Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/72A237AA4892DB69B44ACAC0C6F1C2A4A8D7706C.cer
File: 72A237AA4892DB69B44ACAC0C6F1C2A4A8D7706C.cer (raw, json)
Hash identifier: viYAPWezcro+pdPv86cr0cMJ3nv7/uCseClBxCnIBLc=
Subject key identifier: 72:A2:37:AA:48:92:DB:69:B4:4A:CA:C0:C6:F1:C2:A4:A8:D7:70:6C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 2C3393C9A33F73CACDB86993FC576D93B4A06ECB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/72A237AA4892DB69B44ACAC0C6F1C2A4A8D7706C.mft
caRepository: rsync://rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 13 Jan 2023 02:45:13 +0000
Certificate not after: Fri 12 Jan 2024 02:50:13 +0000
Subordinate resources: AS: 52866
IP: 131.100.128.0/22
IP: 138.94.112.0/22
IP: 170.81.244.0/22
IP: 177.125.24.0/22
IP: 186.233.220.0/22
IP: 2804:bdc::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:33:93:c9:a3:3f:73:ca:cd:b8:69:93:fc:57:6d:93:b4:a0:6e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Jan 13 02:45:13 2023 GMT
Not After : Jan 12 02:50:13 2024 GMT
Subject: CN=72A237AA4892DB69B44ACAC0C6F1C2A4A8D7706C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ef:82:fb:80:f3:0f:1d:03:25:cd:fb:96:67:
45:43:fa:5f:6b:8d:71:d0:cf:e8:7c:7a:b8:35:81:
7b:60:80:ad:07:b5:5f:22:56:41:6f:b8:d7:c9:27:
45:47:b1:6c:1c:ad:61:ff:4b:3e:45:d8:8f:0b:2a:
4b:bd:de:b7:d7:67:81:ef:34:31:dc:8d:70:f1:1c:
29:43:47:e4:19:80:c0:db:fd:03:ca:ca:ad:c6:e8:
8c:bc:cc:75:ef:15:a5:6f:a2:0c:86:33:72:09:c2:
8e:d8:7c:38:47:6d:ae:da:b3:8e:ad:ac:aa:dc:46:
2d:9c:be:4b:70:2c:2c:5d:41:45:1a:89:29:9f:81:
44:46:9a:31:8c:f3:c8:8b:b8:5d:30:71:09:b8:3a:
63:74:d6:9a:09:e7:ae:f3:4d:fe:ef:cc:98:db:10:
8c:a3:33:24:c5:46:eb:3a:2a:dc:0b:cd:d5:f5:aa:
ae:ab:01:c8:6e:2f:a2:3f:2b:10:34:59:74:aa:37:
80:5f:4f:bd:35:bd:96:4f:e3:15:70:1b:37:5e:66:
64:14:d2:76:70:e6:35:83:35:0f:d3:a0:a6:bc:31:
5d:ef:12:df:d1:eb:f0:39:b2:bd:41:e6:66:d8:a9:
f6:3d:26:d9:fc:9a:63:d2:48:51:ba:16:31:e9:73:
54:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
72:A2:37:AA:48:92:DB:69:B4:4A:CA:C0:C6:F1:C2:A4:A8:D7:70:6C
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H45i8fNoT2G9yqVJseod1v8NoLvET7gAwkL3Hyg8q182/0/72A237AA4892DB69B44ACAC0C6F1C2A4A8D7706C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.128.0/22
138.94.112.0/22
170.81.244.0/22
177.125.24.0/22
186.233.220.0/22
IPv6:
2804:bdc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52866
Signature Algorithm: sha256WithRSAEncryption
34:e3:62:9b:9e:89:97:66:84:52:97:4b:1c:7b:e4:a3:4f:d5:
67:a1:1d:99:65:51:95:2d:b4:aa:93:0e:e3:0a:26:06:36:97:
8d:b8:60:39:a2:ef:16:02:77:ce:73:5f:8a:4e:81:a8:0c:82:
29:c1:7a:fe:08:a9:3d:bc:29:91:ef:1e:e2:16:c6:52:69:18:
a5:09:6e:44:17:06:a9:56:77:78:a0:72:90:95:dc:73:e9:b3:
b8:40:78:a0:29:2e:75:7d:60:48:5c:3c:85:4d:c5:be:fa:12:
96:51:6a:5a:35:f0:d7:e7:72:c2:e2:50:19:71:a0:3c:a8:9b:
94:09:9e:0d:49:29:5a:82:d2:9a:b2:50:bc:f9:09:58:87:84:
1d:d0:ba:35:49:f8:13:23:ff:b9:73:36:92:26:bc:cb:63:0f:
1b:7d:24:6f:39:43:8e:3f:c3:bd:d8:3c:e8:f8:33:72:15:8a:
05:c5:b7:29:b7:e9:b7:28:fd:93:2d:ca:b3:51:99:95:db:6e:
9a:49:89:45:ac:16:f9:39:6b:94:29:87:02:a5:c2:dd:c0:31:
bb:55:27:88:dd:2d:dc:d7:db:c9:49:a2:96:db:84:42:8e:47:
6a:b5:62:c9:c7:16:81:00:40:32:8d:aa:9c:59:da:74:12:4e:
2d:8e:72:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org