0:ad:d0:9c:a3:bb:17:22:18:a4:
80:d3:d5:2e:ff:32:e6:92:25:9c:b4:d0:76:34:7d:
a7:76:51:21:22:ff:f0:e5:57:49:9a:40:87:7b:0c:
bc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
40:F7:21:9B:2E:A1:1F:86:58:05:42:EB:E1:62:50:7B:E4:14:E3:D9
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/40F7219B2EA11F86580542EBE162507BE414E3D9.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.240.0/22
177.184.216.0/22
IPv6:
2804:f40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263573
Signature Algorithm: sha256WithRSAEncryption
29:27:48:68:35:86:ea:cc:17:3f:03:86:3b:5e:0d:f7:c4:c1:
9a:ec:88:b9:dc:38:c3:8f:7f:73:f8:30:fc:51:3c:ec:46:34:
8e:ec:42:15:02:c0:2f:8e:53:28:77:66:dd:a3:71:2f:31:fb:
65:68:f0:23:39:50:21:b1:26:e6:d8:fd:0b:e5:5d:ec:4e:7f:
d5:b0:ea:ee:2b:01:b7:19:a3:c2:53:36:40:87:61:1b:67:32:
87:bf:a6:2a:89:2d:a2:3d:65:2d:d7:14:30:fc:84:2d:5d:9b:
7e:3a:60:eb:fd:12:14:a2:27:ba:b5:a3:50:1a:7d:80:1b:67:
86:6e:cf:6d:98:48:ea:34:e1:d3:f4:3c:4e:e7:71:8e:91:fd:
a8:d7:2f:aa:06:72:6b:c0:e4:53:2a:c9:1e:72:e9:2d:4e:47:
d7:64:94:1d:36:7e:d0:7c:f4:9e:c6:86:ee:ae:10:c8:99:b6:
fd:a6:63:05:32:35:54:af:47:0d:16:29:0a:21:37:32:48:8c:
f1:74:b1:f3:87:2c:58:9c:6a:ae:d0:31:b8:8c:82:7f:03:13:
9b:d9:7c:76:e4:5c:8a:1a:22:ef:7f:c7:ab:e4:b7:23:6c:e8:
9d:a4:ef:06:39:2e:d0:d4:72:68:03:f5:6b:6c:58:3a:21:2e:
e1:48:2b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org