Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BCB5CD719F47B32C85039FC1EB6F7EDED3CDD5B4.cer
File: BCB5CD719F47B32C85039FC1EB6F7EDED3CDD5B4.cer (raw, json)
Hash identifier: tZfjmR5syGbSv4StC/CmWdW7VLNzJ9yv+QE0XMz+Wfs=
Subject key identifier: BC:B5:CD:71:9F:47:B3:2C:85:03:9F:C1:EB:6F:7E:DE:D3:CD:D5:B4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 1D17DA8E43832C3001FADC3AC45A13AF97B10367
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/BCB5CD719F47B32C85039FC1EB6F7EDED3CDD5B4.mft
caRepository: rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 26 Mar 2024 18:36:02 +0000
Certificate not after: Tue 25 Mar 2025 18:41:02 +0000
Subordinate resources: AS: 266648
IP: 128.201.204.0/22
IP: 2804:3f40::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:17:da:8e:43:83:2c:30:01:fa:dc:3a:c4:5a:13:af:97:b1:03:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Mar 26 18:36:02 2024 GMT
Not After : Mar 25 18:41:02 2025 GMT
Subject: CN=BCB5CD719F47B32C85039FC1EB6F7EDED3CDD5B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:9c:41:b7:ff:05:4a:c7:17:ee:e3:6b:30:
b3:10:24:05:04:59:45:98:7f:21:17:70:f1:75:6f:
9f:33:cb:c6:74:22:50:81:08:d9:bb:55:c0:03:10:
5c:bd:c1:bb:1a:78:28:15:81:ce:9e:6d:9f:17:7a:
72:8e:c3:fa:a2:fc:53:e8:54:88:a9:bc:04:55:92:
94:51:24:37:4e:3c:31:1d:7e:f0:d7:c3:86:49:b1:
e1:17:09:c9:10:78:8d:67:20:f2:df:a5:cd:df:6e:
3f:09:94:53:a8:ce:cd:96:54:55:50:26:14:63:04:
eb:f1:26:26:cb:c3:ca:20:a1:67:3c:37:8d:f1:20:
20:91:a5:65:71:95:ee:3a:ad:3e:a1:4b:29:6a:4a:
1f:10:e9:63:4f:79:f7:3b:a0:92:0c:d5:3c:a5:67:
c8:6a:0d:58:88:2b:35:9a:fe:c4:27:9b:bf:c5:09:
5f:31:d7:b8:a3:14:25:c1:42:c8:a1:06:6d:a6:ff:
2e:19:25:28:be:91:10:f6:b3:c7:ac:c9:db:00:80:
7c:47:cc:e7:e1:c7:f4:90:e9:3b:7b:68:0f:8b:9c:
11:bb:42:5b:a9:45:3a:67:e2:16:49:9f:2f:84:9d:
1f:f8:de:5c:72:18:60:c3:57:03:ec:5a:3d:96:24:
2c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BC:B5:CD:71:9F:47:B3:2C:85:03:9F:C1:EB:6F:7E:DE:D3:CD:D5:B4
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/BCB5CD719F47B32C85039FC1EB6F7EDED3CDD5B4.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.204.0/22
IPv6:
2804:3f40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266648
Signature Algorithm: sha256WithRSAEncryption
6b:c6:67:95:00:9a:76:3d:ce:0d:e7:ed:2a:cf:e0:16:53:f4:
dd:2c:a3:01:fe:bc:79:59:30:e5:c3:2a:71:1b:79:22:3e:69:
95:eb:20:0c:01:cd:bb:cc:97:d7:a0:26:83:4a:38:f3:98:f8:
9e:cb:07:a4:0c:22:01:9b:ef:bb:40:fa:61:3f:d3:05:f8:c3:
41:b5:6c:8d:87:18:eb:ba:bb:0c:20:90:e5:d9:22:48:ab:08:
9f:96:6b:44:b2:b4:d0:4e:6e:85:e2:7b:76:e4:19:b5:cc:3a:
50:c9:65:59:cf:de:33:e1:67:1f:e0:0e:fe:31:89:94:86:38:
8b:85:ac:77:8e:96:71:0a:ba:eb:81:ef:39:85:6d:db:6d:f4:
c2:2a:99:ff:52:f4:a4:0f:fb:33:e2:d7:48:f6:71:03:25:3a:
65:5f:45:b4:4d:1d:e9:bc:24:93:b6:99:59:02:18:d7:dc:5d:
7c:31:a6:4d:ca:bb:98:11:11:38:7a:7b:94:ad:0a:fc:8b:a5:
8a:ad:f5:45:93:db:f9:4c:cf:1e:33:8e:c1:39:04:2b:14:65:
01:01:d1:2e:04:13:58:ae:15:6f:ed:94:8d:16:cc:c7:42:4f:
e5:0a:ff:ae:3a:5a:cf:f0:ed:c4:41:77:79:3e:ed:24:68:7b:
47:ab:e6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org