Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229.cer
File: 7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229.cer (raw, json)
Hash identifier: kquWmWo1GTsF6xZWFRfX6Na+qUuBgd5nPA2MbrxW9uc=
Subject key identifier: 7A:7B:FD:21:EA:E2:D0:E0:F9:46:4F:A2:63:AC:6E:47:AC:D7:C2:29
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 546F1F1195EDB6A00217975E2B75AAC38BB0FAB2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229.mft
caRepository: rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 22 Mar 2024 19:00:13 +0000
Certificate not after: Fri 21 Mar 2025 19:05:13 +0000
Subordinate resources: AS: 264404
IP: 131.161.228.0/22
IP: 138.255.16.0/22
IP: 170.82.140.0/22
IP: 2804:1df8::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:6f:1f:11:95:ed:b6:a0:02:17:97:5e:2b:75:aa:c3:8b:b0:fa:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Mar 22 19:00:13 2024 GMT
Not After : Mar 21 19:05:13 2025 GMT
Subject: CN=7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:84:1c:d6:f1:69:09:62:3a:34:d4:e2:8b:
b2:6e:0b:8d:fa:f6:48:d9:97:78:00:35:d8:16:94:
73:f1:f3:97:fb:c9:4e:e7:a6:9a:0e:94:51:cf:81:
22:a0:fb:c1:32:56:ce:12:72:8d:ce:be:eb:ab:96:
50:4b:d6:f6:88:54:ba:d7:a7:89:01:27:9d:00:98:
26:49:12:2e:5c:e0:d1:44:38:91:da:79:1b:72:5a:
7e:6d:76:c7:81:bf:65:0c:77:ff:a5:33:c5:b1:99:
d4:4a:44:fe:ef:8b:db:0c:f1:2b:6d:e4:ba:97:3e:
d9:c2:21:20:71:07:9d:b2:95:6c:2a:ca:79:d6:13:
f4:93:f4:f4:42:e2:64:e6:66:e1:c7:72:09:1b:5a:
96:d9:93:19:c6:8f:a3:e8:84:6b:12:b2:1c:5f:bf:
39:19:3d:2a:40:c0:14:7f:f1:06:11:40:dd:85:89:
5a:d1:b7:45:19:ea:50:e3:71:8d:f8:f1:b5:da:e2:
cd:10:de:53:99:71:9e:a2:ab:10:22:bc:14:b3:df:
69:e5:0f:98:5d:74:35:c6:3e:5b:de:65:f7:ef:11:
a3:51:d3:8c:9f:5b:d4:13:5e:69:1a:b2:ca:32:72:
b2:bb:38:46:2a:85:fc:5d:56:76:b9:ca:9c:e3:ab:
cb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
7A:7B:FD:21:EA:E2:D0:E0:F9:46:4F:A2:63:AC:6E:47:AC:D7:C2:29
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.228.0/22
138.255.16.0/22
170.82.140.0/22
IPv6:
2804:1df8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264404
Signature Algorithm: sha256WithRSAEncryption
79:c7:70:af:13:c7:a1:16:52:4c:8f:9e:b9:3c:b3:bd:9c:0f:
10:ca:60:1f:18:7e:73:c9:47:4f:20:22:3c:96:5c:95:58:16:
1f:c9:17:12:18:92:f0:f7:b3:f1:a1:f2:d4:37:80:5a:a1:43:
ea:0c:24:32:89:90:e1:df:51:ad:d5:45:98:b8:96:77:e3:9c:
0f:ee:8f:aa:a6:23:11:17:5b:da:93:f3:6f:bd:d6:1d:9c:c7:
59:71:9f:05:24:86:55:51:24:87:d5:22:88:3c:54:48:46:d9:
00:c1:39:e9:1d:25:db:bf:59:64:e0:b5:18:5f:50:c2:fc:de:
c8:24:2b:6b:2e:d7:85:8d:b4:47:91:64:36:c4:88:f8:ef:b0:
0a:1f:5a:47:5c:20:b3:7b:18:9b:95:cb:ac:08:ef:3a:b5:46:
f9:59:7e:ed:3d:11:aa:ab:9b:64:65:22:d1:54:c0:15:fb:df:
04:cf:eb:7d:89:42:e8:a9:1b:e1:ef:27:5c:f6:d5:22:61:e9:
bd:b4:d2:b0:e4:96:2c:c4:72:51:bf:f0:a6:26:21:de:47:43:
10:a5:09:cb:a4:ca:51:85:29:6a:d1:f2:45:94:be:1c:67:2e:
cc:00:c2:b6:52:85:6a:0f:6f:4a:ce:42:df:be:a3:62:31:0c:
c3:4a:a2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org