Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/43B52BBF7D7632BF752F6A2C806E3880D2F900E9.cer
File: 43B52BBF7D7632BF752F6A2C806E3880D2F900E9.cer (raw, json)
Hash identifier: RYLMlvobH/gW6BvsJyUOwcdyrJUV6EzBl9bgLJHahPA=
Subject key identifier: 43:B5:2B:BF:7D:76:32:BF:75:2F:6A:2C:80:6E:38:80:D2:F9:00:E9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 1F96545CABE279061BF77876E155C9AEB68F49D9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/43B52BBF7D7632BF752F6A2C806E3880D2F900E9.mft
caRepository: rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 14 Dec 2023 16:55:08 +0000
Certificate not after: Thu 12 Dec 2024 17:00:08 +0000
Subordinate resources: AS: 10881
IP: 200.17.96.0/20
IP: 200.17.192.0/18
IP: 200.19.64.0/20
IP: 200.134.0.0/16
IP: 200.236.0.0/19
IP: 200.238.128.0/18
IP: 2801:82::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:96:54:5c:ab:e2:79:06:1b:f7:78:76:e1:55:c9:ae:b6:8f:49:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Dec 14 16:55:08 2023 GMT
Not After : Dec 12 17:00:08 2024 GMT
Subject: CN=43B52BBF7D7632BF752F6A2C806E3880D2F900E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7b:d1:7f:e9:a2:2d:e6:90:b3:6b:39:cb:2a:
68:11:0c:42:eb:d2:78:a7:87:a1:22:16:3e:f3:d2:
ef:51:7d:62:6d:de:8c:da:4b:2a:fd:7d:c4:57:f7:
83:27:d9:0c:a1:3a:77:60:82:72:49:e5:70:65:25:
d2:78:a3:6c:14:31:d7:a3:96:b6:be:42:ef:f5:78:
c2:89:22:47:53:0e:90:30:7e:ce:c0:45:bc:94:98:
d9:2a:38:2c:61:ee:2b:73:84:e3:69:19:97:03:4f:
35:16:9a:09:14:80:30:c0:ca:d7:41:e1:0f:01:16:
a2:6b:3b:f1:f4:42:71:31:c9:31:93:66:14:72:3a:
20:93:de:9d:d6:f9:60:04:cc:c5:19:48:82:bf:5a:
c3:a6:0b:7d:2b:39:cc:45:41:51:27:cf:21:b4:a4:
e6:c2:bf:89:e6:2e:9d:ff:4b:7f:28:60:9a:69:3d:
a9:41:30:04:38:ab:34:ed:8f:13:c9:5a:91:79:c9:
16:d1:f5:6d:cf:db:71:57:39:d7:15:81:22:40:7f:
78:9f:21:76:a4:fe:0c:20:64:fa:89:b9:b3:40:47:
cf:fd:b2:5f:61:61:d2:19:4c:ed:44:59:5a:96:f9:
0e:c7:7c:da:4b:6d:79:6d:0e:5b:fb:7e:79:c2:df:
12:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
43:B5:2B:BF:7D:76:32:BF:75:2F:6A:2C:80:6E:38:80:D2:F9:00:E9
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/43B52BBF7D7632BF752F6A2C806E3880D2F900E9.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.17.96.0/20
200.17.192.0/18
200.19.64.0/20
200.134.0.0/16
200.236.0.0/19
200.238.128.0/18
IPv6:
2801:82::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10881
Signature Algorithm: sha256WithRSAEncryption
7b:70:5d:79:5a:67:a6:cd:78:f4:50:02:3c:bd:24:99:56:90:
e1:27:c5:2f:fa:d0:39:61:4c:1c:13:91:eb:b9:2a:13:ac:a7:
95:ae:7f:84:2e:d0:22:38:44:dc:8b:61:34:a1:c7:d6:e4:9b:
dd:f9:68:38:14:9c:6b:1a:06:eb:59:cb:fa:8e:08:b4:60:d5:
de:72:5f:fd:09:18:b0:cd:b8:87:88:3c:6a:ec:e9:6d:99:2c:
2b:e3:f7:62:c6:b6:1f:52:3b:c7:c7:20:81:62:07:3b:cb:52:
50:48:1a:70:7a:8c:ba:74:e1:e6:39:78:19:3e:79:bc:9f:53:
0d:11:4e:05:90:d8:ff:88:bf:ed:9d:b6:8f:06:ae:e5:6e:a0:
bc:a9:00:05:0c:f0:fd:eb:53:98:03:0c:59:32:ad:b1:78:7d:
40:4f:5e:62:c6:0c:0f:a2:a0:6f:e2:aa:77:af:d6:b4:13:24:
ee:f6:b4:f4:ee:4b:d9:d8:d2:02:9e:15:66:f9:cf:33:23:3d:
85:c0:01:c1:dc:e7:55:3a:7c:ae:7e:9f:9a:9d:41:85:72:9a:
c0:2e:91:af:4b:3f:89:b3:0c:2a:c1:b4:bb:9f:fb:13:39:9f:
c7:2e:bd:b0:3b:02:67:c4:ad:4b:2b:41:be:cc:54:23:48:bc:
a6:35:c4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org