Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/42E7B8402497209B0548BF0E377CC2B4F498FD99.cer
File: 42E7B8402497209B0548BF0E377CC2B4F498FD99.cer (raw, json)
Hash identifier: 4sHhiFl3Hu9AabSaFDlbbsjaNF08nxPKePzuLCAvv8E=
Subject key identifier: 42:E7:B8:40:24:97:20:9B:05:48:BF:0E:37:7C:C2:B4:F4:98:FD:99
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 2B4C11B0E5AEB2C421756D0B6E0796316F53C209
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/0/42E7B8402497209B0548BF0E377CC2B4F498FD99.mft
caRepository: rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sun 28 Jan 2024 19:22:56 +0000
Certificate not after: Sun 26 Jan 2025 19:27:56 +0000
Subordinate resources: AS: 262427
IP: 138.99.48.0/22
IP: 143.202.28.0/22
IP: 168.228.172.0/22
IP: 177.39.144.0 -- 177.39.155.255
IP: 177.71.24.0/21
IP: 2804:448::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:4c:11:b0:e5:ae:b2:c4:21:75:6d:0b:6e:07:96:31:6f:53:c2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Jan 28 19:22:56 2024 GMT
Not After : Jan 26 19:27:56 2025 GMT
Subject: CN=42E7B8402497209B0548BF0E377CC2B4F498FD99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bc:57:1a:31:b5:f6:d9:ea:ce:8e:d9:8a:72:
df:1d:8d:76:42:77:8f:0b:e4:96:f3:9c:b4:ad:cf:
93:c0:62:2a:26:0b:d7:a9:46:ab:3a:ec:ac:e6:60:
83:7f:78:b9:7c:ba:89:79:81:d5:5a:39:fd:97:eb:
02:42:67:aa:79:c5:eb:37:08:63:cb:02:63:98:c8:
c7:c2:55:c6:f1:64:f9:7b:49:86:7b:3f:0c:24:c1:
27:2a:1f:88:15:1d:07:36:2e:01:bf:d3:cc:60:79:
0b:e4:17:2b:e9:28:67:a0:d4:9e:a6:6b:a4:65:98:
8f:e8:c8:18:b0:2a:67:37:18:a1:0b:cf:ec:e8:c1:
b0:e8:39:b8:18:83:20:e9:e9:cd:7a:48:ad:ad:c3:
01:31:a1:48:1c:8b:95:43:10:e4:01:ff:d3:a8:ac:
96:da:05:0c:08:85:1b:a5:2c:77:28:8b:9b:7c:f8:
35:ac:ca:57:5b:42:d5:78:f7:93:78:fb:89:b1:9b:
cf:6c:c8:d5:18:ea:77:cf:a6:a4:21:90:e0:a7:60:
86:20:a8:44:10:d2:fa:95:3d:af:a4:03:2a:5b:ff:
7e:11:3f:17:44:fc:ec:2a:b3:e2:26:6b:ce:b2:5f:
26:10:10:cb:02:00:6f:a7:49:8d:40:03:da:fa:ca:
27:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
42:E7:B8:40:24:97:20:9B:05:48:BF:0E:37:7C:C2:B4:F4:98:FD:99
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/0/42E7B8402497209B0548BF0E377CC2B4F498FD99.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.48.0/22
143.202.28.0/22
168.228.172.0/22
177.39.144.0-177.39.155.255
177.71.24.0/21
IPv6:
2804:448::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262427
Signature Algorithm: sha256WithRSAEncryption
5d:b1:c4:34:a8:79:d8:4c:9b:b4:9a:3a:e5:7a:1d:f5:85:fe:
86:c8:1f:86:7d:08:cd:37:bf:1d:7d:20:7f:e6:98:e8:02:c6:
4b:ed:45:8c:bf:a7:96:48:26:a7:df:76:ca:b6:56:f2:60:fe:
bd:5c:3c:c9:6b:2f:83:ee:1c:ac:e0:ab:58:81:31:d1:43:f9:
99:c5:92:be:a8:a1:93:3d:2f:5a:f9:0a:98:15:32:4a:82:79:
cd:55:77:b8:b3:81:b0:dc:24:7a:93:e6:b5:b9:5c:5a:f8:34:
de:6d:40:9e:49:47:65:13:b9:d2:c5:9b:50:13:0b:98:75:ad:
91:99:c5:fb:0e:9c:9f:5b:ef:59:20:2c:5b:f5:08:93:e1:d0:
37:d3:61:84:2e:bb:11:82:74:37:fd:59:21:64:2b:7a:39:84:
ce:7b:e2:91:b6:0a:ed:ff:6c:21:7b:54:13:d9:5c:97:cb:0f:
8d:08:1e:a0:6f:b4:f2:e6:23:75:91:f5:3f:b8:fe:a2:d9:d6:
8b:ef:83:b0:c1:08:0a:cc:ad:85:5f:ba:b8:c0:ae:76:0d:32:
91:2b:17:b7:81:2d:7d:ab:30:5d:ce:98:9b:5a:e1:e4:53:12:
f0:0d:88:a3:ce:cd:c5:a7:fe:b0:53:d2:12:e5:e4:12:24:ae:
33:a0:aa:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org