Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CB881256430FCB4BC4801FC2D457D20E87B21562.cer
File: CB881256430FCB4BC4801FC2D457D20E87B21562.cer (raw, json)
Hash identifier: DWEjvLD528x4GrFc7zLsAg2hMluiPe2y52fo1Sa4+lg=
Subject key identifier: CB:88:12:56:43:0F:CB:4B:C4:80:1F:C2:D4:57:D2:0E:87:B2:15:62
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 6D0FCA1EBC8814AB04B90B21A2BD0730CE8FD101
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/CB881256430FCB4BC4801FC2D457D20E87B21562.mft
caRepository: rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 23 Jan 2024 22:47:09 +0000
Certificate not after: Tue 21 Jan 2025 22:52:09 +0000
Subordinate resources: AS: 264281
IP: 138.121.52.0/22
IP: 170.233.172.0/22
IP: 170.244.12.0/22
IP: 2804:2570::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:0f:ca:1e:bc:88:14:ab:04:b9:0b:21:a2:bd:07:30:ce:8f:d1:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Jan 23 22:47:09 2024 GMT
Not After : Jan 21 22:52:09 2025 GMT
Subject: CN=CB881256430FCB4BC4801FC2D457D20E87B21562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:0a:72:c4:95:4b:e2:2b:ff:04:1f:94:34:
55:57:32:ca:32:fe:64:f8:c7:bf:51:8b:25:5c:9d:
c7:88:ba:f5:96:89:c6:c3:c4:a9:6c:41:8c:ef:11:
8a:40:1a:43:ac:fa:c9:a1:b9:e4:c8:a9:b4:f0:7a:
22:af:b0:98:12:6a:31:bc:eb:d1:6c:e9:9a:09:f4:
7f:fd:b4:64:df:d4:3d:70:ff:39:ee:ef:ac:4e:22:
a5:41:11:f0:50:af:14:e4:36:a6:48:97:ed:11:10:
58:8b:ab:64:81:ba:15:0c:5e:0c:92:d1:9c:20:46:
9e:0d:2d:98:e9:d7:d2:4d:fe:4c:b1:37:e1:7f:a0:
0c:bb:db:9b:b9:dd:ca:87:73:b7:d1:b9:ce:68:4d:
1a:7a:e1:88:48:38:5e:18:05:1f:84:50:a3:af:a6:
b9:38:01:4b:37:32:f0:ab:54:69:b5:1f:b7:17:0a:
e2:13:0a:a8:51:38:9a:13:58:f3:ec:c6:68:2b:91:
f2:27:e9:0d:65:df:2c:36:89:2c:8d:74:57:ef:4b:
e6:91:2b:1b:06:7a:7f:50:7a:a0:37:3a:f5:7b:23:
6d:0a:e2:b7:38:1b:2d:8d:cc:ac:85:c4:d5:fd:a8:
c6:0b:4d:a5:07:01:3f:cd:80:41:7c:6a:49:e2:43:
52:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CB:88:12:56:43:0F:CB:4B:C4:80:1F:C2:D4:57:D2:0E:87:B2:15:62
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/CB881256430FCB4BC4801FC2D457D20E87B21562.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.52.0/22
170.233.172.0/22
170.244.12.0/22
IPv6:
2804:2570::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264281
Signature Algorithm: sha256WithRSAEncryption
0e:a0:29:3d:39:f5:86:37:7f:5e:2c:6f:9a:85:e5:88:ac:5d:
2b:fb:96:e4:fa:d9:62:f8:c7:1e:c9:af:bc:af:4e:d2:b7:0e:
2c:34:59:d5:f1:ab:ea:a3:13:08:54:5d:b8:f5:b8:f2:13:af:
93:e0:28:9a:d5:8f:5b:10:9a:aa:f2:a0:58:9e:20:ab:c0:62:
26:a2:a2:19:67:9c:34:83:61:99:5a:ca:d8:32:34:04:62:40:
c0:88:80:7c:57:75:9a:2b:0b:24:4b:56:bd:8b:38:d4:4b:a7:
7e:c6:91:b3:15:e6:ad:ed:d0:ac:6f:7c:cd:de:4b:83:f4:00:
5e:97:57:c2:78:75:18:63:c8:53:53:35:93:a7:49:7b:e3:87:
2c:13:a5:1f:13:9b:7e:b3:62:0a:a5:1a:d2:0b:56:f1:48:b7:
90:e9:eb:40:8d:c5:9a:cf:54:27:9d:b2:ee:47:47:af:a7:05:
dd:7e:72:d7:26:c3:e4:7b:a3:80:bc:66:c0:a8:73:e5:22:ac:
d9:63:85:97:f5:9f:e1:a5:20:62:ea:a4:55:6e:af:08:b3:48:
99:9a:1f:1d:f0:d2:e6:cb:02:cf:0b:3c:a1:0c:d2:2e:38:f8:
3d:bc:15:fc:d7:6d:a3:cf:80:7f:cf:1d:73:67:0a:3a:cd:a6:
d3:af:af:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org