Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer
File: 5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer (raw, json)
Hash identifier: K+N37r5kSsZAMyam6NunMLmPEw1b+I/sSJ3Ugog+2/k=
Subject key identifier: 5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 22F53A1630A456C137AD3718E48768C25584637F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.mft
caRepository: rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 15 Jan 2024 14:49:15 +0000
Certificate not after: Mon 13 Jan 2025 14:54:15 +0000
Subordinate resources: AS: 264001
IP: 143.0.200.0/22
IP: 170.0.24.0/22
IP: 170.246.188.0/22
IP: 2804:2948::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:f5:3a:16:30:a4:56:c1:37:ad:37:18:e4:87:68:c2:55:84:63:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Jan 15 14:49:15 2024 GMT
Not After : Jan 13 14:54:15 2025 GMT
Subject: CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:74:b0:f6:d3:19:8f:f7:2d:dc:cc:b2:4c:
47:a7:7c:67:75:11:d3:1c:22:19:ec:34:ad:ca:24:
93:18:38:4d:26:1f:05:4b:59:7a:2b:17:35:05:b1:
26:f1:af:8e:f1:85:01:ac:39:87:e1:25:7c:14:f6:
a2:8c:be:a6:17:23:73:b7:36:3c:28:05:9b:fe:45:
47:b4:4d:05:51:0c:05:b9:8a:4d:05:17:3d:d0:1d:
34:e9:e6:76:fb:c6:4f:42:1c:0f:c8:16:4a:36:2b:
69:90:57:f2:95:06:f3:a1:b4:c4:99:81:cb:46:a1:
42:02:01:6f:31:ea:eb:7f:52:08:f0:5d:8e:f8:8a:
57:83:1e:87:51:f0:ff:0a:5d:b2:ac:b5:ed:b9:08:
6d:71:6b:32:27:f0:68:03:2b:8e:a8:16:e9:35:77:
ba:dc:fc:a0:e2:a7:67:c8:50:f0:90:c5:e2:47:e2:
a8:7c:96:9c:aa:2a:36:48:e6:9d:7a:47:76:3b:4d:
ed:33:24:6c:22:a2:98:01:d5:76:03:a0:46:5d:35:
2f:fb:e6:5e:90:f3:11:20:3c:cc:c1:97:26:fb:9d:
2f:ff:9e:02:59:0c:fb:f8:8a:77:b4:e0:e4:5d:69:
cb:da:2f:55:b9:bb:c1:98:dd:21:85:58:17:1f:fb:
28:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.200.0/22
170.0.24.0/22
170.246.188.0/22
IPv6:
2804:2948::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264001
Signature Algorithm: sha256WithRSAEncryption
38:33:38:97:2e:75:6e:73:68:80:20:19:48:ba:de:f3:7a:c1:
0c:c7:9e:94:79:9f:b0:e5:c1:2f:b6:7f:b8:db:fb:92:e6:7a:
51:f4:8e:7e:21:12:49:bc:b2:03:58:c2:27:50:6b:65:89:a3:
62:58:90:46:65:2a:f4:68:9c:24:08:84:8f:f2:96:23:d5:6b:
88:e3:ad:98:c5:a9:3d:b1:93:c6:bf:bc:86:b0:e7:26:74:e0:
4c:45:63:0a:18:1a:84:09:93:54:27:cc:1f:4d:d5:c3:a8:1e:
20:db:b0:0f:27:78:c2:83:ab:80:cf:25:14:34:ef:4d:79:56:
4f:01:c3:49:1e:d5:3d:6c:ef:53:99:29:ec:de:69:a2:d3:9a:
07:cd:ff:aa:b6:9b:17:76:70:05:63:b2:81:c5:f4:76:51:a1:
fe:5d:e4:ce:05:b5:7f:5a:62:a6:b9:0d:04:bf:8f:6e:d8:e4:
63:6b:4c:3f:fe:ac:42:c3:c5:b7:c2:77:28:d4:d0:06:1d:e2:
c5:59:55:df:65:d7:53:cd:6d:da:63:95:91:1b:d9:2a:87:f0:
ae:b6:ee:0c:a2:71:f5:7a:ab:6e:92:dc:0d:1a:a1:82:01:c6:
77:15:d8:f7:72:0f:6a:da:d2:c7:e8:31:1c:c2:c8:01:c4:bd:
7e:6a:9b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:38 2024 by rpki-client on console-ams.rpki-client.org