Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7FAA1BD04E1DF2F06CFFF3D8DB64D27A3F4B6DF2.cer
File: 7FAA1BD04E1DF2F06CFFF3D8DB64D27A3F4B6DF2.cer (raw, json)
Hash identifier: xARGaODPKEiJ8oDm7GNwwykX3jiNQQ9scayB3LzZa+U=
Subject key identifier: 7F:AA:1B:D0:4E:1D:F2:F0:6C:FF:F3:D8:DB:64:D2:7A:3F:4B:6D:F2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 011364D2B3F78ECB407AC4698C94CB30E52B8911
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/0/7FAA1BD04E1DF2F06CFFF3D8DB64D27A3F4B6DF2.mft
caRepository: rsync://rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 28 Mar 2024 20:59:03 +0000
Certificate not after: Thu 27 Mar 2025 21:04:03 +0000
Subordinate resources: AS: 61709
IP: 131.0.228.0/22
IP: 2804:1b1c::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:13:64:d2:b3:f7:8e:cb:40:7a:c4:69:8c:94:cb:30:e5:2b:89:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Mar 28 20:59:03 2024 GMT
Not After : Mar 27 21:04:03 2025 GMT
Subject: CN=7FAA1BD04E1DF2F06CFFF3D8DB64D27A3F4B6DF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:95:1a:f2:98:be:cf:8f:4f:09:79:72:0b:
1d:ea:20:e2:20:f5:f2:f0:36:55:e1:c4:fc:27:03:
14:20:fd:ea:6b:ef:f3:09:08:38:d6:92:bf:ed:f2:
be:16:6a:20:7a:3d:24:3d:93:73:db:a5:90:7b:0b:
11:d5:c6:a3:4a:a1:f2:c2:ce:af:4a:ac:22:c8:5c:
49:78:a7:b8:87:59:39:80:77:60:c5:83:cb:e8:50:
9b:96:35:3f:da:b7:a5:d1:aa:94:d3:89:7a:0b:19:
3c:01:d6:7b:19:69:dd:97:36:28:98:ff:b3:ea:e8:
6e:84:9a:ff:25:65:dc:62:13:dc:4b:61:87:2b:48:
3c:af:37:17:ff:58:54:52:74:db:ec:0d:62:cd:36:
5f:1e:07:aa:90:87:46:85:69:2c:d9:bb:85:12:d6:
55:f2:0c:6d:d4:1a:c5:cc:64:39:05:08:eb:96:58:
09:cf:35:a2:56:20:1e:7e:0a:a6:f7:7a:08:5b:66:
de:5a:e6:b5:62:42:bc:6d:03:6f:24:98:65:e9:9a:
89:b2:a0:97:bf:22:40:d8:d0:11:1c:23:7d:c0:33:
fc:72:fd:3b:59:a0:54:b7:f7:91:8a:0e:be:8b:84:
f4:88:c1:1e:7f:2c:55:c0:ff:b2:28:35:f0:e1:60:
86:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
7F:AA:1B:D0:4E:1D:F2:F0:6C:FF:F3:D8:DB:64:D2:7A:3F:4B:6D:F2
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/0/7FAA1BD04E1DF2F06CFFF3D8DB64D27A3F4B6DF2.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.228.0/22
IPv6:
2804:1b1c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61709
Signature Algorithm: sha256WithRSAEncryption
1c:56:d8:fd:7b:df:d9:b3:7c:85:e1:16:a6:b9:fb:fc:ca:f2:
c1:07:db:27:51:3c:d4:1f:b4:88:4a:ff:fa:27:9c:f8:cd:a9:
59:22:6b:be:10:61:eb:79:ba:59:7f:28:fa:35:e8:75:4f:1b:
86:63:8d:fd:32:c1:ff:75:5b:0a:cd:1d:18:eb:7a:39:10:66:
eb:9e:c7:da:1f:b4:3b:f1:95:6f:ec:ec:21:1a:3f:1f:0c:71:
20:00:c9:e2:0e:df:f5:b5:ce:19:84:12:ec:18:f4:46:4b:20:
67:fc:78:b1:c8:14:57:d0:5d:da:40:dd:d6:9c:b3:41:5d:53:
83:45:fe:5f:b9:4a:06:19:a5:3c:bd:2e:3e:5f:39:53:69:61:
f2:25:cd:81:41:c3:e9:1a:e0:7c:26:53:66:43:50:35:0a:1d:
d8:80:aa:a5:b7:1e:60:2a:90:1f:72:fa:96:0d:14:65:39:b2:
ec:15:64:5f:05:78:52:0d:e5:d8:ee:c1:08:7a:58:ae:14:b2:
d4:03:1d:2d:0e:f5:61:cc:de:39:f5:68:e6:a3:0d:f9:9f:50:
df:db:67:ba:c8:9d:e0:43:fe:82:a0:53:4d:a1:1e:9f:eb:36:
dd:6a:7c:0c:cc:66:f2:4b:85:b1:6f:4f:23:ab:95:4d:6b:cd:
ec:1a:21:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:40 2024 by rpki-client on console-ams.rpki-client.org