Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.cer
File: BFD60F81B153DBF24A19964DD2996A1F74DE57F7.cer (raw, json)
Hash identifier: +/Y0HpBbefNVVLIsfcgiSkT7NQjCLuIBB2ep9uAA5Ho=
Subject key identifier: BF:D6:0F:81:B1:53:DB:F2:4A:19:96:4D:D2:99:6A:1F:74:DE:57:F7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 5EE9111D7A7D189F9C2ACFAF6F73A233F39B54AE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.mft
caRepository: rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 13 Nov 2023 18:37:53 +0000
Certificate not after: Mon 11 Nov 2024 18:42:53 +0000
Subordinate resources: AS: 52872
IP: 168.0.236.0/22
IP: 168.197.136.0/22
IP: 177.128.192.0/21
IP: 2804:88c::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:e9:11:1d:7a:7d:18:9f:9c:2a:cf:af:6f:73:a2:33:f3:9b:54:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Nov 13 18:37:53 2023 GMT
Not After : Nov 11 18:42:53 2024 GMT
Subject: CN=BFD60F81B153DBF24A19964DD2996A1F74DE57F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dd:78:db:7c:6b:08:c0:fe:49:cf:b4:45:cc:
f0:92:74:72:7e:8a:11:f1:cb:81:f6:cd:41:03:d8:
34:81:8c:d3:85:37:a0:56:76:03:d6:d1:80:3e:89:
81:85:5d:97:d7:86:d9:9f:66:9e:3c:73:c9:60:28:
07:9c:02:cb:46:e6:4b:d0:32:bc:63:28:49:1b:f6:
5f:18:a5:00:24:7c:a8:77:bf:bd:9d:0f:2b:57:e6:
cf:3a:f5:36:9f:ee:b0:49:20:1d:a3:a1:d6:33:bc:
4c:71:90:65:40:f8:0b:a0:ea:f4:0a:35:b8:44:fd:
6b:b9:71:8a:31:30:1a:e3:f7:8b:44:0b:29:2c:5f:
b0:1c:7d:5b:a8:1b:a9:2c:7b:ee:e4:92:10:ec:86:
54:da:73:1f:de:8c:2e:1d:51:7e:77:8d:5d:fd:9d:
15:f3:06:6d:c8:c7:0e:f4:32:bd:47:48:f8:ea:4b:
90:7f:d6:f3:32:7d:d3:cb:bb:3c:9c:66:dd:04:f2:
c6:5b:d3:e3:00:67:a2:46:6d:94:bd:c7:7c:f3:b3:
0e:64:d3:3c:52:37:bb:be:7e:3d:be:ef:01:64:dd:
79:92:e9:6b:0a:bb:b9:9c:77:08:57:f1:a8:9f:e1:
73:f4:86:59:fc:42:1b:43:5d:c8:42:c3:12:a4:b8:
7c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BF:D6:0F:81:B1:53:DB:F2:4A:19:96:4D:D2:99:6A:1F:74:DE:57:F7
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.236.0/22
168.197.136.0/22
177.128.192.0/21
IPv6:
2804:88c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52872
Signature Algorithm: sha256WithRSAEncryption
75:1a:ba:11:ee:f3:da:fd:81:4c:2f:bc:28:06:20:ea:42:9c:
e9:06:cb:4a:fd:a2:6e:5e:38:77:c8:b8:49:c9:03:7a:24:35:
7f:6d:ea:30:be:47:fe:9b:c0:14:15:96:a4:c5:5f:4d:1d:3b:
b8:12:db:62:96:94:e1:db:13:d7:b5:dc:90:26:5c:7e:27:3c:
4a:1a:75:4b:41:7b:33:c6:55:33:8c:91:f1:0b:28:c8:2d:0c:
1a:c9:eb:d4:4d:4b:90:a5:3b:c9:9f:e5:b8:d2:23:19:88:c3:
d1:0c:39:82:7a:43:dd:92:27:ec:07:bf:ba:0c:bc:29:d9:31:
cc:a0:53:aa:a5:91:a0:70:4b:29:3b:40:3c:70:e3:3e:0e:29:
0c:92:62:d1:65:ba:1e:79:56:b6:17:01:e5:bd:22:d4:81:ff:
17:04:4a:9e:2a:49:a8:56:75:ea:a6:66:16:0f:9c:be:24:45:
7f:c3:88:89:04:d6:03:59:00:29:c3:a6:e3:40:6c:b9:84:af:
8e:e3:8d:f8:f4:ee:a7:eb:d8:36:0a:4a:9a:19:70:24:d8:0d:
31:e0:ba:14:53:ad:f2:76:a8:d2:1f:cd:4a:3b:9e:99:36:e2:
32:ec:f6:42:08:b7:71:91:af:ba:0e:81:4b:03:32:89:c3:78:
e7:6d:ed:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:13 2024 by rpki-client on console-ams.rpki-client.org