Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9E7D5FB86FD7C502A974C13498C722C3EA0A77E2.cer
File: 9E7D5FB86FD7C502A974C13498C722C3EA0A77E2.cer (raw, json)
Hash identifier: CRpL5D0w0j3GRjUDOoqIIX007YgwtN2kDWWTVXYojF4=
Subject key identifier: 9E:7D:5F:B8:6F:D7:C5:02:A9:74:C1:34:98:C7:22:C3:EA:0A:77:E2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 675780AB2955EA856F32734FEDE8193C171A081A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/9E7D5FB86FD7C502A974C13498C722C3EA0A77E2.mft
caRepository: rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 26 Jan 2023 14:39:20 +0000
Certificate not after: Thu 25 Jan 2024 14:44:20 +0000
Subordinate resources: AS: 263421
IP: 168.121.156.0/22
IP: 168.195.220.0/22
IP: 179.191.240.0/20
IP: 2804:1600::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:57:80:ab:29:55:ea:85:6f:32:73:4f:ed:e8:19:3c:17:1a:08:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Jan 26 14:39:20 2023 GMT
Not After : Jan 25 14:44:20 2024 GMT
Subject: CN=9E7D5FB86FD7C502A974C13498C722C3EA0A77E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4a:5d:41:a2:55:8e:50:56:d6:d0:46:06:cd:
c0:f0:4c:36:32:f5:73:27:2d:cc:f9:4c:de:90:65:
76:5f:b3:3c:fa:29:a1:80:6a:0c:5e:46:73:07:aa:
20:97:c4:7e:d4:7d:e9:08:1d:8c:4b:5e:34:e0:c5:
41:ce:7f:69:88:83:a3:67:5d:5e:ec:de:d5:7d:05:
7c:f2:e1:dc:71:92:90:3f:8e:d1:63:e8:8d:1b:1f:
4e:6a:26:dc:32:e4:d7:bd:7e:6c:09:bd:06:ca:6b:
8b:ba:00:ab:2e:4e:04:8c:0b:08:a8:d8:1b:09:e2:
cb:54:cf:cd:99:b8:0c:c4:5d:1d:ad:81:df:55:7c:
17:1a:ed:3e:71:08:cb:c2:b3:ca:1c:8f:c7:cf:13:
8f:78:c9:a2:17:bf:0c:1a:10:4d:a0:8b:09:b0:07:
52:ef:d1:0a:89:3e:a9:76:9d:19:67:67:97:c0:42:
ee:bf:82:d4:76:aa:8a:98:db:76:5d:c2:aa:a1:5a:
21:38:96:c9:34:33:98:f4:af:58:53:3b:9b:b4:4c:
57:58:ac:0e:da:d0:34:2c:6c:f4:e7:5a:0f:3e:d4:
cc:44:5c:90:6a:d8:db:ef:ad:34:38:40:d4:28:12:
a3:c2:87:49:bd:26:81:f4:48:11:c2:73:7b:b4:35:
0c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9E:7D:5F:B8:6F:D7:C5:02:A9:74:C1:34:98:C7:22:C3:EA:0A:77:E2
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/9E7D5FB86FD7C502A974C13498C722C3EA0A77E2.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.156.0/22
168.195.220.0/22
179.191.240.0/20
IPv6:
2804:1600::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263421
Signature Algorithm: sha256WithRSAEncryption
70:7e:82:b6:14:d6:90:3d:42:60:f5:43:04:56:6f:66:fb:9b:
f1:33:e2:11:61:58:04:69:3c:05:09:0f:58:4c:aa:0c:88:e1:
de:42:36:a9:26:fe:71:b7:1b:94:ed:78:73:ba:4c:7a:f6:31:
51:f2:5a:32:09:b5:25:4a:8c:f2:1f:a3:a7:e4:45:48:bb:65:
d8:12:a8:3e:6a:aa:35:d1:a0:13:43:13:7f:01:a0:7f:b8:97:
49:b7:4f:d5:80:34:4f:dd:e0:24:bb:64:e1:bd:d2:64:19:4f:
c4:24:0c:eb:ec:f5:bd:f5:e3:75:33:41:3d:29:74:59:85:42:
f8:88:b4:fe:c4:e5:31:b1:9c:30:17:35:be:67:5f:5a:2e:5a:
f6:41:61:98:28:38:89:40:2f:30:e5:0e:bb:f5:0d:8f:9d:b9:
5e:b5:62:08:42:a1:93:49:fd:7f:bf:b0:13:1c:f6:f9:65:0e:
a0:13:3a:57:55:b4:01:a4:4f:a6:16:80:a2:c9:3a:f5:1f:fa:
2b:1b:93:d4:c7:04:aa:d7:ac:27:09:dd:b4:32:43:3d:9e:6e:
7d:a1:c5:12:ea:34:e2:9c:10:86:26:a3:85:f4:dd:7a:e4:2d:
50:6b:5d:28:be:c9:79:73:55:36:b4:d2:e2:e6:2e:83:e0:ff:
9b:7a:de:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org