Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7F039E23B966EF2F75A4A331F68A67A0FC530F10.cer
File: 7F039E23B966EF2F75A4A331F68A67A0FC530F10.cer (raw, json)
Hash identifier: 2d+xS7K9f/leI2nikB+Kblr0Rco5BsrN8cCrOE7bvas=
Subject key identifier: 7F:03:9E:23:B9:66:EF:2F:75:A4:A3:31:F6:8A:67:A0:FC:53:0F:10
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 499F86CA5F55B88385CEDEFD649F2BC3EC7CFB43
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/7F039E23B966EF2F75A4A331F68A67A0FC530F10.mft
caRepository: rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sun 24 Mar 2024 02:03:16 +0000
Certificate not after: Sun 23 Mar 2025 02:08:16 +0000
Subordinate resources: AS: 61574 -- 61576
AS: 263842 -- 263844
IP: 138.185.228.0/22
IP: 2804:269c::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:9f:86:ca:5f:55:b8:83:85:ce:de:fd:64:9f:2b:c3:ec:7c:fb:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Mar 24 02:03:16 2024 GMT
Not After : Mar 23 02:08:16 2025 GMT
Subject: CN=7F039E23B966EF2F75A4A331F68A67A0FC530F10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:a2:bd:8b:ba:42:b9:c2:82:e1:66:d1:24:
48:3f:00:54:b2:f2:45:2e:0a:c5:99:82:72:bc:4c:
a4:9f:33:bc:fe:4f:01:84:cc:f4:09:07:a0:e9:0d:
73:fe:1f:9a:34:d2:1a:1d:29:06:a6:fd:0c:b0:3a:
2c:35:3e:72:5b:14:89:29:41:52:02:02:76:ae:6b:
b8:e3:79:a1:97:8c:79:b7:8f:75:78:ac:39:ce:3d:
8b:ba:e3:74:24:fb:22:bb:37:e3:f0:64:27:14:eb:
44:2a:59:ab:0f:bf:68:5e:81:3c:58:21:9f:45:30:
69:5e:fb:1e:9e:3b:6f:df:95:92:ce:dd:17:72:1f:
7c:32:74:b5:61:bb:a8:01:04:e3:4a:ca:04:06:c0:
f8:ae:36:11:10:cd:62:07:24:f5:a8:6a:95:d9:44:
22:e0:9a:de:d2:93:e6:3d:d2:f1:ed:be:f9:f4:d7:
94:a4:a1:1e:3f:7f:5a:45:68:33:f2:c4:0c:25:8a:
2b:cb:e2:73:37:62:ac:83:aa:a4:0d:f1:04:ce:83:
06:c0:3e:68:c7:f6:6c:4d:0e:fb:04:02:34:40:f7:
fd:21:1c:64:c3:c9:49:a2:3e:68:0a:0e:c2:ff:c6:
22:dc:36:41:d0:d1:e4:36:5c:18:39:12:70:c8:34:
fb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
7F:03:9E:23:B9:66:EF:2F:75:A4:A3:31:F6:8A:67:A0:FC:53:0F:10
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/7F039E23B966EF2F75A4A331F68A67A0FC530F10.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.228.0/22
IPv6:
2804:269c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61574-61576
263842-263844
Signature Algorithm: sha256WithRSAEncryption
84:76:04:38:8f:94:bb:d2:9b:78:26:cd:e9:43:32:7a:23:62:
3e:4e:12:9d:cb:29:94:77:af:96:8a:95:e1:b1:89:be:b7:de:
f9:91:d2:ed:f4:1c:2d:4e:c7:b4:11:fb:d1:46:66:c9:82:d3:
7d:e8:6e:81:7e:c6:c4:22:3c:aa:56:86:58:f4:e7:97:a3:6a:
74:67:b1:c7:ad:fe:e5:22:0d:e2:9a:ad:0c:f1:c4:37:ac:b9:
a4:e6:0b:92:96:dd:a1:03:b1:cf:ec:b5:d7:66:21:90:6c:20:
41:cf:f2:9f:b4:bc:fd:70:19:3d:e2:9a:70:8f:79:43:a8:d7:
58:49:fb:64:dc:6c:e3:b6:67:3b:83:29:70:03:cd:92:45:62:
4f:f6:f0:fa:b0:dd:be:cf:dd:f8:3b:08:9d:b2:60:ec:4a:b5:
b0:74:ef:28:6a:39:94:3c:e8:b3:04:de:a9:65:4f:0d:8d:0c:
61:d2:68:97:cc:73:88:09:f3:74:6f:79:df:95:52:a4:56:89:
8c:c7:3d:ed:04:47:ac:c8:d7:ec:c5:72:85:9f:54:f6:33:5c:
41:76:87:d5:d7:c1:00:82:05:ae:fd:35:82:de:b7:88:30:20:
d9:47:9a:3f:e8:cb:4b:a3:51:d7:4b:82:bd:76:81:d6:0d:d8:
12:30:ad:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org