Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/670A20A98738BBE9772713B95005BD85F6B31348.cer
File: 670A20A98738BBE9772713B95005BD85F6B31348.cer (raw, json)
Hash identifier: rP/T1zbWrG6J5DfmQrsVO1S56OPMljXfbQha1deKm3M=
Subject key identifier: 67:0A:20:A9:87:38:BB:E9:77:27:13:B9:50:05:BD:85:F6:B3:13:48
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 38912874617A59991D90B2F71DA3FBFFAD3ED370
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/670A20A98738BBE9772713B95005BD85F6B31348.mft
caRepository: rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Jan 2024 12:05:19 +0000
Certificate not after: Wed 01 Jan 2025 12:10:19 +0000
Subordinate resources: AS: 264022
IP: 143.0.220.0/22
IP: 170.245.172.0/22
IP: 2804:2990::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:91:28:74:61:7a:59:99:1d:90:b2:f7:1d:a3:fb:ff:ad:3e:d3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Jan 3 12:05:19 2024 GMT
Not After : Jan 1 12:10:19 2025 GMT
Subject: CN=670A20A98738BBE9772713B95005BD85F6B31348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c7:d4:2f:81:39:b7:e2:95:48:36:2e:18:bd:
9f:3b:bb:47:fb:c1:e6:32:a0:d2:35:9f:ab:9e:05:
33:75:21:02:1a:c5:20:d4:1f:4e:12:05:59:8b:c3:
45:1d:84:59:3e:b1:47:ed:d6:db:b7:81:fb:ed:af:
a6:67:d2:4b:91:9b:f0:0a:b8:42:2d:eb:77:92:b0:
6d:6a:86:f5:22:1e:8c:72:e5:20:94:f4:3d:4e:c6:
2e:6e:62:00:78:ee:6a:8d:2d:42:7c:d6:54:92:8f:
23:9c:3a:58:6c:25:a8:4a:2c:9d:f8:d9:b7:71:71:
38:07:68:c3:70:dd:de:7c:d4:7f:db:a2:28:10:f1:
3d:26:e9:7b:4e:f4:72:8b:4b:80:ab:f1:ef:07:6c:
50:46:3c:b0:b9:d2:e8:f6:d4:38:82:b6:71:77:58:
a7:e5:38:2a:13:98:b3:fa:47:b5:36:91:cd:2c:c4:
d6:be:75:e4:96:fb:a2:8a:6d:95:94:e9:4c:aa:3c:
50:60:73:48:94:f1:82:b8:44:7c:43:b1:fd:d4:31:
9d:93:bd:24:81:61:07:25:f9:de:34:ac:8c:61:49:
b1:5a:2d:8e:4d:23:90:07:d6:90:83:ac:2f:6f:55:
0e:f4:c5:8f:8f:85:7d:18:e4:04:f8:3c:58:ca:8b:
0a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
67:0A:20:A9:87:38:BB:E9:77:27:13:B9:50:05:BD:85:F6:B3:13:48
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/670A20A98738BBE9772713B95005BD85F6B31348.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.220.0/22
170.245.172.0/22
IPv6:
2804:2990::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264022
Signature Algorithm: sha256WithRSAEncryption
64:57:af:de:92:86:6d:4a:6c:55:aa:34:65:76:de:1b:2d:1f:
b0:b7:55:07:68:be:72:a7:c5:7a:48:d1:4c:34:ad:ff:46:5a:
b1:92:9f:a4:99:a2:de:a5:97:ce:d6:2c:bc:73:4b:99:08:1c:
e6:b0:10:eb:71:7e:f4:af:a8:b7:f4:89:25:cb:fe:fd:4c:5a:
f9:72:e1:5b:b4:41:fb:99:6a:3a:cd:98:00:3b:07:b4:1a:2f:
14:32:fe:60:02:2d:71:2d:59:3a:c3:f4:1f:e8:93:6a:e3:af:
63:8f:e2:2f:fd:91:72:7f:9a:ee:72:e6:1c:a8:3f:9c:c9:65:
30:db:be:2d:2d:b4:2f:35:c5:ec:ab:51:7b:de:b7:f3:ac:55:
ec:25:27:86:1a:4b:e6:0f:36:ad:fe:3b:0c:8f:28:f1:60:b8:
a7:62:9a:09:56:81:90:55:3b:9f:be:eb:d9:a5:92:8f:0e:95:
5f:9b:6e:db:07:ed:d1:e3:29:9e:e8:33:13:11:cb:32:39:bf:
5e:98:01:ad:50:c9:e8:f7:de:de:9c:be:24:fc:f0:60:f6:02:
22:c0:43:db:6e:73:6d:24:d1:9b:e1:7f:f4:f9:63:e4:7c:e7:
36:1d:f1:6b:d7:9f:87:3e:3c:07:01:62:e9:98:b3:f9:ce:63:
ea:57:b0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org