Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer
File: BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer (raw, json)
Hash identifier: D9qwehtKjUYnC675Gebtajp19sqGXWnxdgRp+OkyGf0=
Subject key identifier: BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 5BF53209B18DFC7D61A5D74ACA8AE6FE15EDB331
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.mft
caRepository: rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 13 Sep 2023 11:05:08 +0000
Certificate not after: Wed 11 Sep 2024 11:10:08 +0000
Subordinate resources: AS: 61614
IP: 45.232.212.0/22
IP: 168.227.208.0/22
IP: 2804:4afc::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:f5:32:09:b1:8d:fc:7d:61:a5:d7:4a:ca:8a:e6:fe:15:ed:b3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Sep 13 11:05:08 2023 GMT
Not After : Sep 11 11:10:08 2024 GMT
Subject: CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:2b:e6:d8:33:54:a3:d3:28:b3:02:a5:3a:
1f:7b:a7:5a:00:ff:7d:53:4c:2f:b6:55:d1:94:60:
b8:2c:c2:0e:60:bd:67:5b:bd:f6:b1:a1:da:de:e8:
cd:14:9e:6d:b7:86:a6:d2:db:ea:3f:fb:ae:be:c8:
b3:fb:3f:a7:ef:75:c7:05:d5:80:51:fc:ee:28:9c:
0b:66:0b:04:b6:24:53:5b:9d:06:42:e1:15:a8:fd:
bf:70:12:b0:fb:b7:4b:e2:49:ae:7f:bb:cc:b0:f9:
cf:7d:93:0c:26:2a:5d:b4:e5:c5:53:e3:4c:27:0d:
54:6f:3f:80:9d:50:52:6a:11:80:a0:cf:74:5d:71:
79:8c:ea:80:4d:be:93:92:f6:a1:57:d3:ac:06:59:
1e:cc:c0:3f:81:59:2e:f9:f7:bf:0b:60:4b:4b:54:
42:7e:bd:61:72:0d:91:76:11:fd:74:b5:d8:70:1d:
68:2e:ab:c9:81:f5:bb:e2:b4:0f:2c:05:cc:a7:6c:
ac:9c:7c:38:fb:51:66:57:c8:ae:25:54:f2:0f:51:
c6:dc:d2:8a:bf:11:bb:74:0b:10:d6:c9:f3:21:04:
78:52:71:b1:e5:40:cd:59:aa:85:9a:a4:d2:01:f1:
55:58:fa:25:69:d2:24:ac:cb:c1:7f:b4:4a:c2:7f:
ac:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.212.0/22
168.227.208.0/22
IPv6:
2804:4afc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61614
Signature Algorithm: sha256WithRSAEncryption
91:c6:4b:f3:b6:69:bd:31:bd:3c:1d:57:f6:96:01:b8:44:08:
bf:67:94:42:81:27:c3:9e:e2:f1:4b:a7:8e:70:64:47:aa:49:
7a:66:29:86:a1:5c:24:c7:25:3f:ba:82:9b:7f:20:7b:77:fb:
fc:40:9c:23:bc:aa:9b:b6:bd:c8:66:1f:8b:02:e2:e8:b5:9a:
80:38:35:6c:5b:2c:45:09:2e:af:65:e0:78:bc:8c:13:1b:ed:
3a:3d:e9:33:e9:04:19:a2:be:1b:5c:9d:f0:8e:1b:e7:11:7d:
65:cf:be:e8:89:56:6f:b6:a4:db:bf:96:f5:d2:1c:e1:0e:c1:
cb:c4:99:02:3d:4c:0d:ec:c9:49:ce:e1:a0:12:8d:86:50:82:
7d:f7:19:22:e4:00:35:dd:a3:46:d3:00:a9:87:da:84:ab:26:
a8:c6:74:bf:b3:ee:01:1f:e4:fd:d2:7e:26:bc:6f:2a:ef:e4:
af:6e:59:ed:26:37:e3:3b:f6:ff:f6:ba:16:0e:69:98:80:1b:
5e:e1:32:1b:8a:dd:1c:b8:bc:3c:01:8c:e6:b6:ab:1a:f5:1a:
3b:29:8f:a0:ba:40:d6:ef:57:cc:df:40:b5:5c:c9:1a:81:f9:
b5:ee:75:e5:0c:11:d8:29:34:07:c3:22:5e:19:98:1c:64:06:
cf:b9:15:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org