Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7A2DCE8AD3C9E8A31D53D532C968E987DBBC70F3.cer
File: 7A2DCE8AD3C9E8A31D53D532C968E987DBBC70F3.cer (raw, json)
Hash identifier: gcIOPNCgxmpTgQqs7oFUBjTJ8o55fV/0mWttrfY/teA=
Subject key identifier: 7A:2D:CE:8A:D3:C9:E8:A3:1D:53:D5:32:C9:68:E9:87:DB:BC:70:F3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 3D9F0C30DB085F730C6301DAB4A3D0F808374945
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/0/7A2DCE8AD3C9E8A31D53D532C968E987DBBC70F3.mft
caRepository: rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 05 Dec 2023 19:55:18 +0000
Certificate not after: Tue 03 Dec 2024 20:00:18 +0000
Subordinate resources: AS: 268824
IP: 45.172.200.0/22
IP: 179.107.52.0/22
IP: 2804:5b30::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:9f:0c:30:db:08:5f:73:0c:63:01:da:b4:a3:d0:f8:08:37:49:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Dec 5 19:55:18 2023 GMT
Not After : Dec 3 20:00:18 2024 GMT
Subject: CN=7A2DCE8AD3C9E8A31D53D532C968E987DBBC70F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:93:58:b2:43:e5:3a:22:96:69:0e:88:b8:21:
a9:bb:18:c6:ba:17:cc:4b:39:86:fa:31:b8:be:f1:
ac:72:92:27:13:e6:6d:72:9b:ec:66:3a:36:a0:29:
8f:29:6d:1c:03:42:84:b2:5f:5f:fe:f5:72:dc:d5:
30:32:a4:76:26:a9:f7:3b:05:37:2f:95:96:0a:a2:
fd:a2:a8:a3:ab:82:42:34:09:97:88:50:77:42:33:
ff:6e:bb:7f:5e:c2:cb:ba:aa:29:76:3a:9b:6d:a7:
69:f1:a0:e0:fc:86:e0:39:d8:ec:17:41:fb:91:19:
a4:e8:02:c4:9d:ea:fc:90:31:76:57:ec:97:e2:80:
6a:57:e6:a0:08:87:59:2a:46:94:02:a3:91:fc:2b:
b6:e2:55:f1:1e:79:44:b9:3c:01:a0:6f:cf:04:db:
eb:4a:24:f3:d2:2c:2b:3a:d9:9c:4a:d1:cf:b1:4c:
db:cf:e8:c0:84:a2:95:8f:99:bf:7e:4b:1c:38:9d:
55:ee:90:f2:e8:38:cf:37:12:df:2d:99:8b:35:6d:
fc:06:7e:c4:5e:5b:f9:22:6b:b9:d5:a2:f9:04:16:
6d:9a:fe:84:47:4e:23:69:2d:77:f0:e7:8a:8e:7a:
61:a0:0a:cc:62:1d:a4:9d:04:54:16:a9:7e:92:34:
2f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
7A:2D:CE:8A:D3:C9:E8:A3:1D:53:D5:32:C9:68:E9:87:DB:BC:70:F3
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/0/7A2DCE8AD3C9E8A31D53D532C968E987DBBC70F3.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.200.0/22
179.107.52.0/22
IPv6:
2804:5b30::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268824
Signature Algorithm: sha256WithRSAEncryption
3f:7b:8d:46:c0:04:85:d6:9f:d1:aa:90:6b:ec:67:7f:3f:1e:
23:4e:a5:d8:d8:fd:f8:28:85:c6:60:02:ee:10:54:4a:5c:c0:
e2:77:18:20:eb:1c:eb:3e:f7:e2:20:a4:5b:d7:c6:45:42:f9:
b2:67:bd:22:21:05:d4:a2:0c:e9:6d:15:c2:63:0e:87:9a:4d:
e1:3d:5d:af:07:a7:07:1e:5d:bc:3e:ca:26:48:6c:6d:db:b8:
d7:dd:b7:8d:d5:9b:30:65:a0:b6:d8:0e:2d:27:19:37:8e:7e:
8a:2f:e9:ea:50:30:7d:63:66:c0:5b:d3:ed:cf:61:5d:bd:9d:
b3:cf:1c:bd:02:61:83:13:5f:49:2e:eb:4c:56:46:9c:01:09:
89:87:c3:a3:08:d0:ff:27:27:9c:49:0f:a5:b9:30:20:05:2d:
93:d1:ab:54:10:fc:51:fb:de:4d:64:0c:f3:d6:fb:f1:91:38:
c3:45:79:67:3a:cb:24:62:e1:2e:d4:2d:8f:1a:56:f7:4c:db:
ea:0f:5a:ce:33:33:07:3a:1e:1e:82:d5:35:6b:b7:bc:5b:97:
25:1f:58:d8:4f:a9:71:0c:9f:2b:49:39:35:bd:76:1f:ac:9c:
f2:dc:69:36:e6:13:94:27:74:e6:c4:23:6b:b9:9d:fc:ff:30:
dc:f7:80:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org