Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/439FF6311D69FD8E0CED053845878C844A00FE9F.cer
File: 439FF6311D69FD8E0CED053845878C844A00FE9F.cer (raw, json)
Hash identifier: MXlMI+1N+E5n3XUXM6DGpNcYqzL8cckIvByQT8MIexQ=
Subject key identifier: 43:9F:F6:31:1D:69:FD:8E:0C:ED:05:38:45:87:8C:84:4A:00:FE:9F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 1B41DC6725A5CAED80C4BB4CBAD91C1B47A398F5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/0/439FF6311D69FD8E0CED053845878C844A00FE9F.mft
caRepository: rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/0
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 20 Sep 2023 14:53:51 +0000
Certificate not after: Wed 18 Sep 2024 14:58:51 +0000
Subordinate resources: AS: 271183
IP: 168.90.152.0/22
IP: 191.240.208.0/21
IP: 2804:7784::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:41:dc:67:25:a5:ca:ed:80:c4:bb:4c:ba:d9:1c:1b:47:a3:98:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Sep 20 14:53:51 2023 GMT
Not After : Sep 18 14:58:51 2024 GMT
Subject: CN=439FF6311D69FD8E0CED053845878C844A00FE9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c8:bc:b3:14:22:00:b5:f9:09:49:26:a2:98:
70:d3:10:37:aa:29:27:2a:8d:28:c2:55:be:61:e8:
3c:c4:88:25:06:38:4e:0d:75:ab:a8:78:ff:c8:04:
e7:2d:0f:78:2a:1f:99:f0:90:e1:31:c5:91:59:dc:
51:cc:80:5b:91:a2:82:1e:31:33:99:0c:bd:e8:99:
ca:3d:37:36:64:ba:c6:17:8b:f6:71:2a:15:51:50:
07:f5:ab:52:d4:fa:5a:8b:d0:4c:19:dd:94:9e:30:
b5:c0:44:b3:13:02:92:80:cc:58:9c:04:7b:9c:81:
b1:a7:e7:2b:e0:5d:7f:17:53:40:4a:bc:42:42:c1:
58:25:96:dd:bc:6a:51:e7:de:15:d9:3f:7f:53:3d:
08:b0:2d:ba:b7:d5:bc:05:2e:59:0c:46:06:68:b6:
97:c0:36:4b:53:4d:25:f9:58:4e:d4:56:10:ea:9d:
c7:18:0c:0c:94:18:0b:5f:8a:b3:ee:b6:8f:29:5a:
6c:22:72:b9:3c:4e:af:04:41:91:48:49:ee:b6:2d:
e9:29:cf:12:c3:31:59:48:eb:a1:7e:02:f6:0c:bd:
c0:d4:9b:2e:77:a5:9c:72:cb:a8:ff:40:e9:86:73:
0d:fe:1c:16:14:d0:73:e1:0b:90:08:32:7b:6a:eb:
81:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
43:9F:F6:31:1D:69:FD:8E:0C:ED:05:38:45:87:8C:84:4A:00:FE:9F
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/0/439FF6311D69FD8E0CED053845878C844A00FE9F.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.152.0/22
191.240.208.0/21
IPv6:
2804:7784::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271183
Signature Algorithm: sha256WithRSAEncryption
21:1e:b1:e8:f2:3c:13:3f:ec:ee:51:bb:4a:e3:de:54:19:40:
3c:6e:dc:29:b5:b5:0e:23:5e:db:8b:57:2c:03:f1:ba:28:87:
da:23:12:26:64:96:e8:48:c7:89:76:2f:45:de:2b:66:31:22:
21:aa:fe:ba:e6:e7:23:80:ad:9f:d9:67:b2:4e:72:de:fb:d5:
11:45:07:da:5f:8d:bc:18:cc:5a:e8:30:84:0b:5f:3a:07:92:
01:fd:d3:66:1b:df:05:05:bf:ed:83:68:3d:f5:a3:cb:36:71:
fd:97:61:01:35:a7:9e:ce:e3:76:f1:a7:af:55:b6:17:00:3d:
38:33:bd:5a:d7:06:27:7c:d6:e1:c2:07:d7:b8:8c:2c:03:21:
58:d7:e9:b6:56:6e:8d:38:64:ea:88:ad:a3:ac:c1:55:e4:93:
83:a1:50:c2:af:d0:9c:e7:56:0a:b5:32:4d:13:d6:14:40:3c:
ef:cc:53:fd:44:61:af:9c:0e:89:4e:8d:98:d8:a3:80:98:01:
a8:da:6a:8c:32:cb:f1:f5:75:15:a3:f7:b8:ac:ba:c8:02:64:
a2:b0:9f:3f:f6:ef:cf:25:2e:fb:fb:51:7b:f9:4b:20:7c:29:
15:a1:c1:29:c6:e1:62:85:78:22:51:6b:6c:c9:03:e3:df:62:
e9:1c:be:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:38 2024 by rpki-client on console-ams.rpki-client.org