Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.cer
File: 71C5C4E632B7A76B4E137F2B3E64580950B3A16D.cer (raw, json)
Hash identifier: 9UaQo3VfxCbbsYJcqQ+3ahR09QsRFS5Ak61nlahaZUs=
Subject key identifier: 71:C5:C4:E6:32:B7:A7:6B:4E:13:7F:2B:3E:64:58:09:50:B3:A1:6D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 396D1CADEE432F8066F9403F7F6FF440357CBAA1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.mft
caRepository: rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 16 Oct 2023 20:37:20 +0000
Certificate not after: Mon 14 Oct 2024 20:42:20 +0000
Subordinate resources: AS: 28131
IP: 138.0.192.0/22
IP: 167.249.112.0/22
IP: 170.0.240.0/22
IP: 170.81.176.0/22
IP: 186.208.224.0/20
IP: 2804:170::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:6d:1c:ad:ee:43:2f:80:66:f9:40:3f:7f:6f:f4:40:35:7c:ba:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Oct 16 20:37:20 2023 GMT
Not After : Oct 14 20:42:20 2024 GMT
Subject: CN=71C5C4E632B7A76B4E137F2B3E64580950B3A16D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7a:a3:36:0c:11:48:8a:4d:b2:0e:3a:13:29:
f6:ee:89:05:5c:59:27:df:ee:39:8b:d2:0f:14:c4:
5c:4f:bc:71:19:37:48:de:a6:07:63:e2:9e:d7:c4:
16:29:98:ea:8d:ef:c7:fd:b5:52:b0:99:f0:8d:b9:
ba:72:55:89:d1:38:93:87:68:c8:ff:b2:24:da:76:
83:26:f9:d4:a8:44:0c:0b:8f:a2:56:62:92:8f:62:
02:8d:c3:86:b0:b2:d3:b7:9c:4a:67:3c:44:aa:22:
02:09:ae:97:68:fd:c8:8a:1b:44:9b:08:d5:0a:14:
70:a1:6b:b9:99:77:09:04:7d:ea:43:13:23:b2:a8:
c7:30:14:e1:39:30:28:ad:3e:43:f2:45:80:8b:7f:
e3:da:3c:bc:de:7d:a4:84:34:c2:9a:67:38:4e:98:
41:53:59:e9:3f:75:a4:8c:65:b8:56:29:e4:44:eb:
0c:94:31:2e:5f:59:8c:f8:e1:ed:03:69:40:28:04:
12:c6:ce:51:42:90:28:a9:ee:72:0a:9c:25:89:68:
fa:c9:4a:e8:15:56:89:a9:ae:81:87:39:c7:3e:23:
29:d1:92:2a:31:f3:fe:46:09:f9:cd:32:e1:8a:a9:
80:1f:a4:84:ea:fc:9f:6a:80:11:af:d3:dd:7b:cf:
21:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
71:C5:C4:E6:32:B7:A7:6B:4E:13:7F:2B:3E:64:58:09:50:B3:A1:6D
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.192.0/22
167.249.112.0/22
170.0.240.0/22
170.81.176.0/22
186.208.224.0/20
IPv6:
2804:170::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28131
Signature Algorithm: sha256WithRSAEncryption
26:7c:fd:a1:47:46:31:5d:2c:f9:e2:93:e9:88:a2:ef:10:f0:
90:6c:05:18:4a:e5:7e:5e:c9:5d:f6:26:1f:38:ed:40:72:78:
9e:34:2b:66:90:d0:7b:83:49:54:ea:fc:dd:af:ff:cb:b1:39:
0a:81:71:37:d0:bf:b7:3c:cd:b1:9a:70:f8:96:6b:68:9c:72:
1b:62:0b:b0:15:ac:60:2c:b8:ed:8f:43:49:d4:17:f8:37:fe:
f9:7c:28:1a:b2:1d:4d:85:4e:1f:31:0a:0b:45:0a:1d:b5:3b:
13:76:4f:8c:77:1b:a3:ab:25:c1:25:60:6d:4d:ff:c0:17:db:
e3:1f:f0:67:0f:d6:c1:38:39:97:ac:2c:38:89:98:79:b9:70:
8a:e0:1d:a8:b1:c4:65:1a:a9:02:4d:2e:c8:81:de:3f:ab:7e:
e3:d5:3f:ae:05:fc:06:ca:dc:fe:96:ba:e9:0a:90:78:28:5f:
a6:3b:00:09:e1:b8:ce:c7:ec:e7:6f:0b:cc:c2:e1:57:43:6b:
4c:57:bb:82:26:b0:17:6f:5e:a4:d3:f3:ac:2b:63:23:af:e4:
1f:dd:4f:55:26:27:19:a7:51:d6:3a:73:e3:e2:b9:24:87:9e:
14:03:69:cf:c5:9a:b5:b6:43:89:e2:e8:43:a5:7e:a8:e4:df:
33:d6:25:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org