Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/71D7A8219CD2E4A732B4D5C8EDF0F163A5072EDB.cer
File: 71D7A8219CD2E4A732B4D5C8EDF0F163A5072EDB.cer (raw, json)
Hash identifier: T5xqyJtHtGR+qHzB8fSqaVEDrzyTFGFHRCbyArmDUTg=
Subject key identifier: 71:D7:A8:21:9C:D2:E4:A7:32:B4:D5:C8:ED:F0:F1:63:A5:07:2E:DB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 6039E8B1290DF701CBF8DEFE39EBA1C1568D4F46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/71D7A8219CD2E4A732B4D5C8EDF0F163A5072EDB.mft
caRepository: rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 12:28:53 +0000
Certificate not after: Wed 02 Apr 2025 12:33:53 +0000
Subordinate resources: AS: 264565
IP: 45.163.24.0/22
IP: 138.36.44.0/22
IP: 138.255.48.0/22
IP: 2804:21a0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:39:e8:b1:29:0d:f7:01:cb:f8:de:fe:39:eb:a1:c1:56:8d:4f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Apr 3 12:28:53 2024 GMT
Not After : Apr 2 12:33:53 2025 GMT
Subject: CN=71D7A8219CD2E4A732B4D5C8EDF0F163A5072EDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:62:f3:bf:e6:ca:c4:70:4e:10:2e:93:84:
68:18:19:f6:73:06:24:a1:bd:5c:6c:97:3c:19:a6:
cb:65:35:05:02:40:c1:03:9b:fd:ca:5e:bb:0e:68:
76:81:f9:9e:ee:7b:2f:ab:3b:77:47:78:f4:50:8c:
e1:29:d8:38:fd:e1:63:48:99:03:db:73:92:38:5e:
84:8e:81:36:83:47:fe:e8:17:50:3d:c5:9b:b3:34:
37:dd:19:ed:eb:fb:a6:80:35:b4:53:35:84:4e:56:
cb:06:9e:06:ae:e3:bc:f8:26:dc:cc:eb:75:a5:d0:
cd:d1:a6:1c:10:12:93:2b:4e:e0:ba:71:c9:65:3f:
b6:80:c5:43:27:cc:7a:f9:e6:8d:23:3d:cf:b8:3a:
1f:bf:93:08:5c:68:e5:2c:32:30:08:f3:36:b0:55:
4b:d5:14:79:c7:ed:aa:cd:67:b7:57:e6:35:42:23:
cf:3c:0c:31:b5:52:6b:24:f6:bb:a2:59:ca:6e:90:
3e:5b:ea:85:25:52:97:a3:6e:ba:50:5a:d8:8d:ca:
be:cd:f9:cb:9c:5a:4d:19:fc:fa:eb:56:00:bb:d1:
e2:2c:5d:d6:5e:b9:f5:e8:3b:6d:d3:1f:73:68:04:
32:7c:b4:eb:29:a9:9f:c7:66:4f:26:2a:c8:40:3c:
6e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
71:D7:A8:21:9C:D2:E4:A7:32:B4:D5:C8:ED:F0:F1:63:A5:07:2E:DB
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/71D7A8219CD2E4A732B4D5C8EDF0F163A5072EDB.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.163.24.0/22
138.36.44.0/22
138.255.48.0/22
IPv6:
2804:21a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264565
Signature Algorithm: sha256WithRSAEncryption
78:13:af:5e:ab:d2:fb:e0:18:a7:ea:18:23:69:fd:37:5c:87:
d0:00:ea:fd:7c:9c:9c:95:50:38:d7:1e:fa:0e:d4:a0:20:de:
a1:07:3a:73:75:c0:0d:7c:64:33:cd:00:b6:17:aa:16:79:c5:
e8:de:0a:c5:29:d2:f3:c7:06:fd:44:5c:f4:11:e0:82:ba:bd:
b6:62:23:c4:c0:03:81:dd:65:15:dd:87:db:f9:51:06:86:1d:
c9:3e:ab:31:a8:ba:94:1b:0f:7f:b7:cc:b8:28:59:c0:fe:56:
39:eb:f0:43:f0:1e:ef:06:70:57:be:a4:ad:ac:b8:26:ee:fb:
59:10:b0:bc:6c:f0:d4:bd:8a:9d:d7:5a:61:c0:c9:3d:da:e7:
fa:1d:0f:ad:a6:6e:9f:9e:d3:a7:cb:f3:ff:1d:7b:5e:72:32:
1c:cf:a5:cb:7e:e8:b6:5d:63:74:55:67:e2:f9:43:63:86:34:
ba:53:8c:80:9e:d2:97:f8:08:c8:d9:5d:f6:77:03:55:6f:4a:
b5:66:aa:3e:cf:6e:83:b9:f9:da:c8:9e:37:9e:0e:58:28:68:
65:d0:ca:7b:bd:6e:0b:b7:f4:84:2d:a3:74:b2:c4:e2:11:f9:
4f:69:87:35:ab:d1:29:d3:63:18:c2:d1:94:af:42:71:13:86:
6b:18:85:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org