Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BE8D4B36FE76C1A9EDA2C44EA96C7E922E6741C6.cer
File: BE8D4B36FE76C1A9EDA2C44EA96C7E922E6741C6.cer (raw, json)
Hash identifier: D5BdosjeVR3v/EyA1ksQO5/fYyLuB4uLnQGlS22eNwI=
Subject key identifier: BE:8D:4B:36:FE:76:C1:A9:ED:A2:C4:4E:A9:6C:7E:92:2E:67:41:C6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 7C68E91E19FE908B20E5FEA97276D18197DAABB9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/BE8D4B36FE76C1A9EDA2C44EA96C7E922E6741C6.mft
caRepository: rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 20 Feb 2024 15:13:28 +0000
Certificate not after: Tue 18 Feb 2025 15:18:28 +0000
Subordinate resources: AS: 262403
IP: 177.38.96.0/21
IP: 187.61.88.0/22
IP: 187.85.60.0/22
IP: 2804:3e0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:68:e9:1e:19:fe:90:8b:20:e5:fe:a9:72:76:d1:81:97:da:ab:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Feb 20 15:13:28 2024 GMT
Not After : Feb 18 15:18:28 2025 GMT
Subject: CN=BE8D4B36FE76C1A9EDA2C44EA96C7E922E6741C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ac:5a:2a:63:1f:a2:a1:25:d5:43:80:95:71:
e0:3d:17:fb:dc:8f:18:e4:a8:00:79:ae:d6:cd:ad:
b8:14:6a:dd:73:ef:08:f5:b2:5a:79:02:cd:c2:70:
12:52:83:66:96:3b:43:76:45:8a:88:22:3e:e3:d0:
2d:c4:9c:4b:91:58:69:f8:2f:6a:ab:2e:7f:11:d7:
e6:33:73:b4:2e:92:52:98:f5:48:d5:45:64:b9:5d:
42:d2:25:08:db:db:cd:1e:e4:b7:1c:7e:d4:c9:80:
ea:a0:56:93:02:74:b1:fd:b7:76:d8:80:e4:1d:d9:
94:e3:ce:18:a6:8c:95:5f:a3:8c:a2:d8:2d:8e:ec:
4e:af:9c:3c:30:d6:a0:ba:fb:93:fd:ce:71:d6:fa:
75:15:66:d3:49:9f:40:6f:96:72:fd:f5:8d:e6:2d:
3c:14:70:72:b7:4d:ff:c3:b3:2c:82:1c:50:59:41:
9f:a5:b6:8b:dc:18:50:43:9d:a3:fd:c8:a5:33:5f:
f9:12:e4:5d:be:1c:72:5d:2d:3a:5a:db:03:47:59:
53:a6:55:42:87:c9:af:c4:48:f7:59:df:88:77:50:
d2:45:cb:ac:c2:89:e6:2f:5a:60:7c:65:94:d6:50:
12:3c:56:86:00:75:60:14:51:69:53:7c:90:b3:fe:
75:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BE:8D:4B:36:FE:76:C1:A9:ED:A2:C4:4E:A9:6C:7E:92:2E:67:41:C6
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/BE8D4B36FE76C1A9EDA2C44EA96C7E922E6741C6.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.38.96.0/21
187.61.88.0/22
187.85.60.0/22
IPv6:
2804:3e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262403
Signature Algorithm: sha256WithRSAEncryption
08:74:ce:6d:20:75:be:0d:4f:95:32:f2:da:de:b8:37:5a:d6:
91:1b:07:c3:94:77:27:e1:f4:32:87:2a:67:88:13:68:c0:1d:
19:fa:22:55:d2:a6:47:db:82:5d:c4:c5:76:7a:bc:e3:24:6a:
f8:c3:7a:92:23:e9:2f:46:4f:d0:b4:a1:43:fe:ed:d0:3e:46:
9d:79:8a:e0:74:58:c7:17:7b:2f:57:fd:61:7e:12:25:6a:90:
f5:e9:a1:aa:40:40:d6:d7:0a:c5:6c:7c:d8:38:db:00:a4:a8:
c1:c7:47:5b:7b:3a:96:ea:24:6c:ce:d6:3c:5a:9c:84:b5:8f:
3a:6d:97:55:96:d9:ef:2f:d5:41:f0:40:21:82:95:19:3b:ab:
65:b6:08:1d:58:cf:6f:36:de:77:b2:46:b0:5c:d5:bf:ce:74:
8d:b0:03:f8:4e:9b:a4:8f:3d:95:f9:0b:56:79:bb:5a:83:e1:
8f:df:c8:5b:48:32:ca:a7:71:84:84:55:0e:0b:6c:f7:9f:50:
2c:4b:ba:cf:39:a4:67:11:6a:1d:36:64:c0:16:9a:92:82:cc:
84:cf:96:6e:8f:d2:58:0d:33:28:e7:fe:ec:6c:58:bf:34:35:
b4:e3:62:5b:bb:a6:a6:aa:51:f6:41:fb:f9:3f:c2:e7:99:9e:
30:ed:7f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org