Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.cer
File: C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.cer (raw, json)
Hash identifier: 7p7jlb7+8raxbI8bc9QKQm3BTpDmyAb88XE87I8iDRw=
Subject key identifier: C3:8F:0E:C3:DA:3C:88:11:7E:F7:7F:A3:AA:EC:72:34:0F:4C:43:7E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 08A8594FD6B460EC18867613B15AF73094F1DC3D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.mft
caRepository: rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 28 Nov 2023 19:44:30 +0000
Certificate not after: Tue 26 Nov 2024 19:49:30 +0000
Subordinate resources: AS: 268097
IP: 45.169.44.0/22
IP: 131.108.88.0/22
IP: 168.194.208.0/22
IP: 2804:57f4::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:a8:59:4f:d6:b4:60:ec:18:86:76:13:b1:5a:f7:30:94:f1:dc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Nov 28 19:44:30 2023 GMT
Not After : Nov 26 19:49:30 2024 GMT
Subject: CN=C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:17:3f:38:f9:dd:8e:e4:95:d2:3d:26:28:96:
3e:85:72:61:ce:4b:d8:25:ae:ee:2b:0e:45:64:b3:
66:b6:14:60:29:67:0b:81:08:68:c6:0c:3f:a1:0a:
83:68:4e:22:c2:86:87:31:fb:4c:43:b2:b2:8e:b0:
06:4a:b8:69:4d:95:e2:e3:6d:15:ff:03:7f:1c:1e:
06:12:37:2a:cf:f8:cb:a3:51:d5:2e:61:88:57:81:
6c:fc:48:e5:80:cc:14:11:74:b9:31:e7:ac:6c:c6:
95:50:70:c0:f7:3e:51:fb:59:1d:63:02:bc:47:51:
53:f9:14:8c:21:c5:78:52:98:be:79:9e:40:c6:e6:
42:c9:30:14:af:41:72:7a:b1:4a:ba:45:25:df:4f:
39:d3:cb:6d:bc:99:4a:04:02:1a:d2:78:c2:c3:12:
72:56:fd:8d:08:89:24:66:4b:f7:b1:43:54:19:96:
1f:fd:bc:33:c4:f9:8a:85:ba:ff:ec:b9:f7:2f:cf:
51:c6:45:2b:66:ea:cf:31:37:d7:95:a9:85:b4:da:
e8:91:0f:1c:96:49:76:b9:b9:ac:84:a6:3f:8f:51:
04:a7:aa:b1:98:c9:40:c6:b0:94:8a:ef:a0:eb:1a:
ec:c4:a6:5e:9a:44:ed:90:39:4e:84:ef:23:65:fb:
4f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C3:8F:0E:C3:DA:3C:88:11:7E:F7:7F:A3:AA:EC:72:34:0F:4C:43:7E
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.44.0/22
131.108.88.0/22
168.194.208.0/22
IPv6:
2804:57f4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268097
Signature Algorithm: sha256WithRSAEncryption
8b:4e:c8:c9:98:3f:14:fd:0b:58:83:a6:b1:b3:ae:76:ad:09:
54:91:2a:70:ee:34:cd:2a:37:3b:7f:64:4f:d9:15:de:35:5f:
3e:f1:b1:38:69:f5:61:2d:03:f1:35:9a:28:fa:1d:7e:d1:9a:
6a:a0:69:1c:42:63:c2:9a:b3:10:e4:65:f5:1d:70:ba:33:a2:
7a:80:90:29:a5:74:dc:15:1b:6c:f5:84:de:9d:4e:80:6b:1f:
e3:35:61:b4:47:f2:3e:23:da:ef:fc:5d:91:28:82:95:46:84:
bc:3f:20:88:ac:c4:97:3e:b8:6a:16:16:5f:57:49:8b:8a:33:
74:25:0c:80:db:25:2d:55:5d:3b:b8:2d:cf:02:aa:4c:b0:c7:
bd:32:67:a8:0e:5c:ad:84:07:ce:6d:01:56:bd:74:47:0b:b9:
fb:44:11:6c:b2:9a:a3:9b:0f:46:db:ea:25:fb:e5:14:ce:03:
e6:4e:f1:71:cb:23:b2:10:c2:1d:4c:14:3e:5b:13:7d:74:f7:
1e:8f:0c:ad:8b:84:09:4b:ca:45:e1:6f:7e:24:2c:cb:58:6a:
d2:c9:85:32:83:73:3f:4d:82:c3:a3:54:43:3c:4c:86:5c:71:
81:84:0d:b9:7c:ec:aa:fe:74:49:7a:fa:39:a6:a4:9d:2c:ab:
da:53:50:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:33 2025 by rpki-client