Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
File: 839D28BE64CFFA651D48FC132844106DA02449D2.cer (raw, json)
Hash identifier: BcfgDwjrrj9N3dw+G8cNbJ5YYEggwxEt5pIuSNPxtGg=
Subject key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 1D1A0E36029D0489E5664C5BB800A329A9D13E19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.mft
caRepository: rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 01 Sep 2023 11:25:11 +0000
Certificate not after: Fri 30 Aug 2024 11:30:11 +0000
Subordinate resources: AS: 4230
IP: 179.68.0.0/16
IP: 179.136.0.0/13
IP: 179.237.0.0 -- 179.237.25.255
IP: 186.249.160.0/20
IP: 187.28.0.0 -- 187.30.255.255
IP: 187.43.0.0/16
IP: 189.2.0.0/15
IP: 189.16.0.0/15
IP: 189.22.0.0/15
IP: 189.42.0.0/15
IP: 189.52.0.0/15
IP: 189.86.0.0 -- 189.88.255.255
IP: 191.38.0.0/15
IP: 191.56.0.0/13
IP: 200.10.159.0/24
IP: 200.139.192.0/18
IP: 200.166.0.0/15
IP: 200.172.0.0 -- 200.174.255.255
IP: 200.178.0.0/15
IP: 200.182.0.0/15
IP: 200.190.0.0 -- 200.192.63.255
IP: 200.200.0.0/16
IP: 200.208.0.0 -- 200.214.255.255
IP: 200.227.0.0 -- 200.228.255.255
IP: 200.230.0.0/15
IP: 200.241.0.0 -- 200.255.255.255
IP: 201.30.0.0/15
IP: 201.38.0.0/15
IP: 201.44.0.0/15
IP: 201.56.0.0/15
IP: 201.64.0.0/15
IP: 201.72.0.0/15
IP: 201.90.0.0/16
IP: 2804:a8::/32
IP: 2804:17c::/32
IP: 2804:1388::/30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:1a:0e:36:02:9d:04:89:e5:66:4c:5b:b8:00:a3:29:a9:d1:3e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Sep 1 11:25:11 2023 GMT
Not After : Aug 30 11:30:11 2024 GMT
Subject: CN=839D28BE64CFFA651D48FC132844106DA02449D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5a:8e:7c:e9:46:b6:81:ca:46:ae:81:ea:aa:
e0:26:58:e7:89:bd:66:2c:dc:13:db:83:bb:65:86:
60:af:32:28:0a:94:1f:e3:23:ab:5e:34:38:15:cc:
be:5b:62:78:91:b1:d2:af:b3:c1:5c:f5:67:9d:57:
aa:8f:0d:d7:b1:72:1e:c3:9f:d1:f0:8e:52:9a:e1:
a9:a1:26:42:b5:f8:e7:40:54:67:02:c4:f5:72:8b:
be:27:2f:e2:d1:76:7e:f0:3a:af:69:22:32:64:10:
f2:9e:e2:aa:18:60:58:6d:ee:4b:e5:30:79:95:11:
87:a9:c5:f9:6c:1a:be:06:72:8b:78:03:cd:06:f8:
de:da:17:b9:5a:5f:32:e2:71:08:0e:90:99:58:8a:
ca:43:14:36:90:32:8c:4a:89:2c:24:23:29:df:f5:
d0:84:43:2f:99:da:49:59:a5:d7:06:cc:c7:67:64:
35:d5:d4:d3:f9:2e:dc:df:11:8a:53:e9:80:33:a3:
e1:e2:2d:23:ae:f1:9d:79:c7:e8:3e:69:7b:04:d3:
8e:e1:ca:cd:b3:83:18:8d:6e:e6:d7:8b:b3:37:17:
d4:e9:58:cf:6d:ca:e4:02:36:41:7f:d1:99:a0:b1:
7d:0a:a9:24:be:cd:cd:fc:06:44:c8:b7:84:ac:2e:
d0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.68.0.0/16
179.136.0.0/13
179.237.0.0-179.237.25.255
186.249.160.0/20
187.28.0.0-187.30.255.255
187.43.0.0/16
189.2.0.0/15
189.16.0.0/15
189.22.0.0/15
189.42.0.0/15
189.52.0.0/15
189.86.0.0-189.88.255.255
191.38.0.0/15
191.56.0.0/13
200.10.159.0/24
200.139.192.0/18
200.166.0.0/15
200.172.0.0-200.174.255.255
200.178.0.0/15
200.182.0.0/15
200.190.0.0-200.192.63.255
200.200.0.0/16
200.208.0.0-200.214.255.255
200.227.0.0-200.228.255.255
200.230.0.0/15
200.241.0.0-200.255.255.255
201.30.0.0/15
201.38.0.0/15
201.44.0.0/15
201.56.0.0/15
201.64.0.0/15
201.72.0.0/15
201.90.0.0/16
IPv6:
2804:a8::/32
2804:17c::/32
2804:1388::/30
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4230
Signature Algorithm: sha256WithRSAEncryption
af:2c:92:dd:7c:a3:36:52:f1:e7:76:7d:94:8c:2d:99:70:90:
28:9f:50:a8:9a:05:8d:f5:d3:91:85:12:cb:53:60:ea:78:b0:
b0:d5:bc:9f:bb:55:0a:73:04:0b:9b:b6:32:5d:64:8d:e0:80:
25:b7:10:eb:f2:b7:7f:87:c0:ab:20:50:21:c0:26:0d:5a:75:
01:f9:30:21:7f:99:60:05:75:c1:d9:3e:fc:be:b1:f9:26:7e:
30:d0:ba:7c:10:90:40:3e:8d:23:23:52:a4:16:ba:f9:a6:1c:
e2:bd:85:22:30:62:ba:74:8e:b7:1c:ff:a0:7a:36:0e:4a:e9:
81:a6:5b:51:25:80:46:ce:70:a8:bc:b7:f3:57:3f:8b:92:01:
62:50:f0:db:1b:64:82:00:03:e9:68:ba:cb:98:23:8e:f5:54:
15:75:98:65:82:70:28:85:8f:e1:09:fa:3f:7c:ea:de:2a:47:
15:99:2b:81:8a:99:53:f0:b4:e0:8a:11:17:e4:f1:b9:3a:f2:
79:49:86:f8:da:1a:b3:44:ad:b2:52:4c:57:16:fd:e5:ac:a3:
a5:da:45:36:59:52:84:85:47:5f:b4:b7:6b:57:94:e9:a3:92:
94:49:42:df:52:44:b6:a2:26:4a:0c:53:4d:8f:40:48:e1:85:
ad:dd:6b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org