Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B8CE2996B4BBD1617BD6B6734A6E29D8ADAB97BD.cer
File: B8CE2996B4BBD1617BD6B6734A6E29D8ADAB97BD.cer (raw, json)
Hash identifier: 8f6kEjRdySDNWj4Zo1N4APgweXwdwpfV3rQzbzLtJgo=
Subject key identifier: B8:CE:29:96:B4:BB:D1:61:7B:D6:B6:73:4A:6E:29:D8:AD:AB:97:BD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 02DFE3A7278ED712A333D192C0348A20EE381D36
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/G6c4KW8rT1K1kxEt5GUMVQXmR1mZKPg5yKhQUgtijwtr/1/B8CE2996B4BBD1617BD6B6734A6E29D8ADAB97BD.mft
caRepository: rsync://rpki-repo.registro.br/repo/G6c4KW8rT1K1kxEt5GUMVQXmR1mZKPg5yKhQUgtijwtr/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 09 Apr 2024 18:20:56 +0000
Certificate not after: Tue 08 Apr 2025 18:25:56 +0000
Subordinate resources: AS: 264221
AS: 269384
IP: 45.185.156.0/22
IP: 138.117.36.0/22
IP: 2804:2468::/32
IP: 2804:63cc::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:df:e3:a7:27:8e:d7:12:a3:33:d1:92:c0:34:8a:20:ee:38:1d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Apr 9 18:20:56 2024 GMT
Not After : Apr 8 18:25:56 2025 GMT
Subject: CN=B8CE2996B4BBD1617BD6B6734A6E29D8ADAB97BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ab:c4:ed:28:14:c2:68:1a:97:92:1d:7f:6a:
a5:2c:d7:d8:2f:21:e6:fc:f6:0f:d5:87:7b:57:d7:
6d:43:9a:0b:94:06:d6:4e:c9:19:3a:0b:16:ef:35:
fe:63:ab:e9:5f:ae:df:c0:e2:fd:38:7e:14:bd:30:
ea:ab:47:f9:00:ad:82:11:1b:e4:71:dc:9f:f3:61:
47:b1:31:be:44:ac:bd:93:54:72:3c:4e:04:37:94:
d8:bb:d8:cb:29:83:9b:4a:4f:67:52:da:72:9d:3b:
22:cc:25:5c:aa:34:a8:d1:58:4d:bd:43:6e:30:c9:
30:1d:6c:59:de:99:3d:bb:ac:41:6d:03:ba:f4:6b:
1f:94:8f:4f:56:89:6c:33:de:d2:d6:ee:f6:c9:d3:
79:74:2f:81:b5:08:f9:26:8a:a6:7d:be:0e:bc:ff:
49:0c:79:c5:3c:46:df:f3:c6:c7:82:d0:27:9e:36:
a3:6c:d9:f0:ab:c2:39:9b:b1:e3:bf:e8:63:4d:3b:
16:90:69:52:51:6f:ec:a5:be:a2:c4:2d:ee:ab:bd:
82:3c:8b:16:b5:b1:35:f4:de:e3:70:75:b5:6a:96:
22:a8:a0:94:63:5d:0f:f3:48:9b:20:52:1f:a6:7b:
67:fe:88:31:52:5e:89:7c:4d:1b:b6:67:2e:cf:9f:
13:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B8:CE:29:96:B4:BB:D1:61:7B:D6:B6:73:4A:6E:29:D8:AD:AB:97:BD
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/G6c4KW8rT1K1kxEt5GUMVQXmR1mZKPg5yKhQUgtijwtr/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G6c4KW8rT1K1kxEt5GUMVQXmR1mZKPg5yKhQUgtijwtr/1/B8CE2996B4BBD1617BD6B6734A6E29D8ADAB97BD.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.185.156.0/22
138.117.36.0/22
IPv6:
2804:2468::/32
2804:63cc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264221
269384
Signature Algorithm: sha256WithRSAEncryption
0a:f0:68:88:ab:77:3a:2e:e7:43:e5:85:1d:6f:fa:2f:25:76:
a7:d7:18:93:e3:6c:b6:03:c9:1e:67:35:86:1f:12:a1:3b:ad:
fe:a7:dd:fe:c7:bc:46:a7:cf:14:8f:37:65:2e:53:60:90:a4:
f8:39:c2:d0:62:9e:d7:cd:d3:12:32:9d:0e:5e:72:43:fb:b1:
76:7d:cd:db:1b:5f:a6:82:b8:51:db:05:f6:e6:b5:36:27:42:
b0:d1:db:61:02:e4:d8:62:88:be:b5:43:22:41:54:2a:fd:65:
4a:49:f2:2c:f7:fd:82:8c:85:a2:a8:c3:d5:ba:9e:87:ba:15:
dd:a4:60:dd:99:0d:16:cb:3c:bb:03:bf:a5:68:90:01:fd:c8:
61:c9:91:31:fc:b9:7f:1e:89:46:80:9f:99:99:44:f2:1a:20:
8f:4e:e4:4c:66:78:4c:db:09:8f:ee:cb:c4:43:ff:5a:fb:09:
45:cd:39:cf:71:03:00:d4:41:db:fd:a9:28:6d:d2:d9:f0:5b:
18:53:db:96:8e:c6:de:35:99:a5:b3:1d:d4:11:45:3e:db:b1:
88:3d:ca:25:d9:34:a1:5b:09:fb:d9:66:d7:93:d8:fd:15:20:
9a:da:7c:75:33:26:22:24:08:db:16:45:67:d2:23:b6:f8:a4:
85:92:ee:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org