Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/685127D62A24E86E271BBBBFE4E01D67A0F2C1DD.cer
File: 685127D62A24E86E271BBBBFE4E01D67A0F2C1DD.cer (raw, json)
Hash identifier: zL7KFA2JSbWt8nTEzZMdZpLKPg4tRxmrehxOKqUHEEY=
Subject key identifier: 68:51:27:D6:2A:24:E8:6E:27:1B:BB:BF:E4:E0:1D:67:A0:F2:C1:DD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 0BC838E839ED7A82A44ABD90EE7B4F92A087E508
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/685127D62A24E86E271BBBBFE4E01D67A0F2C1DD.mft
caRepository: rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 29 Mar 2024 20:45:08 +0000
Certificate not after: Fri 28 Mar 2025 20:50:08 +0000
Subordinate resources: AS: 28171
IP: 177.84.64.0/21
IP: 177.137.240.0/21
IP: 179.107.128.0/19
IP: 189.84.160.0/19
IP: 2804:d84::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:c8:38:e8:39:ed:7a:82:a4:4a:bd:90:ee:7b:4f:92:a0:87:e5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Mar 29 20:45:08 2024 GMT
Not After : Mar 28 20:50:08 2025 GMT
Subject: CN=685127D62A24E86E271BBBBFE4E01D67A0F2C1DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ae:6d:e0:a0:f3:d6:ad:55:dc:a2:f6:85:02:
78:7c:a9:85:13:3b:42:29:af:7e:70:05:a4:18:a3:
01:90:46:5a:2e:2f:84:19:6d:2a:06:a2:25:99:a6:
bc:2f:2e:96:bf:5e:3b:ab:e4:18:7f:08:03:c8:3f:
a9:ed:1c:49:ee:77:34:ca:3d:d6:56:3e:96:1d:7e:
ab:78:67:ae:a9:9c:ee:1e:0e:01:7b:b7:cd:aa:00:
bd:30:98:7a:08:1b:82:51:c5:e5:5e:2d:cb:01:74:
06:a4:68:35:a4:50:e2:7f:f0:4f:51:8b:d2:21:00:
88:81:1b:6a:98:db:45:ab:35:2c:4e:33:00:7c:0c:
5e:6b:1f:eb:2a:2b:62:41:57:e0:86:81:bd:35:51:
7a:f4:64:e0:1f:dd:99:40:99:01:5f:0f:4c:22:f3:
c0:24:62:eb:c4:e1:2f:28:d1:05:6b:16:7d:2c:34:
c2:94:3d:b1:b8:a7:11:27:f6:89:a7:20:a0:7e:66:
e4:1f:02:5e:c6:5a:0c:ca:a0:8f:f7:76:dd:de:76:
f3:30:cf:92:17:ae:e0:6c:d9:f3:9d:02:e4:1d:69:
ef:8d:4c:35:48:e6:d8:f5:e9:e0:1c:6b:89:9d:97:
b1:ec:0e:6a:1e:9c:f2:44:9d:8c:4f:29:a0:d8:d0:
ab:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
68:51:27:D6:2A:24:E8:6E:27:1B:BB:BF:E4:E0:1D:67:A0:F2:C1:DD
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/685127D62A24E86E271BBBBFE4E01D67A0F2C1DD.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.84.64.0/21
177.137.240.0/21
179.107.128.0/19
189.84.160.0/19
IPv6:
2804:d84::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28171
Signature Algorithm: sha256WithRSAEncryption
3c:25:23:ac:f2:34:31:47:af:3b:97:51:bf:34:9d:a8:4d:97:
d8:5c:8f:7d:40:6a:eb:c7:ee:24:ae:3a:d7:70:fb:0b:d2:4b:
a4:ab:32:c7:02:c3:7a:7f:92:a0:00:c5:a6:5a:40:f7:11:aa:
04:a7:87:00:30:47:47:2d:22:b0:9d:13:a1:4c:37:1e:e6:52:
a3:aa:ae:54:05:4f:48:b1:b1:13:d9:8c:46:88:0e:26:e5:4d:
60:5e:53:46:0d:61:4d:46:e6:d3:8e:63:9c:cc:7e:8e:d9:9b:
f9:d5:c6:cd:fe:fe:61:10:65:0b:ce:00:77:76:1b:ba:8a:fb:
27:39:15:e5:d8:14:7c:9b:95:09:7c:33:3c:51:89:8c:a6:cf:
86:9a:62:78:b4:ba:f3:30:bd:55:f7:a6:4a:b8:fb:b4:19:bf:
4b:88:ac:95:6b:69:0c:29:80:b0:79:bf:0e:0e:bc:0d:04:69:
15:1f:59:c7:c7:82:4e:81:3b:08:8d:04:cc:d9:1e:5f:e5:fc:
57:ad:42:65:a3:eb:2b:4d:c9:98:0f:93:8b:b2:b7:89:78:70:
66:d7:15:30:55:95:05:7e:44:40:69:81:09:fc:25:16:97:d3:
c0:61:4f:4e:b0:4e:39:7c:0c:59:d5:80:16:af:42:d6:c5:12:
7d:ee:3d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org