Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/60E921DA704678B7895C0AE504490F34BD5AB662.cer
File: 60E921DA704678B7895C0AE504490F34BD5AB662.cer (raw, json)
Hash identifier: dcX5k/y/W+kJUmPgbMCL7ncf+ARPRDnhQnwvF3kOh9I=
Subject key identifier: 60:E9:21:DA:70:46:78:B7:89:5C:0A:E5:04:49:0F:34:BD:5A:B6:62
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 3FF5FE4D1D54CA538D4B2BA07A8C3FD6BE8E8943
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/0/60E921DA704678B7895C0AE504490F34BD5AB662.mft
caRepository: rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 27 May 2023 09:59:09 +0000
Certificate not after: Sat 25 May 2024 10:04:09 +0000
Subordinate resources: AS: 263668
IP: 143.137.76.0/22
IP: 170.82.120.0/22
IP: 191.241.56.0/22
IP: 2804:1148::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:f5:fe:4d:1d:54:ca:53:8d:4b:2b:a0:7a:8c:3f:d6:be:8e:89:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: May 27 09:59:09 2023 GMT
Not After : May 25 10:04:09 2024 GMT
Subject: CN=60E921DA704678B7895C0AE504490F34BD5AB662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:74:05:6d:59:98:a4:04:5e:8f:b0:9f:26:
3f:43:99:a0:b0:fc:82:94:2b:73:ed:6a:de:cf:ec:
8c:87:60:6f:44:be:d1:13:5c:7f:f1:56:ec:4a:5f:
91:7c:f5:cd:a7:cb:c0:00:b6:00:4d:45:6a:92:be:
b0:e7:a5:ff:98:06:46:8d:6f:d3:f4:38:7a:f2:68:
f4:60:f4:6f:8d:ce:91:9f:aa:8c:cc:7d:69:5e:16:
f8:2b:9c:e3:cb:a0:e5:18:d5:75:da:b5:e9:36:42:
25:10:b0:1a:28:f5:4b:bb:69:2c:a8:16:76:7f:a8:
82:2c:b2:14:fb:f8:4b:03:76:ec:9c:89:7a:ed:17:
6a:3d:2e:5a:1c:fd:a7:66:57:b6:3e:47:26:7b:5d:
f5:4b:71:a8:50:e3:2a:7c:22:40:16:ec:ca:b8:5b:
3f:52:15:f8:74:2e:d5:3b:d1:d3:b4:04:65:55:63:
98:d3:66:a9:bc:38:68:83:ee:c0:bc:1e:78:9b:32:
86:5f:74:a0:45:59:c7:b8:79:79:e0:72:22:a3:85:
99:bc:72:3f:c1:d4:8c:b6:1d:14:e5:bb:fc:23:db:
6e:c6:2e:b1:c4:99:bd:f3:be:f0:23:cf:5d:ed:61:
c8:0f:3c:e9:82:85:16:4b:a8:79:7c:db:6d:b4:7d:
00:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
60:E9:21:DA:70:46:78:B7:89:5C:0A:E5:04:49:0F:34:BD:5A:B6:62
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/0/60E921DA704678B7895C0AE504490F34BD5AB662.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.137.76.0/22
170.82.120.0/22
191.241.56.0/22
IPv6:
2804:1148::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263668
Signature Algorithm: sha256WithRSAEncryption
2e:75:48:66:43:1d:bd:3f:4e:01:41:52:59:0e:ad:60:d4:b1:
f2:15:1f:f5:6c:60:2f:13:d6:ad:be:f9:69:e1:c5:64:99:07:
48:35:0b:9d:42:22:ff:bb:0b:c5:5e:2c:68:d7:5c:94:ee:c2:
5d:ad:b4:b1:e6:7e:1f:49:cf:a5:eb:de:4d:b8:47:33:02:d1:
04:cb:2b:be:71:6b:3b:c9:ce:ff:49:b7:34:f7:15:6d:2d:be:
0c:e4:9a:ab:84:09:26:72:10:82:3f:4e:dd:08:3f:da:8c:e8:
16:85:aa:bf:16:80:a0:d8:0a:43:57:18:5f:03:ee:80:29:27:
2e:64:c8:94:3e:b5:c6:01:1e:c1:ba:b6:7c:c9:47:3d:5d:30:
a9:f4:21:43:2e:70:b7:b6:79:57:e7:a8:35:75:ce:1f:b7:59:
8c:25:34:06:85:a1:ea:05:8b:0e:c7:34:ee:14:05:ab:22:bf:
b4:e5:e6:61:39:48:7e:78:48:ce:ad:f4:6d:71:12:33:5d:d5:
fb:9b:bb:f8:d4:30:ef:61:05:29:35:1e:7d:8f:de:63:e6:d7:
03:35:32:ae:b9:6a:c1:3f:6e:12:04:9b:f0:b5:b5:26:bc:5c:
6f:53:cf:9a:c6:7b:e7:18:5c:58:a1:c9:d5:92:d1:e6:29:49:
f9:d6:33:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org