Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CF608992965DC7DE08820B93FC270DCED15124BC.cer
File: CF608992965DC7DE08820B93FC270DCED15124BC.cer (raw, json)
Hash identifier: TwXf6W993DBO5Uc7pN6LFnfeFWwe1iNrHH/L8210qWg=
Subject key identifier: CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 3DF0B4CC42E377922360C044C79809A7068778ED
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/CF608992965DC7DE08820B93FC270DCED15124BC.mft
caRepository: rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 08 Nov 2022 13:19:04 +0000
Certificate not after: Tue 07 Nov 2023 13:24:04 +0000
Subordinate resources: AS: 262819
IP: 143.202.68.0/22
IP: 168.196.108.0/22
IP: 177.8.208.0/21
IP: 186.250.208.0/21
IP: 2804:2a50::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:f0:b4:cc:42:e3:77:92:23:60:c0:44:c7:98:09:a7:06:87:78:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Nov 8 13:19:04 2022 GMT
Not After : Nov 7 13:24:04 2023 GMT
Subject: CN=CF608992965DC7DE08820B93FC270DCED15124BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:af:81:d2:3b:f9:ad:a3:28:de:d9:65:bc:
b1:01:7d:ca:2d:2c:cf:55:61:bc:02:8d:d0:9a:9d:
30:46:bd:b5:20:23:d6:5c:94:bb:9f:56:6e:6c:68:
6d:d6:17:8d:45:ed:9a:5e:c4:ad:d0:5c:84:3f:b8:
90:fb:43:4e:14:8f:21:78:7a:fe:92:f9:35:ad:0a:
02:c4:c4:99:92:a3:d2:76:d1:ea:be:e0:45:94:b6:
7a:f7:66:fc:bc:74:31:bb:9d:46:19:48:66:73:00:
f8:72:67:d6:55:f3:ac:5a:26:28:c4:57:1a:7d:7e:
49:76:0d:b4:8f:9c:12:31:54:c7:b5:e6:a9:36:aa:
2a:c5:67:a9:fe:e9:e9:fa:7b:d0:32:40:37:c5:de:
be:fd:bd:bf:dd:af:4f:a6:f5:0c:7f:16:a2:f5:93:
62:31:64:6b:d5:ca:0f:95:b1:42:2d:30:8a:b7:6e:
9e:17:7d:36:c6:1f:3a:8a:96:2e:15:c3:d2:6e:56:
9e:ee:64:0f:d3:b1:e7:ce:b6:1f:21:f1:23:34:d7:
1e:2e:0b:5c:55:29:6f:ca:92:f5:2d:30:2a:ab:8e:
06:85:a8:97:1f:29:fc:f0:7d:82:a7:32:ac:02:27:
7a:0f:db:73:cc:11:da:48:2f:4b:33:9c:c6:d0:5e:
f3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/CF608992965DC7DE08820B93FC270DCED15124BC.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.68.0/22
168.196.108.0/22
177.8.208.0/21
186.250.208.0/21
IPv6:
2804:2a50::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262819
Signature Algorithm: sha256WithRSAEncryption
10:6a:12:ec:e4:d2:3b:cc:da:f4:2e:f9:8a:f0:04:7b:16:c9:
8a:44:ae:86:55:b4:78:43:bc:12:68:17:5a:b0:40:92:2b:ad:
f6:29:96:11:3a:b6:2c:9b:2c:a2:fd:32:09:d5:69:00:36:28:
11:67:4b:5b:46:2a:25:f4:94:47:dc:d8:d3:6f:e9:da:37:27:
ad:6c:a6:74:3b:66:73:08:4b:7f:f4:3d:21:8a:a7:39:23:a5:
e8:c2:10:75:db:f9:14:d6:41:c7:32:37:30:a5:7b:12:1c:b0:
e4:9b:f3:e2:8c:fa:85:ed:e6:8f:d5:6a:e4:70:f1:79:b4:48:
bd:86:bd:d7:2c:0a:17:02:43:b3:01:20:f8:b5:ae:df:ef:a8:
5c:c1:85:1a:d1:eb:bd:d8:49:9b:a3:2e:b8:0a:d6:b7:2f:5a:
80:2a:73:a3:0a:fd:ec:f6:90:01:cb:12:40:03:d8:d9:64:72:
22:9e:86:a3:4c:a9:3d:b4:3b:f0:cb:d6:5e:33:56:c3:d6:14:
06:ae:a0:49:cc:5c:4a:40:20:9e:b2:8f:01:e3:55:6b:7b:43:
75:c0:c4:21:ae:ee:24:c7:ad:81:45:fe:32:cf:e7:fa:d5:e6:
a1:63:0a:1f:06:39:3a:bf:3f:8b:20:9f:1f:a3:0d:68:2d:5d:
fb:0b:06:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org