Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07.cer
File: 70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07.cer (raw, json)
Hash identifier: XRDGi1HSse/VTcjAKwHIA82XwacfroJ75CYuFIjS3Z0=
Subject key identifier: 70:DA:72:42:E1:48:C2:B1:BB:EE:8A:A2:22:CA:F3:FE:B3:BC:DA:07
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 5E9829FCEF4B0AD4CCEFC67CED6316B5B8943141
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07.mft
caRepository: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 31 Jan 2024 15:43:01 +0000
Certificate not after: Wed 29 Jan 2025 15:48:01 +0000
Subordinate resources: AS: 11432
IP: 200.155.128.0/18
IP: 200.170.192.0/18
IP: 200.194.248.0/21
IP: 200.201.128.0/19
IP: 2804:138::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:98:29:fc:ef:4b:0a:d4:cc:ef:c6:7c:ed:63:16:b5:b8:94:31:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Jan 31 15:43:01 2024 GMT
Not After : Jan 29 15:48:01 2025 GMT
Subject: CN=70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:3a:03:a9:0a:be:e5:24:d4:a3:58:a6:1a:
b2:53:04:8d:99:11:d0:14:9c:c4:54:6c:dd:02:c6:
48:29:ac:47:e7:42:4a:6a:d7:06:50:0a:e7:bf:a8:
25:e8:b7:b8:1e:79:53:6f:4c:f9:93:2c:9e:cc:ba:
94:ee:61:e9:0b:77:0d:35:df:ef:89:ce:a0:17:8a:
a6:f3:0c:2f:1b:0c:63:85:6d:02:fc:14:db:d2:8c:
fb:cc:a1:e5:b4:dd:f2:ea:a2:95:6f:a4:98:58:e8:
08:18:8e:83:1b:8b:ae:f6:4a:22:2a:d2:27:c1:cb:
40:c3:1d:51:ae:9a:be:dc:54:16:57:70:7f:7d:1b:
f7:1a:43:5b:98:3d:38:cd:77:aa:2d:12:ef:f1:31:
5a:ce:45:7a:64:9b:91:05:b6:31:b4:50:fd:b5:ac:
54:69:c0:e0:4a:df:ed:dd:03:f2:d4:0b:e1:d2:4a:
45:12:d4:5b:93:eb:19:31:22:80:e6:5e:00:d5:53:
e7:06:fc:93:6a:91:c4:fe:aa:98:cd:b2:d7:30:f6:
29:dd:41:50:e3:45:a9:3e:42:9c:63:f6:b6:f3:83:
53:f8:ac:50:88:fe:6c:c2:87:48:07:25:e5:e9:05:
ce:a2:7f:d5:63:f5:ed:d0:c1:63:3e:52:ad:5f:e0:
5f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
70:DA:72:42:E1:48:C2:B1:BB:EE:8A:A2:22:CA:F3:FE:B3:BC:DA:07
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.155.128.0/18
200.170.192.0/18
200.194.248.0/21
200.201.128.0/19
IPv6:
2804:138::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11432
Signature Algorithm: sha256WithRSAEncryption
88:98:75:9e:1e:f8:c0:5a:26:18:db:5c:9d:de:97:24:57:80:
b5:c0:d8:5c:59:64:2f:d7:64:98:dc:eb:8d:93:f0:f3:c9:80:
f8:9f:e6:16:90:58:3d:6d:37:1b:61:f6:4a:a2:07:7d:7b:06:
6d:89:4e:da:e8:a0:b5:61:f6:bc:96:f5:18:38:f2:24:69:31:
c4:a6:4c:19:a7:56:9a:ac:2a:ef:f7:45:c5:de:3c:ac:9c:93:
e0:13:b0:88:06:04:08:7a:52:22:54:92:a2:9a:e3:ba:3a:13:
a0:dc:3d:65:70:4b:7b:fb:66:6a:63:d5:2f:16:34:03:03:3e:
05:40:0b:01:97:5d:53:c2:c2:e1:b1:0d:79:05:80:bd:39:40:
eb:73:e2:21:20:16:fd:26:20:92:8b:70:c0:60:da:d9:41:e0:
a6:b6:7f:7c:12:c0:50:4f:69:06:10:27:b2:20:ad:36:8f:79:
dc:90:95:c8:04:bc:33:9e:72:d7:5a:52:d1:1b:4c:ee:77:0a:
e1:52:14:64:9d:fb:4f:47:db:3c:0e:45:5a:a8:39:92:e0:e6:
33:18:e5:ca:0a:ac:eb:33:a8:91:34:cf:06:e9:e6:0f:fd:5f:
1e:0b:92:2f:c7:cd:58:e4:1a:e7:85:24:fe:04:cf:4e:2b:42:
b6:f2:71:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org