Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/41FB4D498A5F809C2A7531D26B5715142440352C.cer
File: 41FB4D498A5F809C2A7531D26B5715142440352C.cer (raw, json)
Hash identifier: 47rvsQdAUVfDWfofkN8PyW7Vcqq1HWbmibaP8ql0anw=
Subject key identifier: 41:FB:4D:49:8A:5F:80:9C:2A:75:31:D2:6B:57:15:14:24:40:35:2C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 341C8D01B511767614ACF8566CFC3DAB461C6E4C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/EieYjvoPvoZbmgyson6AzTKSxPYwEfaPN7aYjPTctcV8/0/41FB4D498A5F809C2A7531D26B5715142440352C.mft
caRepository: rsync://rpki-repo.registro.br/repo/EieYjvoPvoZbmgyson6AzTKSxPYwEfaPN7aYjPTctcV8/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 17 Jan 2024 17:57:22 +0000
Certificate not after: Wed 15 Jan 2025 18:02:22 +0000
Subordinate resources: AS: 61857
IP: 131.0.64.0/22
IP: 170.233.20.0/22
IP: 2804:1a60::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:1c:8d:01:b5:11:76:76:14:ac:f8:56:6c:fc:3d:ab:46:1c:6e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Jan 17 17:57:22 2024 GMT
Not After : Jan 15 18:02:22 2025 GMT
Subject: CN=41FB4D498A5F809C2A7531D26B5715142440352C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:ba:da:71:06:c1:b0:ad:ef:75:f3:77:85:
2b:96:36:09:16:85:cd:85:ac:7c:de:1a:b1:4f:14:
f5:3d:5a:89:e9:c8:b0:84:a0:07:96:d9:36:ae:81:
d6:82:bc:98:13:46:44:12:05:f9:a1:de:70:43:c2:
da:1f:e5:b6:b6:e4:d5:e9:a0:d5:3d:a0:19:42:94:
e3:a8:66:3f:b2:a8:ac:44:13:c0:0b:99:36:44:5f:
05:92:18:42:c2:db:2f:0d:d3:eb:bd:08:f0:e3:bf:
d3:58:b1:a2:81:af:97:f8:c7:46:77:f0:dc:88:ab:
17:c8:f9:93:26:a2:be:34:90:75:3d:d4:53:ef:7a:
f8:e3:f9:0c:5a:64:c5:ad:56:37:40:17:db:ab:54:
6d:6a:bb:95:f6:c7:55:67:65:21:1d:92:c6:03:91:
8e:29:04:05:10:5d:ba:cb:52:b0:03:75:a4:b4:b1:
3e:f0:d8:8a:48:11:8d:c1:91:5f:44:cb:27:ce:b1:
80:c9:d4:d7:95:dc:e0:b0:e3:6c:6f:bd:b1:17:f6:
db:87:77:3e:42:45:6e:dd:f8:27:11:93:83:3b:5b:
3d:c4:14:ac:71:94:82:0c:ed:33:17:ea:85:41:cc:
f6:25:d2:cd:0e:47:4e:9d:e0:05:42:68:32:9f:71:
b8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
41:FB:4D:49:8A:5F:80:9C:2A:75:31:D2:6B:57:15:14:24:40:35:2C
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/EieYjvoPvoZbmgyson6AzTKSxPYwEfaPN7aYjPTctcV8/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EieYjvoPvoZbmgyson6AzTKSxPYwEfaPN7aYjPTctcV8/0/41FB4D498A5F809C2A7531D26B5715142440352C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.64.0/22
170.233.20.0/22
IPv6:
2804:1a60::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61857
Signature Algorithm: sha256WithRSAEncryption
2f:9d:dc:49:29:6f:69:82:93:3e:f1:eb:1c:ff:97:db:8f:8f:
58:f4:6b:69:12:1d:3d:83:4d:7b:59:4f:7c:37:af:1c:56:c8:
18:13:92:c0:48:da:65:5f:dd:4d:f9:8c:a6:b9:55:b4:fe:e9:
43:3b:98:d9:4d:67:87:1d:6f:be:6c:6a:37:50:3b:19:da:a7:
64:dc:e1:55:bb:a6:65:2e:f4:8b:c2:d4:21:95:56:49:72:52:
08:3e:8a:58:d9:4b:b5:e2:33:37:c6:14:c4:65:59:ca:b2:4c:
a2:05:20:b7:30:d6:6b:19:31:6e:91:1e:25:55:d1:6b:04:06:
64:90:9f:e4:f7:3a:86:37:1a:b3:d1:c8:5e:89:aa:34:2a:d5:
19:8a:95:0e:3c:22:45:69:74:81:e8:90:a6:ae:14:2a:c5:61:
5e:b2:15:49:5b:a8:39:da:cc:3d:df:a2:5f:9b:3e:48:68:8b:
87:17:79:16:f0:ce:69:da:fa:e6:3f:f7:b7:87:dc:1d:41:b6:
59:34:55:1d:4f:b0:6a:8e:77:a0:c0:f8:61:2a:ae:18:e0:1b:
cb:02:f0:e8:ec:68:10:e8:67:ff:61:6d:15:6c:49:28:3a:4b:
a8:a3:f9:88:90:c8:3a:d6:29:78:b6:6f:a5:55:88:c1:77:3d:
f7:35:05:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org