Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C8A88E2290299A468AE6EC1703931B7E1914CF8B.cer
File: C8A88E2290299A468AE6EC1703931B7E1914CF8B.cer (raw, json)
Hash identifier: 23prrfkwTnU3dwQEZCQjAOLRdYTqb2ONvCzTAPSXbcc=
Subject key identifier: C8:A8:8E:22:90:29:9A:46:8A:E6:EC:17:03:93:1B:7E:19:14:CF:8B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 6A4A74A0A4683161BD466E16A8ADA13E0FA85488
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/C8A88E2290299A468AE6EC1703931B7E1914CF8B.mft
caRepository: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 24 Jan 2024 11:17:11 +0000
Certificate not after: Wed 22 Jan 2025 11:22:11 +0000
Subordinate resources: AS: 263496
IP: 170.244.216.0/22
IP: 191.243.56.0/21
IP: 2804:12c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:4a:74:a0:a4:68:31:61:bd:46:6e:16:a8:ad:a1:3e:0f:a8:54:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Jan 24 11:17:11 2024 GMT
Not After : Jan 22 11:22:11 2025 GMT
Subject: CN=C8A88E2290299A468AE6EC1703931B7E1914CF8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:45:0c:c8:b7:43:76:ac:c7:61:96:47:34:16:
9e:87:04:e1:9c:05:73:1a:e5:cc:b7:93:50:6f:8d:
b4:63:ef:dd:72:0e:f0:d4:8e:bd:4b:4e:65:db:1b:
04:26:84:ff:37:e5:14:08:36:4c:6a:18:41:f2:f2:
46:02:1c:a0:5e:c7:10:ef:53:d7:93:b5:e2:76:b0:
71:b9:31:2c:f0:c1:cd:44:1d:7e:0a:81:a3:04:e0:
40:82:fe:cd:d9:55:01:b1:29:57:63:f4:1b:04:b7:
9c:8f:c3:6a:9d:c0:b1:62:12:ef:3e:c2:3d:37:ce:
e1:fa:68:fb:dd:0e:36:02:6f:37:94:0c:c4:4e:fc:
e7:2c:61:a0:67:53:df:1b:22:c2:1b:56:2f:32:61:
7b:ea:ed:d9:48:53:c4:3f:02:93:e0:61:63:bc:6c:
56:a1:46:71:df:29:2a:69:f3:38:a1:ec:e4:98:0d:
d5:99:b5:cc:e6:e7:5e:78:41:81:dc:68:2f:77:f4:
a3:da:70:af:7f:7e:8e:dd:c4:4e:3e:8f:da:14:e8:
7b:fd:ec:16:2a:c0:ee:94:a9:82:21:79:ea:1e:21:
c1:38:c7:cc:8a:db:1d:85:f3:63:04:d9:dc:61:48:
1b:b1:c5:7b:25:27:50:a1:a9:d6:4d:ed:39:11:58:
0d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C8:A8:8E:22:90:29:9A:46:8A:E6:EC:17:03:93:1B:7E:19:14:CF:8B
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/C8A88E2290299A468AE6EC1703931B7E1914CF8B.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.216.0/22
191.243.56.0/21
IPv6:
2804:12c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263496
Signature Algorithm: sha256WithRSAEncryption
b7:9a:4c:42:8c:71:d7:40:f1:79:20:f8:e3:8a:c1:d9:51:e7:
bc:26:d6:8c:75:a4:88:bd:da:62:d5:be:00:43:87:08:71:cb:
d3:ea:cc:ab:84:e4:32:cc:1b:cd:61:2e:90:9e:f3:e1:2c:20:
ce:7d:df:cb:43:ff:ce:f8:9a:92:58:85:a8:5f:4b:71:c8:a1:
31:f0:ad:d0:6b:bd:13:7a:70:ab:ad:c1:65:e4:93:84:8b:12:
a6:1d:6f:b5:03:80:cc:6f:3a:46:d6:cf:8a:c1:0f:c1:de:ff:
c5:1b:d0:86:2f:40:47:b1:9a:9d:ad:e7:3e:44:4e:b2:78:8a:
c8:55:36:d9:6d:25:5f:c4:41:fa:77:a8:6d:49:e1:9c:43:81:
97:dd:e6:dc:95:aa:53:8d:2a:94:f8:15:a2:ad:ad:3d:6e:57:
df:eb:2f:22:66:a6:a3:d7:7a:33:5e:39:00:32:ba:36:31:70:
50:84:25:96:6e:e5:62:63:7d:ab:75:f0:dc:5a:85:70:4d:51:
4d:2a:16:3b:7f:56:d4:88:34:5b:f1:d4:6c:c4:44:a5:38:19:
a1:c2:ae:10:b2:0f:4d:25:22:e5:7a:09:87:10:83:8f:31:c7:
ad:a2:b4:7c:e6:90:57:ca:61:f5:04:db:1e:a9:b4:14:de:a3:
32:7d:cc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:14 2024 by rpki-client on console-ams.rpki-client.org