Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/89D3BA1A689174A62F9425DDD0F6892EC0EE6E0A.cer
File: 89D3BA1A689174A62F9425DDD0F6892EC0EE6E0A.cer (raw, json)
Hash identifier: NXPu3nmmvp8mvMoZqyp3gYPW9vU8L0HIGQTBxq+VfnU=
Subject key identifier: 89:D3:BA:1A:68:91:74:A6:2F:94:25:DD:D0:F6:89:2E:C0:EE:6E:0A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 514E873487EA4E71390A35FDD90AE92A3C8AC762
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/89D3BA1A689174A62F9425DDD0F6892EC0EE6E0A.mft
caRepository: rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 28 Mar 2024 11:25:09 +0000
Certificate not after: Thu 27 Mar 2025 11:30:09 +0000
Subordinate resources: AS: 52941
IP: 45.169.212.0/22
IP: 177.38.40.0/21
IP: 2804:b18::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:4e:87:34:87:ea:4e:71:39:0a:35:fd:d9:0a:e9:2a:3c:8a:c7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Mar 28 11:25:09 2024 GMT
Not After : Mar 27 11:30:09 2025 GMT
Subject: CN=89D3BA1A689174A62F9425DDD0F6892EC0EE6E0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d9:57:85:8d:6f:c0:8f:92:85:d5:71:6a:0b:
cf:ed:b1:aa:1d:a6:c0:0e:34:67:c9:d3:ca:12:1e:
3d:c3:5e:f0:05:2e:ba:be:9d:1a:fd:5a:45:08:71:
fa:5d:d0:d8:6b:c7:e8:54:8d:36:fd:6d:9f:01:7b:
b3:32:21:f2:26:02:04:64:41:9f:dc:c4:09:d2:47:
25:cb:b5:a9:37:1a:f7:eb:d1:0d:27:a2:89:06:e1:
ab:d1:30:2c:5d:88:f7:48:ef:31:97:38:46:ad:5b:
70:50:e2:44:0e:0e:88:34:b4:1c:3b:52:18:53:94:
86:fe:9e:fa:d5:8e:4c:55:fb:51:b4:19:42:89:e2:
1a:d6:1a:d1:e8:b9:a6:39:42:55:1a:fc:1e:2a:af:
e3:32:a1:21:2d:5b:5d:68:b8:e6:2e:2f:07:a6:77:
6c:b5:f1:61:e9:02:73:47:5d:fa:63:10:81:29:13:
e6:3e:5b:21:a9:98:58:90:8e:f6:7d:04:c5:1d:85:
ac:78:b8:48:37:07:c3:b1:f7:bf:99:57:4e:b6:83:
dd:cd:45:2b:9a:28:37:ec:4b:38:2b:67:74:5f:98:
52:22:be:e2:65:68:54:78:3f:bd:2b:45:53:20:2c:
d6:ce:27:bc:85:0c:0a:72:a5:28:01:3e:fe:a1:05:
c9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
89:D3:BA:1A:68:91:74:A6:2F:94:25:DD:D0:F6:89:2E:C0:EE:6E:0A
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/89D3BA1A689174A62F9425DDD0F6892EC0EE6E0A.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.212.0/22
177.38.40.0/21
IPv6:
2804:b18::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52941
Signature Algorithm: sha256WithRSAEncryption
4b:c2:7d:ac:f6:70:46:47:fa:ad:16:4a:69:9f:36:ad:d9:e5:
9e:39:3d:e5:5b:35:96:31:22:7d:b0:b0:12:b4:65:59:53:3c:
9f:96:c4:35:77:17:dc:20:d7:87:b1:11:19:1a:83:25:b9:f0:
09:db:82:55:7a:4d:89:60:f1:fa:31:90:e0:c0:64:87:09:7f:
e3:31:c1:37:f2:7b:41:78:88:10:99:f7:21:1c:5f:d4:3f:82:
02:e9:a7:bb:01:8a:74:f8:8e:cb:5a:7c:ed:68:b9:43:be:28:
9a:50:17:25:d4:67:1d:79:5e:97:bc:5c:d2:40:11:ad:c5:04:
61:08:cb:d1:08:06:a6:66:a8:4c:be:7c:54:5c:47:1c:e7:48:
38:28:cd:41:6c:d2:ab:9a:a6:16:16:cb:49:3e:b9:f8:09:f6:
46:21:99:9b:ec:33:3a:23:15:b8:fe:bd:bf:ab:4b:d4:59:40:
47:18:a5:32:84:12:b8:97:62:2b:54:e4:28:cf:8c:9d:dd:50:
51:44:91:93:da:a2:79:eb:18:07:50:f2:7d:7f:c1:d9:28:32:
79:4f:2c:5a:c5:d2:81:32:aa:ee:b8:5a:9c:5e:63:9f:b3:f2:
57:d1:9c:c1:07:47:75:ee:8e:1e:9c:46:43:4e:c5:81:3e:47:
43:90:15:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org