Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AFEAB3420D1A3845A0B35D7E0CE54116A0EA8A70.cer
File: AFEAB3420D1A3845A0B35D7E0CE54116A0EA8A70.cer (raw, json)
Hash identifier: dbeRooJ6w9CwXWKuRrWLqwXHu2kM32/QE9aBYKbkKss=
Subject key identifier: AF:EA:B3:42:0D:1A:38:45:A0:B3:5D:7E:0C:E5:41:16:A0:EA:8A:70
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 44E66C5EF3FF1A9CAE85C3A7FFDF9011B05A80F7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/AFEAB3420D1A3845A0B35D7E0CE54116A0EA8A70.mft
caRepository: rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 06 Jun 2023 15:27:40 +0000
Certificate not after: Tue 04 Jun 2024 15:32:40 +0000
Subordinate resources: AS: 270928
IP: 190.123.2.0/23
IP: 2804:73a4::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:e6:6c:5e:f3:ff:1a:9c:ae:85:c3:a7:ff:df:90:11:b0:5a:80:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Jun 6 15:27:40 2023 GMT
Not After : Jun 4 15:32:40 2024 GMT
Subject: CN=AFEAB3420D1A3845A0B35D7E0CE54116A0EA8A70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b0:ef:34:db:cd:ac:72:d0:45:39:d4:05:0c:
1e:2f:3c:fa:00:57:bc:c7:ad:11:07:d6:e4:b1:25:
68:2a:e1:28:39:89:48:f9:52:d5:0e:c4:b6:fd:c5:
dd:a5:53:9f:d3:86:94:54:33:16:98:35:e4:6d:5f:
01:1d:a2:50:2e:fb:9b:1d:22:6d:e7:cb:fa:78:4e:
f2:b0:19:1a:92:a0:0a:e6:d7:46:41:1c:41:9b:e9:
a4:57:1e:01:f5:61:da:0c:22:83:91:9d:2f:4d:a8:
c7:98:ea:22:e0:2e:7e:b5:7a:e8:04:f1:c9:4b:84:
cc:f5:7f:4e:9e:22:65:f6:f6:99:08:9f:46:ab:94:
23:28:21:1f:75:88:f9:a1:03:7b:94:e4:43:97:1f:
96:c4:d3:f3:f8:59:4c:83:3d:34:91:fb:03:f2:c3:
98:bf:4d:42:14:fc:55:2d:f7:af:96:df:1d:0b:ce:
56:4f:0d:d4:50:19:7a:5d:ed:11:44:a9:d3:44:93:
d6:57:7b:20:2a:3a:d5:0e:f0:cc:f4:8c:02:39:ca:
2a:58:f9:60:10:44:da:b2:c1:8f:da:4a:1d:d8:3b:
e3:ea:97:08:e4:9b:0a:f2:62:09:d3:07:58:e8:ea:
28:17:fb:e2:2a:db:2d:c9:ed:6c:3f:68:5b:c9:39:
79:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AF:EA:B3:42:0D:1A:38:45:A0:B3:5D:7E:0C:E5:41:16:A0:EA:8A:70
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/AFEAB3420D1A3845A0B35D7E0CE54116A0EA8A70.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.123.2.0/23
IPv6:
2804:73a4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270928
Signature Algorithm: sha256WithRSAEncryption
b3:39:37:fb:fd:9c:d6:fb:44:93:3d:78:f0:f5:a6:6d:ce:e8:
41:91:20:20:63:46:3c:97:86:26:85:52:ad:d7:d5:16:f8:1c:
8d:07:a5:50:6a:c9:28:5b:d6:e0:25:40:8d:9e:b7:1c:9b:c5:
97:4e:6d:cb:0f:6e:9c:8c:45:44:6c:70:74:ae:8e:3b:10:54:
8c:27:10:02:45:52:5b:2f:9f:ed:57:77:c7:1c:45:06:6c:b0:
d4:25:a6:22:bd:a2:f6:7a:ba:7d:a7:d2:48:a0:f3:65:0f:3e:
98:ec:02:1e:83:a2:6f:26:a4:1e:05:86:e8:e3:f4:c9:51:92:
5e:5a:80:87:ff:8a:11:06:c1:10:71:a9:cb:b7:16:28:91:24:
45:8c:53:13:97:43:32:03:35:9a:9c:6e:da:58:86:be:9f:94:
93:6d:02:2f:f2:24:ca:fb:a0:0e:a4:14:27:b1:9a:25:77:f3:
c3:86:b3:9d:3d:6f:c1:25:9b:16:79:e4:a5:c1:f9:5b:eb:b4:
fa:e3:76:1c:ab:a7:68:c6:3e:8d:82:1e:a4:e5:8d:62:ba:84:
a2:00:0c:94:f2:12:5e:07:4d:dc:11:ad:db:fd:72:91:5a:96:
5a:22:3d:2a:80:e4:0b:26:aa:63:64:d6:2c:81:88:69:fd:3f:
18:bd:c5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org