Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CF86A656A890F8E1243ABE2030F880B7CE08C91F.cer
File: CF86A656A890F8E1243ABE2030F880B7CE08C91F.cer (raw, json)
Hash identifier: In2+I2BQJNYuC3aK2/fbzx06OPT1fVfnczhcvtiS7c8=
Subject key identifier: CF:86:A6:56:A8:90:F8:E1:24:3A:BE:20:30:F8:80:B7:CE:08:C9:1F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 650D58687E2520C3D4F3ADB01370487E51F0AD49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/CF86A656A890F8E1243ABE2030F880B7CE08C91F.mft
caRepository: rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 21 Oct 2023 17:18:57 +0000
Certificate not after: Sat 19 Oct 2024 17:23:57 +0000
Subordinate resources: AS: 264939
IP: 168.228.152.0/22
IP: 2804:3040::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:0d:58:68:7e:25:20:c3:d4:f3:ad:b0:13:70:48:7e:51:f0:ad:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Oct 21 17:18:57 2023 GMT
Not After : Oct 19 17:23:57 2024 GMT
Subject: CN=CF86A656A890F8E1243ABE2030F880B7CE08C91F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:38:e8:fc:d0:b0:38:9f:99:ef:96:91:12:
0b:d8:29:a6:8f:5c:2e:6d:7a:78:f7:da:db:48:61:
76:4a:06:6d:db:d8:34:8c:e5:eb:35:b6:0e:ae:3c:
a1:89:17:8a:16:e6:ee:a3:c1:eb:84:24:0d:ec:ec:
2d:f1:40:ac:c8:3f:85:3e:9a:25:22:37:bd:7f:b1:
8c:a0:d1:b0:75:17:2b:10:89:92:42:81:cf:df:78:
df:47:37:36:36:2f:31:3a:8e:e0:f5:d9:8c:fe:69:
3b:04:f4:e4:31:43:fb:f2:29:ce:09:9d:51:ab:b4:
14:e0:67:ff:21:de:53:08:b4:cf:fa:2b:8a:17:70:
60:59:37:a8:7b:17:05:f4:dc:4f:35:01:bb:86:31:
e5:e4:9f:dd:53:59:94:7e:9f:0f:4e:ce:d3:da:1f:
29:4b:1f:57:2d:3c:ef:5e:fb:94:72:c9:a6:30:b4:
bf:fe:5f:56:f4:2f:8c:3e:3b:b5:cf:5f:cf:ae:79:
e8:c9:b1:b3:6f:7e:92:ee:cf:35:45:73:5e:5b:34:
ce:0d:46:4e:03:be:34:b8:04:19:bf:b0:27:30:0e:
99:08:08:dd:a8:67:df:92:a2:3b:a5:eb:35:61:95:
7d:66:9c:40:e3:57:6f:83:2b:12:b3:a8:48:19:84:
02:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CF:86:A6:56:A8:90:F8:E1:24:3A:BE:20:30:F8:80:B7:CE:08:C9:1F
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/CF86A656A890F8E1243ABE2030F880B7CE08C91F.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.152.0/22
IPv6:
2804:3040::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264939
Signature Algorithm: sha256WithRSAEncryption
94:9f:f3:44:27:7f:8a:ce:87:c5:f5:3f:dc:0b:3c:6d:69:a0:
1a:de:e3:ae:9b:24:98:0a:81:3f:9c:4e:6d:1b:48:94:c9:d5:
15:33:eb:b8:61:d4:e8:2b:51:21:81:de:a9:01:52:b1:ac:c0:
76:5f:4c:30:3a:22:41:55:6a:9e:51:2e:da:3c:42:34:47:4b:
00:86:89:18:da:6c:95:42:db:36:6e:6b:75:32:41:a8:61:df:
b4:b1:49:76:46:6d:99:75:7b:af:cb:41:46:4f:6a:c2:44:d7:
a8:6b:d7:f7:9a:91:92:03:15:b2:f6:13:cf:b7:30:a8:6a:28:
54:93:e7:01:11:5f:30:82:80:6f:48:31:8f:c8:91:58:f7:b7:
88:71:32:81:f3:ef:3c:7a:4c:c1:1b:a8:f4:c5:91:53:45:a4:
80:61:d5:ec:28:12:ad:47:65:79:e2:f3:1f:85:cd:7d:8e:a7:
41:a0:fc:38:01:7a:f6:61:bc:a7:07:07:9e:b8:79:4a:a9:59:
77:38:b1:f4:1b:58:51:53:29:ba:ec:c4:6a:ce:2f:60:f6:73:
79:50:bd:7a:ed:7d:6b:c6:3a:73:fd:a2:81:0a:ae:ae:57:d0:
8d:2e:a2:d6:2b:46:7b:a1:30:cc:c9:d2:31:45:03:45:c4:fa:
a5:a7:0f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org