Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8FA1FD1BCCA720AECF52836BABB9098CDA8580B9.cer
File: 8FA1FD1BCCA720AECF52836BABB9098CDA8580B9.cer (raw, json)
Hash identifier: iPVcDAA+lxLXPObNMu9sPi7V0OWlGq2fMljPQvi11eM=
Subject key identifier: 8F:A1:FD:1B:CC:A7:20:AE:CF:52:83:6B:AB:B9:09:8C:DA:85:80:B9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 40D2B1651D2B08E6C886065D97C98016124B756F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/0/8FA1FD1BCCA720AECF52836BABB9098CDA8580B9.mft
caRepository: rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 27 Jan 2024 23:48:56 +0000
Certificate not after: Sat 25 Jan 2025 23:53:56 +0000
Subordinate resources: AS: 262427
IP: 138.99.48.0/22
IP: 143.202.28.0/22
IP: 168.228.172.0/22
IP: 177.39.144.0 -- 177.39.155.255
IP: 177.71.24.0/21
IP: 2804:448::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:d2:b1:65:1d:2b:08:e6:c8:86:06:5d:97:c9:80:16:12:4b:75:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Jan 27 23:48:56 2024 GMT
Not After : Jan 25 23:53:56 2025 GMT
Subject: CN=8FA1FD1BCCA720AECF52836BABB9098CDA8580B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6d:f4:7c:ab:3e:a7:5a:f9:fd:ae:f7:3c:72:
09:89:13:7c:79:ce:d8:1a:de:3e:c8:42:1c:3c:59:
93:31:e0:5e:e1:61:2d:21:14:49:78:47:c0:16:d3:
5b:55:d2:fc:df:58:49:bd:55:1d:9c:ff:21:91:b9:
b1:b1:db:a2:46:be:4d:45:24:e1:a2:60:6c:81:74:
e1:61:ad:ee:b1:a6:54:71:ac:62:83:43:dd:a9:ec:
bf:4f:a5:63:74:cf:d3:ce:42:2c:2b:69:d4:2a:20:
e1:9f:34:23:47:f7:61:d7:70:b3:41:11:65:36:87:
d7:3b:81:30:32:16:3e:bf:50:be:7e:7d:49:d1:ac:
54:69:c5:ae:b7:70:c1:e6:70:52:6f:73:29:bd:3d:
f5:c1:e3:f6:25:ed:59:1c:ce:dd:f3:5b:51:a8:23:
69:10:1d:e9:89:29:26:08:7f:7b:57:c2:42:31:c2:
b0:44:34:f6:b9:e8:e3:c9:64:be:ff:d0:12:af:6b:
1b:a8:96:f5:bf:be:9b:6b:87:af:d0:41:11:b5:67:
bb:cd:db:d0:78:2d:9b:91:04:b4:19:9d:b1:cd:ff:
9b:0d:77:83:13:a7:fc:50:54:97:38:dd:07:03:0c:
e8:e5:f5:b1:05:1e:a6:3e:14:13:ab:53:ff:ac:72:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8F:A1:FD:1B:CC:A7:20:AE:CF:52:83:6B:AB:B9:09:8C:DA:85:80:B9
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/0/8FA1FD1BCCA720AECF52836BABB9098CDA8580B9.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.48.0/22
143.202.28.0/22
168.228.172.0/22
177.39.144.0-177.39.155.255
177.71.24.0/21
IPv6:
2804:448::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262427
Signature Algorithm: sha256WithRSAEncryption
31:5a:7b:be:06:ef:89:8b:87:65:95:51:6e:2f:bf:58:0d:2f:
34:c9:0a:48:32:68:44:b6:4a:1b:47:85:78:ce:82:0f:be:f6:
11:45:e1:5e:85:67:0d:ff:59:a7:4b:e0:72:7e:5e:2c:c5:c5:
1b:6c:ca:61:50:b6:86:a1:93:ed:f9:6a:90:fd:d2:bb:1e:59:
09:ed:51:ef:15:46:0b:32:75:4d:b0:e8:4e:df:84:8d:cb:66:
3a:76:8c:3c:46:3c:56:6a:5c:dd:a8:d1:75:94:ac:6c:ec:5d:
b3:a4:3d:dd:0a:06:d3:9c:06:34:10:72:d6:52:ea:b7:57:79:
8c:99:ca:3b:bb:b5:0e:3b:05:1c:ea:b2:f5:50:8c:32:cf:a5:
d8:9e:01:02:cf:85:bb:4f:46:ff:d1:96:d6:29:7b:ff:05:13:
df:85:56:72:06:2c:0d:c1:60:60:18:5d:a1:d6:a8:c4:ff:77:
3d:9f:99:92:54:4f:c9:a5:5c:65:f0:8f:33:ab:09:94:f5:51:
ef:f8:6d:fb:3d:45:1a:9d:07:58:9f:39:25:89:84:81:07:55:
18:9b:fe:0d:36:c2:6e:a6:94:49:79:42:34:ce:c5:ce:56:93:
59:4e:e7:3b:26:af:13:4c:28:15:30:ca:e7:30:06:fb:04:09:
9d:ff:11:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org