Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F.cer
File: 59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F.cer (raw, json)
Hash identifier: L+JfHUIigLU5qGdllvfBFT/XBQnZZIW08nf+GkrJc6c=
Subject key identifier: 59:E5:F3:A6:A1:FA:A3:AC:B5:0B:1D:AD:FB:8E:EA:6C:6B:32:ED:8F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 7169069F1118D6C19596340A85730F109E42BE84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F.mft
caRepository: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 28 Feb 2024 19:09:19 +0000
Certificate not after: Wed 26 Feb 2025 19:14:19 +0000
Subordinate resources: AS: 53062
IP: 45.7.128.0/22
IP: 168.90.168.0/22
IP: 170.150.236.0/22
IP: 177.36.176.0/20
IP: 177.75.160.0/20
IP: 177.155.128.0/20
IP: 186.211.96.0/20
IP: 187.85.144.0/20
IP: 2804:3b0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:69:06:9f:11:18:d6:c1:95:96:34:0a:85:73:0f:10:9e:42:be:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Feb 28 19:09:19 2024 GMT
Not After : Feb 26 19:14:19 2025 GMT
Subject: CN=59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:e0:e0:45:5e:e7:8d:46:29:5e:c3:83:59:
f6:5b:ea:e5:1e:a5:a3:16:2f:a8:de:cd:96:7b:b4:
bc:ba:e0:00:1d:de:ff:19:57:86:c1:f7:f0:bc:41:
1c:1f:b7:c2:fd:72:c7:95:b5:2a:9f:26:35:31:29:
d5:c7:7b:7b:ae:88:e0:fb:de:ca:f1:27:50:92:59:
d9:a9:b8:e0:a6:49:f6:f6:46:ac:a9:dd:2d:17:ad:
aa:53:2b:75:3d:45:8f:f5:08:63:c4:e3:d1:e8:21:
fa:e4:c7:22:64:10:60:b4:19:05:2c:e7:42:8d:b7:
35:df:ab:94:bc:61:c1:37:53:5f:24:38:f8:63:21:
8e:8b:43:d1:25:fd:0a:ee:ff:97:50:da:97:3a:ff:
a9:18:d8:74:8f:9e:19:8b:38:41:6e:e6:3a:7d:85:
35:07:f9:76:a2:34:06:d6:4d:0e:7f:f0:b3:46:d4:
a0:90:ff:44:8e:4b:37:12:88:21:5a:06:d9:24:53:
e3:1d:b9:b8:4b:08:34:b7:af:d4:88:d4:66:38:d4:
4e:51:89:99:9a:0d:70:e7:50:b8:e0:d3:d8:35:f6:
de:fa:6f:a6:78:3a:2b:23:db:46:9b:6f:46:11:6f:
1b:23:ac:9a:ed:3c:11:ec:8b:07:96:28:70:e5:05:
dd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
59:E5:F3:A6:A1:FA:A3:AC:B5:0B:1D:AD:FB:8E:EA:6C:6B:32:ED:8F
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.128.0/22
168.90.168.0/22
170.150.236.0/22
177.36.176.0/20
177.75.160.0/20
177.155.128.0/20
186.211.96.0/20
187.85.144.0/20
IPv6:
2804:3b0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
53062
Signature Algorithm: sha256WithRSAEncryption
a8:c9:0a:8b:40:7c:d7:56:f4:d7:8e:a9:1d:26:72:13:95:88:
10:5c:50:9b:a5:51:7c:02:01:68:8a:7b:79:86:bc:10:87:33:
a0:d0:d3:ad:f2:ec:ae:1c:dd:f8:70:ba:41:59:63:e1:73:e5:
cd:73:02:06:77:9f:df:4c:7a:14:d7:fc:bb:bb:01:72:4a:d3:
27:ae:6f:91:ed:08:a7:8f:dc:e4:10:59:94:68:ba:d9:72:fe:
e8:37:94:ce:17:1a:9f:77:99:82:6f:6f:ea:a0:bb:b1:c6:97:
82:4d:bc:6c:a4:44:70:2d:83:40:4d:fb:f8:0d:5f:d1:43:71:
61:3e:68:af:23:99:37:11:17:c7:90:a8:ac:d6:6e:47:8d:2e:
91:87:f1:5a:2b:2f:72:86:f6:c3:81:65:3d:08:2b:21:9f:7d:
62:b8:fd:0a:ce:84:cf:f6:33:8a:e3:ad:8b:05:da:42:bf:fb:
df:46:94:0c:c8:58:b8:a5:d8:48:80:18:30:e3:10:4a:4b:c3:
6d:6c:2d:34:c8:9a:60:25:ea:f5:cb:65:08:13:6e:29:ca:b5:
6f:55:44:4b:55:bb:b9:a8:47:8b:bf:90:d0:23:88:26:6a:3f:
a1:5b:4e:27:e2:c3:ec:fc:a8:40:e8:4d:58:48:4a:00:d0:bb:
7d:01:30:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org