Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.cer
File: AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.cer (raw, json)
Hash identifier: RTs6rAfykh/C9+7EYW7Fm6bOU64bhfXG5YkxL+g9n48=
Subject key identifier: AA:50:79:D0:DD:3D:74:B9:F2:F3:08:3F:F5:2A:9C:68:F6:6B:F2:A9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 6CE0D2F9C06F86F4698DDA6C2BC59A434582F960
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.mft
caRepository: rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 26 Jun 2023 13:02:54 +0000
Certificate not after: Mon 24 Jun 2024 13:07:54 +0000
Subordinate resources: AS: 270413
IP: 170.0.76.0/22
IP: 190.89.244.0/22
IP: 2804:6ba0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:e0:d2:f9:c0:6f:86:f4:69:8d:da:6c:2b:c5:9a:43:45:82:f9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Jun 26 13:02:54 2023 GMT
Not After : Jun 24 13:07:54 2024 GMT
Subject: CN=AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:e1:a7:ed:28:65:d4:ed:41:2e:d9:52:f6:
22:52:77:9e:e4:f4:23:4c:98:f3:30:25:6c:a5:1e:
dc:e4:b9:e1:80:63:dd:35:58:d6:07:f0:d2:f6:0b:
83:d1:01:f4:33:a6:93:78:83:de:03:ce:c9:51:04:
56:18:6d:15:dc:a7:1f:25:da:31:a9:91:d6:44:1a:
49:55:bf:ec:76:ca:e0:21:95:08:9e:3b:23:bb:36:
9a:07:59:8e:24:44:44:e6:77:0d:6e:24:02:8a:31:
97:c9:95:3e:90:57:b3:d5:8f:12:6a:4a:46:29:0b:
0d:1c:9a:eb:1c:22:e9:fd:23:21:43:fa:d7:da:c2:
e6:b0:aa:18:c8:be:54:a4:e8:4d:f9:46:e8:31:49:
ae:4a:13:22:e1:07:4a:71:63:73:ec:8b:08:6c:d0:
b6:66:43:3d:32:e2:22:13:48:fc:84:f2:71:44:01:
6a:1c:77:a4:25:7f:8f:f4:f0:ef:2a:55:90:8a:7a:
9c:8b:0c:0b:aa:5e:d3:1c:76:eb:9c:82:98:d2:6e:
aa:50:6a:ba:50:80:60:9e:06:19:26:36:0f:d3:14:
ac:35:17:9d:7e:46:79:42:a9:ce:43:c9:4c:0a:b9:
14:3c:ed:32:53:fb:21:74:00:e8:a6:87:ca:32:94:
32:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AA:50:79:D0:DD:3D:74:B9:F2:F3:08:3F:F5:2A:9C:68:F6:6B:F2:A9
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.76.0/22
190.89.244.0/22
IPv6:
2804:6ba0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270413
Signature Algorithm: sha256WithRSAEncryption
6b:6f:82:95:f5:e9:8e:69:7b:72:ee:ec:bf:c6:28:6b:ae:d5:
8d:6b:75:f0:55:50:a9:05:91:dc:63:56:93:2f:ff:fd:de:00:
6e:73:5b:fa:6e:2b:0e:7c:71:22:bb:88:72:17:92:05:04:88:
aa:ea:19:0c:26:69:f1:30:a7:e8:ed:67:49:db:08:7a:42:38:
f4:0c:0a:af:4b:9f:2c:df:78:fb:26:46:41:94:94:ff:c2:5e:
f5:0f:2b:fe:d4:ff:d5:b2:1d:9e:9f:f6:6f:28:45:7e:68:65:
56:5d:bf:f1:57:2e:79:15:a6:0d:ec:6c:7f:9b:e0:b4:da:aa:
5d:3e:c5:c5:7e:61:01:f5:e3:0e:91:49:60:1b:39:5e:db:1e:
78:3e:e9:46:59:bb:af:c8:e0:c6:4c:ff:5a:e2:26:0f:71:0a:
82:aa:97:6e:c8:89:db:5e:05:07:f8:36:a2:17:8d:f1:2f:4b:
19:1c:cc:4c:b4:95:0a:5b:9e:9a:6f:e0:d0:42:bb:db:e2:54:
99:85:2c:b1:f4:4d:c3:c7:de:bb:37:ac:26:1a:34:4f:31:2e:
62:d3:bb:52:fb:a3:80:10:a9:c0:9a:fc:41:b3:38:6a:d1:95:
70:6e:72:1f:28:f9:0b:0c:5a:c9:ec:ac:6d:8f:18:36:73:49:
f5:5d:dc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:47 2024 by rpki-client on console-ams.rpki-client.org