Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47.cer
File: B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47.cer (raw, json)
Hash identifier: +ByG11o/Pl/lWOpNxELs2keqJ2yUdJ0HC5N062NQkJQ=
Subject key identifier: B2:F6:85:BA:3B:81:7D:92:7E:5E:C7:B3:8B:BE:08:A5:BD:45:EB:47
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 65F889C269B7DB86E7D3699C5E755ECB0EE55298
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47.mft
caRepository: rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 03 Nov 2023 17:10:26 +0000
Certificate not after: Fri 01 Nov 2024 17:15:26 +0000
Subordinate resources: AS: 267420
IP: 45.235.160.0/22
IP: 170.231.208.0/22
IP: 186.209.222.0/23
IP: 2804:4d3c::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:f8:89:c2:69:b7:db:86:e7:d3:69:9c:5e:75:5e:cb:0e:e5:52:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Nov 3 17:10:26 2023 GMT
Not After : Nov 1 17:15:26 2024 GMT
Subject: CN=B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2c:28:c4:81:7f:9c:03:2b:5a:27:4d:ed:1b:
13:88:85:2d:eb:4d:4c:d7:da:f0:cd:c6:30:9c:e0:
5a:32:c0:f6:91:7c:d5:9e:37:aa:10:25:56:a1:60:
56:ae:d1:f8:29:b9:34:84:8e:86:e7:47:d0:bf:19:
38:a9:b1:de:69:6e:08:5c:38:84:78:1e:8a:6a:0c:
cb:2a:35:b0:2c:fd:22:54:cd:79:64:2e:d7:04:65:
68:b5:12:db:cb:ee:bd:3f:23:36:db:34:2f:e6:da:
b8:3f:cc:6a:cb:72:d4:c8:ea:b5:75:e7:8f:30:7e:
2c:76:b7:9d:e8:18:54:17:f2:66:da:28:46:1a:b1:
df:03:3a:8e:6d:15:5c:47:e4:22:24:0f:ec:6f:80:
c1:b9:bc:73:e8:22:05:ec:bf:13:67:00:a5:d9:db:
5d:26:96:f1:c0:fc:cd:e6:18:19:7d:7b:e2:b8:a9:
fa:4a:9c:2a:ac:1d:66:2a:15:f0:8e:d8:63:6b:a6:
74:56:d1:7c:a5:a4:64:e1:cb:8f:2d:2b:74:ed:a3:
1a:99:4f:21:52:66:f4:2d:d3:71:dd:fe:4a:a2:88:
3e:18:cb:92:83:8a:77:bc:e9:0c:0d:11:ec:eb:8e:
81:bb:2f:ea:f0:55:4b:fe:bf:85:77:e9:75:58:64:
72:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B2:F6:85:BA:3B:81:7D:92:7E:5E:C7:B3:8B:BE:08:A5:BD:45:EB:47
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.160.0/22
170.231.208.0/22
186.209.222.0/23
IPv6:
2804:4d3c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267420
Signature Algorithm: sha256WithRSAEncryption
a3:f4:e6:cf:61:d8:0a:e7:f3:9f:40:4d:df:bc:c7:de:8f:30:
c9:fe:d9:fa:70:97:34:ed:28:02:66:b5:01:ac:d6:5e:5e:e8:
09:1e:e1:55:e1:01:e2:a5:58:38:c0:6f:be:ec:d1:38:cb:20:
77:32:47:e7:63:2f:74:a9:1e:48:a6:9b:ad:62:35:87:73:5b:
18:c4:59:cb:25:61:7e:73:dd:22:ab:a2:b1:a7:4b:e9:c1:70:
22:3b:70:da:fb:46:42:c2:d2:1d:f1:39:9d:ee:38:b5:1d:b8:
bc:d8:b0:dd:dd:15:de:ee:a7:0c:7d:32:63:18:09:90:6c:6b:
6e:b4:48:4a:dc:6e:80:dc:85:88:1f:eb:f8:2d:d2:98:5e:89:
36:db:e6:3f:50:8b:2e:a7:b6:1e:8c:7b:5e:1f:7c:b7:d1:0c:
40:a4:e4:5e:e2:0c:3f:33:72:d6:4b:de:42:2d:db:64:de:7b:
4c:36:bb:84:56:fd:65:24:be:5a:ff:5f:a9:fd:64:ba:db:94:
c3:bf:63:97:fd:c6:11:27:65:18:bb:57:1d:8d:af:50:ac:bc:
d0:ed:2d:81:98:e0:6f:38:67:6d:cc:f1:a3:be:d1:65:95:04:
48:32:a7:dd:2b:13:11:02:64:5f:71:ac:d3:c1:f7:7f:44:92:
ee:b3:4d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org