Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D1795B4D963F93BCFF3CE3B9E64B7626B5E5B30C.cer
File: D1795B4D963F93BCFF3CE3B9E64B7626B5E5B30C.cer (raw, json)
Hash identifier: m16hEslfj9HMT66yhCtkQYO47nYyy5sR+fpjeHlNvaU=
Subject key identifier: D1:79:5B:4D:96:3F:93:BC:FF:3C:E3:B9:E6:4B:76:26:B5:E5:B3:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 3DDAEC99FDC16E184F87003FBA5050A0E05CBEAD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/D1795B4D963F93BCFF3CE3B9E64B7626B5E5B30C.mft
caRepository: rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 14 Dec 2022 11:12:57 +0000
Certificate not after: Wed 13 Dec 2023 11:17:57 +0000
Subordinate resources: AS: 264001
IP: 143.0.200.0/22
IP: 170.0.24.0/22
IP: 170.246.188.0/22
IP: 2804:2948::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:da:ec:99:fd:c1:6e:18:4f:87:00:3f:ba:50:50:a0:e0:5c:be:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Dec 14 11:12:57 2022 GMT
Not After : Dec 13 11:17:57 2023 GMT
Subject: CN=D1795B4D963F93BCFF3CE3B9E64B7626B5E5B30C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:86:54:f0:2e:84:36:21:99:5c:7c:17:ad:8a:
93:01:f0:0a:60:1f:5d:19:e8:12:7c:55:f3:81:69:
e5:fa:bf:30:54:74:fb:a6:11:9a:e1:40:5a:31:ab:
d4:7c:a6:4c:38:ec:4b:e6:38:51:1b:a8:80:a6:ec:
48:64:7a:3c:bd:e5:3d:8c:64:66:17:47:f1:7a:20:
d5:93:54:d9:44:18:91:a1:24:eb:da:7b:5b:03:02:
54:bf:63:c8:3e:43:f5:33:b0:9b:55:c3:36:cc:20:
99:9c:1d:3f:c5:45:04:bb:ea:ea:1c:b3:ab:0c:20:
22:b4:67:7c:c1:f6:ff:00:73:ad:af:ff:e6:c0:bf:
00:23:53:d0:0a:90:25:09:0a:0c:de:55:18:10:a1:
24:07:e6:6f:e6:4d:d7:37:6a:9f:c6:f9:4c:df:c3:
d6:10:ef:2a:78:62:f8:c9:0f:2c:ea:87:9c:f8:3f:
26:e7:f7:16:a6:0f:87:63:1f:83:bb:3b:9e:01:02:
61:34:a0:94:04:76:c5:14:c7:79:41:e0:99:25:a8:
65:25:a0:04:7e:66:6b:68:1a:43:64:b5:17:4e:15:
82:9d:7a:b7:10:90:eb:2f:8a:f3:4d:d1:16:76:43:
6c:03:f0:18:d9:62:51:7c:6f:36:6c:e1:55:f4:5c:
46:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D1:79:5B:4D:96:3F:93:BC:FF:3C:E3:B9:E6:4B:76:26:B5:E5:B3:0C
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/D1795B4D963F93BCFF3CE3B9E64B7626B5E5B30C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.200.0/22
170.0.24.0/22
170.246.188.0/22
IPv6:
2804:2948::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264001
Signature Algorithm: sha256WithRSAEncryption
58:11:9e:a2:16:33:91:ea:c9:f2:8a:85:2b:0e:25:91:e7:d5:
95:97:78:2c:20:b4:d8:c3:27:d0:71:18:e2:68:10:2f:6a:1a:
95:96:6a:72:ab:80:17:91:64:fc:62:f2:04:ae:60:36:9c:98:
d8:ca:2a:82:bb:de:17:e0:8b:15:28:23:e6:ee:15:5b:0d:93:
a7:f2:63:3f:63:3e:79:45:54:05:fe:b5:72:28:39:f6:85:cb:
ae:ea:01:e8:bd:d0:e8:b7:79:06:3a:79:c8:5e:a3:f7:07:0d:
2b:d2:df:ee:a8:07:16:50:4f:e0:31:0d:a4:21:2c:55:86:c2:
36:d6:75:af:ca:79:ce:1b:b7:30:65:52:6f:85:2c:30:37:c9:
0c:ea:d6:33:77:13:a4:10:4b:f3:75:a1:ed:c0:f9:b9:ea:79:
ee:04:78:b4:27:c9:88:55:48:b4:48:2a:85:76:4b:b4:5e:e8:
9c:4e:65:4c:19:3d:fb:ce:eb:82:75:b5:b4:f5:46:bd:8f:92:
8d:c1:f3:66:01:da:0f:ac:5c:fd:7c:f6:52:1a:01:8d:e2:bd:
d0:1e:ec:3d:9b:68:a6:d2:8e:02:84:b8:38:47:88:33:06:9d:
04:a0:31:f0:e4:27:00:f9:a0:c0:f0:a5:37:e9:d6:2d:78:fd:
df:e7:2f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org