Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9129AD41D8674385271EFA3A05D3D27494319FC0.cer
File: 9129AD41D8674385271EFA3A05D3D27494319FC0.cer (raw, json)
Hash identifier: KU6afz5ea81evwH0YkseuWTvN3MFS4TUt5wSGZSBJZE=
Subject key identifier: 91:29:AD:41:D8:67:43:85:27:1E:FA:3A:05:D3:D2:74:94:31:9F:C0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 7587D84A912DE208EB4251E9270B1CDDDD99D5A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/9129AD41D8674385271EFA3A05D3D27494319FC0.mft
caRepository: rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 09 Oct 2023 12:45:08 +0000
Certificate not after: Mon 07 Oct 2024 12:50:08 +0000
Subordinate resources: AS: 263656
IP: 168.197.76.0/22
IP: 177.52.144.0/21
IP: 177.66.28.0/22
IP: 200.215.160.0/22
IP: 201.139.84.0/22
IP: 2804:10fc::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:87:d8:4a:91:2d:e2:08:eb:42:51:e9:27:0b:1c:dd:dd:99:d5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Oct 9 12:45:08 2023 GMT
Not After : Oct 7 12:50:08 2024 GMT
Subject: CN=9129AD41D8674385271EFA3A05D3D27494319FC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8e:8b:ba:4a:92:34:16:c6:14:48:93:62:4b:
bb:31:f2:ee:4b:a2:db:e6:5b:13:9b:0b:13:97:28:
3a:3c:04:16:49:58:9d:a8:e8:82:21:54:d3:b6:49:
be:1b:e2:29:b1:76:6a:83:fb:3a:e7:b5:b5:ef:3b:
a6:83:f9:af:3c:48:a0:01:4d:3d:87:af:37:73:c2:
04:5d:52:21:fe:f3:71:dd:7d:f0:6e:0c:55:fc:0b:
91:36:ec:33:b0:d3:59:9b:fe:29:72:8a:cb:5f:d8:
3b:a9:c2:97:07:33:f1:a0:e5:fb:36:8a:26:ed:12:
15:fe:b0:35:d0:03:08:7e:00:e3:b9:38:36:90:d8:
5f:09:5b:3d:88:92:a4:2d:03:78:b5:3f:b5:c1:d2:
8b:f7:9a:9d:07:58:d6:93:28:6a:2e:ee:7e:03:5f:
3e:21:ac:8a:60:98:ca:27:8a:93:a0:42:b5:90:b4:
32:aa:dd:ae:1a:2d:90:81:d7:91:8c:9e:10:32:6a:
c2:8c:8d:69:a7:ae:5d:2d:2b:27:0f:c8:92:33:01:
fa:38:c5:66:c3:6e:ca:22:2e:6f:91:58:5a:6e:9c:
c8:6a:4a:8a:0a:45:e6:ed:86:0d:d3:96:57:86:ba:
6b:47:7b:72:af:5d:96:5f:42:b7:6c:f9:53:53:cf:
0a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
91:29:AD:41:D8:67:43:85:27:1E:FA:3A:05:D3:D2:74:94:31:9F:C0
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/9129AD41D8674385271EFA3A05D3D27494319FC0.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.76.0/22
177.52.144.0/21
177.66.28.0/22
200.215.160.0/22
201.139.84.0/22
IPv6:
2804:10fc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263656
Signature Algorithm: sha256WithRSAEncryption
54:c5:78:85:a4:cb:c2:88:81:57:9e:34:47:90:14:91:e8:84:
e4:23:5e:48:a6:f4:45:d0:64:51:be:fd:26:99:17:91:f5:50:
e1:a3:eb:63:25:18:c7:e6:6b:9b:89:2e:38:61:06:62:84:16:
db:e9:26:08:f3:33:af:6b:d5:a1:c3:65:66:ab:41:1b:27:c6:
f0:4c:8c:ce:d8:f3:98:27:9b:3d:f7:13:99:7d:4b:b9:0f:70:
1c:cb:15:98:d4:40:39:00:2a:20:a6:f3:f3:c6:8e:62:1a:d6:
81:de:17:d5:fd:93:db:e4:5b:13:ac:9c:c2:e5:d3:21:eb:ca:
f7:8f:e1:a7:c7:9f:b9:68:87:fb:1e:20:92:50:b5:2f:f5:be:
14:81:7c:66:7b:c9:e4:11:34:12:1b:24:9d:c1:7f:48:0c:3c:
bf:6c:99:13:40:4b:a3:68:41:c8:ed:10:dd:66:a1:a3:59:92:
aa:85:f8:37:6b:f3:da:be:1b:63:ab:6b:4e:6f:91:7d:ae:cc:
69:10:4e:89:50:4e:1d:a0:18:df:da:19:24:fe:a2:f4:52:fe:
72:e0:7e:1b:0b:5b:2c:f1:28:f2:e1:69:7d:1a:a4:23:51:b9:
e3:c1:c2:2e:9d:5e:13:51:b2:f8:2d:33:5f:d7:6b:3a:dd:cf:
d9:1e:f5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org