Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CFA5D2D31FF7C5652C6CCC8C08D9F11EF9DECE5E.cer
File: CFA5D2D31FF7C5652C6CCC8C08D9F11EF9DECE5E.cer (raw, json)
Hash identifier: qDrmSjxOCvxfT4med+IGO2V5Hx3u1IEgvLdjqsGptJc=
Subject key identifier: CF:A5:D2:D3:1F:F7:C5:65:2C:6C:CC:8C:08:D9:F1:1E:F9:DE:CE:5E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 723243C06236DF6B6DE95350BDF4AC2A5B43149C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/Dwn9i12M51hSX1ZGCtC74QDHMRQTQc9x2SDhT8YYpzWZ/0/CFA5D2D31FF7C5652C6CCC8C08D9F11EF9DECE5E.mft
caRepository: rsync://rpki-repo.registro.br/repo/Dwn9i12M51hSX1ZGCtC74QDHMRQTQc9x2SDhT8YYpzWZ/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 12 Aug 2023 00:09:45 +0000
Certificate not after: Sat 10 Aug 2024 00:14:45 +0000
Subordinate resources: AS: 268421
IP: 45.160.184.0/22
IP: 2804:50f4::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:32:43:c0:62:36:df:6b:6d:e9:53:50:bd:f4:ac:2a:5b:43:14:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Aug 12 00:09:45 2023 GMT
Not After : Aug 10 00:14:45 2024 GMT
Subject: CN=CFA5D2D31FF7C5652C6CCC8C08D9F11EF9DECE5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a4:b1:09:a1:b1:0e:34:22:aa:33:91:47:0f:
59:c9:02:bb:99:23:6d:d4:fe:a8:dc:a8:0b:9f:9a:
df:06:fc:4b:0f:c7:f9:d7:71:f6:b2:e7:4a:21:20:
86:59:fc:5e:ac:ca:ca:6c:89:e6:43:8a:6f:14:d8:
38:92:39:1b:f9:de:b4:1a:c1:32:bc:4b:88:62:83:
40:01:bc:a1:3b:d2:b8:3c:c5:ee:78:87:cd:cf:6f:
bf:7a:ab:3c:91:a9:c8:33:73:1b:91:52:1f:74:3c:
8a:f2:7d:15:12:64:22:2c:6f:50:85:68:45:55:90:
3b:32:35:08:a0:ba:d4:86:f3:eb:b2:8f:f3:6a:79:
fa:37:1c:6f:08:e4:d1:7e:fa:ef:db:98:ee:94:d4:
64:59:49:0f:9f:9b:d9:8d:f8:ef:fb:58:77:4b:cd:
b5:14:12:bf:8c:bf:81:74:04:07:ba:e8:96:81:81:
ea:9f:fc:24:df:25:2e:ed:02:34:75:2c:2c:de:4f:
30:5a:19:5a:8c:d8:40:06:65:cf:bd:d3:04:36:85:
93:37:3c:ca:ba:4e:27:db:bc:18:e3:bf:eb:b6:26:
f9:be:ff:cc:06:f4:04:d7:c2:1c:8e:f0:2b:fb:eb:
74:09:c2:d0:f2:b1:70:f1:10:2c:ae:6c:5d:38:b3:
2e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CF:A5:D2:D3:1F:F7:C5:65:2C:6C:CC:8C:08:D9:F1:1E:F9:DE:CE:5E
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dwn9i12M51hSX1ZGCtC74QDHMRQTQc9x2SDhT8YYpzWZ/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dwn9i12M51hSX1ZGCtC74QDHMRQTQc9x2SDhT8YYpzWZ/0/CFA5D2D31FF7C5652C6CCC8C08D9F11EF9DECE5E.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.160.184.0/22
IPv6:
2804:50f4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268421
Signature Algorithm: sha256WithRSAEncryption
a1:b9:75:bc:87:59:24:59:b7:74:c4:19:3e:b2:df:9b:80:0b:
3d:b6:c2:60:3c:ea:d4:35:4e:74:8e:a2:24:15:10:78:00:c3:
75:d2:d3:a8:d2:b1:37:b1:87:d9:dd:6d:18:ca:e2:c4:b3:4f:
f5:1a:21:e2:d8:3c:07:23:ee:4d:d1:de:28:4c:ea:fe:55:6a:
25:c1:64:e2:76:47:fc:1a:76:7b:c7:9b:ab:8a:15:6c:61:e0:
23:1c:7c:29:25:b8:01:7a:db:b8:0f:8e:20:87:3a:ba:f9:de:
fa:5a:5f:27:a4:71:c2:e8:31:fd:01:cc:14:af:f0:25:ab:b1:
11:5c:7c:61:8c:ea:5a:a4:f0:c0:c5:19:d9:c5:ca:fd:21:0d:
23:88:e6:52:0b:33:61:a5:f1:5f:ba:cf:81:b6:b6:cb:b0:6d:
33:71:db:e6:69:da:59:9c:24:a5:34:fb:6c:0a:05:3f:78:c8:
74:fd:6c:ad:ac:23:a7:a7:d5:28:c6:b6:21:ca:7c:ad:57:f1:
d6:c4:1d:4b:ad:6c:2a:7b:9c:ca:86:aa:fe:cc:f9:03:f1:f8:
b1:01:bd:85:b4:5d:cf:b8:41:bb:d1:9e:22:57:04:b4:ac:c4:
be:67:6f:0c:9f:df:fc:78:ce:1f:70:dd:b6:ae:42:c7:3b:43:
df:f1:81:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org