Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/68B9EA42B9F12DB7BAA4778C2AA8D3F4C0752DD1.cer
File: 68B9EA42B9F12DB7BAA4778C2AA8D3F4C0752DD1.cer (raw, json)
Hash identifier: 42KjnnF6PLMFtwahVtghe89WzAYnSmrAcwauj/o3r2A=
Subject key identifier: 68:B9:EA:42:B9:F1:2D:B7:BA:A4:77:8C:2A:A8:D3:F4:C0:75:2D:D1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 33D15DDB5D7A6C587AD1F3B921973B001D401AB9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/68B9EA42B9F12DB7BAA4778C2AA8D3F4C0752DD1.mft
caRepository: rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 05 Feb 2024 13:44:54 +0000
Certificate not after: Mon 03 Feb 2025 13:49:54 +0000
Subordinate resources: AS: 263634
IP: 170.81.48.0/22
IP: 179.125.112.0/21
IP: 2804:1068::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:d1:5d:db:5d:7a:6c:58:7a:d1:f3:b9:21:97:3b:00:1d:40:1a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Feb 5 13:44:54 2024 GMT
Not After : Feb 3 13:49:54 2025 GMT
Subject: CN=68B9EA42B9F12DB7BAA4778C2AA8D3F4C0752DD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c5:f6:77:81:9a:f7:33:c7:79:74:69:84:fb:
a1:ef:05:6d:ff:7c:7f:e3:f0:87:7c:cd:a6:2e:d9:
14:63:61:5f:e0:bb:62:d5:05:fa:3a:24:dc:2b:11:
b8:b3:2f:36:0e:53:7a:40:d8:ff:dc:7f:d8:16:46:
e3:73:18:14:e1:38:ef:5c:f4:a9:fa:83:6d:a1:cc:
74:fa:14:4c:37:56:d7:61:10:bf:56:c4:ed:48:47:
a7:ed:93:62:67:fc:ff:a8:c2:85:f5:6b:72:3e:04:
26:a5:f2:3e:d6:29:7b:53:a4:26:e3:a9:41:10:f5:
88:57:f9:2a:c9:aa:b2:14:b8:b6:dc:bf:4e:ba:c1:
6a:b7:9c:80:33:0c:cc:08:a4:33:ea:89:5b:a5:29:
3e:3e:9a:61:d7:be:bd:ae:6c:8c:1a:fc:65:2b:13:
9c:0d:91:11:21:89:34:08:bc:f2:42:f1:57:1d:5d:
ce:ca:23:87:04:07:ea:dd:30:d2:6b:d4:a2:9c:75:
a7:d4:d3:81:9e:cc:4b:ab:63:13:a8:f3:23:ff:e0:
86:68:fa:17:3b:9d:96:e8:b1:66:a8:ab:84:74:ff:
d6:b3:01:86:e2:5c:4b:2f:0c:1b:91:8a:9f:9f:56:
47:5c:97:39:46:4a:ef:00:ff:8a:ad:d8:bc:d6:3a:
de:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
68:B9:EA:42:B9:F1:2D:B7:BA:A4:77:8C:2A:A8:D3:F4:C0:75:2D:D1
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/68B9EA42B9F12DB7BAA4778C2AA8D3F4C0752DD1.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.48.0/22
179.125.112.0/21
IPv6:
2804:1068::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263634
Signature Algorithm: sha256WithRSAEncryption
27:71:17:d7:f0:82:a5:47:f4:2f:35:98:e2:2b:98:e0:43:a0:
84:87:e8:3c:6a:fe:fc:34:06:4b:ec:58:87:3e:29:15:ea:bb:
3e:d5:f0:99:eb:f2:f1:f4:a2:8f:41:c4:ab:7e:10:ac:db:31:
44:63:11:a0:cf:b9:63:8b:76:c1:85:f0:75:6b:c9:3b:f3:2e:
f6:8d:d9:8b:54:ee:03:b0:7a:af:55:60:2e:27:75:12:9d:9c:
a1:26:a3:4c:d7:1a:4f:92:32:57:c4:2e:e8:a6:a6:ce:26:bd:
e0:9e:34:62:0f:12:09:fd:18:fb:79:b5:3f:01:4b:c5:76:10:
70:86:32:4e:5c:fd:18:64:3e:07:07:eb:1e:b5:b6:c0:c6:31:
fc:db:da:c9:3e:1b:d1:d0:39:e4:75:e2:70:bb:cc:c8:99:5c:
ff:c7:5a:16:7e:f5:08:ad:1a:89:7c:bb:2f:7a:60:b9:99:30:
d5:1e:f1:29:5d:07:57:2d:9e:c5:53:58:8e:a1:60:33:83:4f:
53:ad:f4:b7:63:e7:d4:08:3d:19:99:c5:f9:21:db:4b:63:f4:
52:a7:34:c8:13:3a:1e:d6:70:3f:bf:af:b9:2c:ac:88:d1:73:
b1:ba:45:36:5c:67:d4:3d:76:52:1a:47:a5:d0:17:c0:0a:47:
37:3d:f7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org