Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CA1EAF5254A089DAEFD2DB19FE65104FDCFD8938.cer
File: CA1EAF5254A089DAEFD2DB19FE65104FDCFD8938.cer (raw, json)
Hash identifier: xqonLM6HBy2/lpxelDhb6sGItQbqE9M46YkKTjidhjc=
Subject key identifier: CA:1E:AF:52:54:A0:89:DA:EF:D2:DB:19:FE:65:10:4F:DC:FD:89:38
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 56BB8929D456D29487636DE33D6DD5457BA31D53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/CA1EAF5254A089DAEFD2DB19FE65104FDCFD8938.mft
caRepository: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 12 Mar 2024 16:21:04 +0000
Certificate not after: Tue 11 Mar 2025 16:26:04 +0000
Subordinate resources: AS: 264233
IP: 138.117.116.0/22
IP: 170.80.100.0/22
IP: 2804:249c::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:bb:89:29:d4:56:d2:94:87:63:6d:e3:3d:6d:d5:45:7b:a3:1d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Mar 12 16:21:04 2024 GMT
Not After : Mar 11 16:26:04 2025 GMT
Subject: CN=CA1EAF5254A089DAEFD2DB19FE65104FDCFD8938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f1:7e:47:db:c0:d4:e6:3d:57:f3:d1:49:28:
6c:73:0b:ba:fc:a7:18:23:d0:fa:be:99:0e:f9:0f:
83:fc:6b:1b:23:b5:27:cf:9e:19:3a:54:c9:64:68:
c5:f4:8f:c7:04:45:91:73:3a:7a:b4:a2:dc:e2:d5:
9a:5c:22:f1:6a:68:1d:50:23:10:05:e0:f6:94:ee:
1a:04:47:6b:f4:cd:9f:a0:75:94:1b:4a:76:37:20:
90:63:a8:e9:53:c9:4a:f3:90:71:47:c6:41:ee:4e:
d1:fa:70:4d:90:8f:5a:9f:b9:75:74:b4:0d:c2:f8:
21:25:e9:6b:4a:30:2d:84:6d:de:2b:6a:c3:f1:29:
86:e3:ed:c8:bf:f8:87:f9:2b:b5:46:3b:23:4f:3c:
be:5d:4a:5e:b1:ae:00:fd:b8:c7:b1:2e:8e:12:07:
18:b5:c9:ab:5b:1d:b0:09:81:d4:f7:37:54:19:0e:
8e:30:0f:cb:59:ad:d5:f0:bd:3e:22:49:5e:a2:c6:
01:68:02:e6:1f:7d:d1:5e:91:39:04:4b:ba:1c:aa:
25:51:fc:0f:22:b7:bf:6a:6a:a5:d0:0c:2a:c1:72:
57:70:f0:ce:d3:9a:ba:52:79:68:74:e3:64:ad:5e:
17:8d:28:af:51:ce:5c:5e:4c:d0:a5:eb:a8:c0:4a:
c4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CA:1E:AF:52:54:A0:89:DA:EF:D2:DB:19:FE:65:10:4F:DC:FD:89:38
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/CA1EAF5254A089DAEFD2DB19FE65104FDCFD8938.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.116.0/22
170.80.100.0/22
IPv6:
2804:249c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264233
Signature Algorithm: sha256WithRSAEncryption
3f:83:2f:79:b0:e5:7e:f5:c7:1b:79:d3:5f:21:39:3a:bb:f9:
07:46:14:db:11:07:48:67:39:dd:a5:5b:50:d2:86:f0:5a:14:
32:41:c9:00:b8:2c:d5:35:ad:0c:b2:80:8a:e6:fa:74:86:43:
a3:e3:48:ca:a7:43:c2:73:3f:87:23:39:fd:2f:c5:cf:a6:2d:
da:56:81:12:8d:40:3f:54:7c:5f:fa:cd:1c:4f:90:24:ee:6c:
12:e4:01:a2:11:3d:5a:3a:72:c4:ed:a9:84:05:97:a6:d5:57:
80:ad:e2:43:fb:0c:3b:e1:1f:cc:62:ca:69:0a:0c:07:31:45:
d6:e0:79:de:c8:d7:c1:f6:19:35:27:9c:0e:a1:a2:3d:cb:64:
b0:dc:d2:e2:df:a6:c5:2c:5c:51:7f:f1:ee:aa:97:d2:c9:7c:
26:bf:fe:8f:5a:a1:76:54:0d:c1:e9:95:39:69:9f:ab:0a:82:
60:a8:25:7b:e9:f3:14:ff:37:c4:ea:7d:6f:f8:62:23:08:98:
4f:70:72:a8:15:8c:f9:91:7f:87:ae:6b:8d:76:dd:b5:f5:43:
64:4f:d0:48:68:a6:e6:ee:9c:58:7d:98:07:a0:dd:88:56:05:
ee:0a:56:5f:44:b2:b1:c1:00:51:7e:98:29:59:46:1b:2a:6b:
38:f9:f3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org