Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.cer
File: 68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.cer (raw, json)
Hash identifier: +cnK+OVVLVC4nX8X+Ub94WvPidapDiFtXdae29E1S0E=
Subject key identifier: 68:D6:EC:8C:A8:D8:81:9E:8B:EE:63:50:91:68:61:CA:C9:A5:39:F7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 642C07E93310DAC76BCB9AA5C455DC5D0FC20A97
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.mft
caRepository: rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 22 Nov 2023 22:05:08 +0000
Certificate not after: Wed 20 Nov 2024 22:10:08 +0000
Subordinate resources: AS: 52604
IP: 138.97.16.0/22
IP: 168.194.244.0/22
IP: 177.124.120.0/21
IP: 201.148.108.0/22
IP: 2804:d28::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:2c:07:e9:33:10:da:c7:6b:cb:9a:a5:c4:55:dc:5d:0f:c2:0a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Nov 22 22:05:08 2023 GMT
Not After : Nov 20 22:10:08 2024 GMT
Subject: CN=68D6EC8CA8D8819E8BEE6350916861CAC9A539F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1c:28:03:f1:30:29:ba:38:ab:88:c9:1c:ed:
fe:7a:7f:be:b6:ee:92:58:7a:04:69:d4:c9:6f:bd:
c3:b1:c3:81:5b:d6:09:95:45:d1:50:1a:f0:6a:f8:
db:87:16:cf:6a:eb:a7:8b:44:14:a4:b1:85:f2:aa:
b5:28:b7:59:91:40:15:a9:c5:2b:83:51:3b:09:06:
15:d2:d2:19:bc:ca:c5:0f:b8:7b:5e:49:19:af:cb:
ee:aa:74:bb:f2:67:2f:b0:61:8b:19:fb:22:32:e5:
96:57:27:34:e7:94:98:49:bd:fb:ae:89:6a:ad:4c:
c6:9a:6f:4a:a1:5f:3c:dd:4b:75:9d:04:66:d0:f4:
b5:fa:e2:f7:78:7d:84:fb:14:93:00:dc:4f:6a:be:
21:7a:d8:84:0a:27:5f:dc:dd:86:ab:fd:f9:81:1e:
d7:18:63:ef:0c:02:53:e1:a5:63:7d:1d:df:e1:08:
66:37:b0:36:76:24:a0:e6:11:14:cb:83:dc:71:4a:
2a:3f:2d:7a:bd:63:cc:b0:94:91:7b:06:2b:e4:9b:
6c:d6:cc:75:8c:21:3a:96:00:33:27:e4:50:aa:ae:
4c:ba:ff:9b:f2:f2:d5:aa:bd:99:8d:a9:96:47:23:
10:8a:56:4a:c9:f6:48:d4:a7:08:00:2d:8f:7b:09:
5a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
68:D6:EC:8C:A8:D8:81:9E:8B:EE:63:50:91:68:61:CA:C9:A5:39:F7
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.16.0/22
168.194.244.0/22
177.124.120.0/21
201.148.108.0/22
IPv6:
2804:d28::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52604
Signature Algorithm: sha256WithRSAEncryption
1a:a6:75:5d:fa:6a:61:e0:ea:fa:73:8f:56:28:90:cf:4b:16:
87:71:48:96:f9:4f:8a:d5:c3:20:6c:89:4d:17:30:88:93:85:
65:3a:28:f3:a7:cf:5d:bc:cb:e3:8c:51:a6:29:63:45:4a:90:
10:e7:a3:e1:16:87:86:d2:64:01:b1:10:77:0b:fa:fa:11:9b:
0c:f2:ec:44:6c:03:7c:7e:02:94:0c:7c:18:3d:98:58:80:59:
c2:a3:a6:a5:3f:9d:a6:a1:c1:b9:f5:88:5b:25:02:1d:46:6a:
c7:97:53:0f:ac:47:e3:3d:5b:22:f5:98:af:a2:af:93:a9:f4:
8f:50:5a:33:1d:7e:f5:80:51:ed:24:60:16:c2:1a:08:bf:88:
39:7f:7b:fe:18:eb:3a:7a:6b:bc:52:3a:fd:3a:b2:33:43:e6:
f3:51:a3:ab:cd:18:c8:92:88:b6:b1:ae:3a:d7:42:fc:a6:17:
6e:51:b2:4b:fc:50:9a:de:fa:dc:c0:8e:65:10:c9:6a:c3:f3:
6e:11:41:e9:bd:27:3c:fc:a4:dd:b2:35:dd:2c:3c:62:fd:f5:
f2:c2:6e:16:ff:77:1f:e2:5f:c6:e2:2f:70:cd:43:29:4b:4e:
e8:6a:9f:49:f9:b1:f3:65:34:99:6d:a0:cb:ab:02:ec:bb:a1:
5e:ba:18:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org