Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D863FA75123EC7A1F87D434661F5FAB079ADF8BF.cer
File: D863FA75123EC7A1F87D434661F5FAB079ADF8BF.cer (raw, json)
Hash identifier: eMoBxyXtAEXxPRSxHRlCbbvnQ1sAsWuZz6n0uPuqg6g=
Subject key identifier: D8:63:FA:75:12:3E:C7:A1:F8:7D:43:46:61:F5:FA:B0:79:AD:F8:BF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 170AC528D5DE5586970BCACFDF1AA5802094094D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/0/D863FA75123EC7A1F87D434661F5FAB079ADF8BF.mft
caRepository: rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/0
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 14 Nov 2023 00:12:52 +0000
Certificate not after: Tue 12 Nov 2024 00:17:52 +0000
Subordinate resources: AS: 53029
IP: 168.181.40.0/22
IP: 177.73.80.0/22
IP: 177.129.116.0/22
IP: 2804:628::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:0a:c5:28:d5:de:55:86:97:0b:ca:cf:df:1a:a5:80:20:94:09:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Nov 14 00:12:52 2023 GMT
Not After : Nov 12 00:17:52 2024 GMT
Subject: CN=D863FA75123EC7A1F87D434661F5FAB079ADF8BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:d1:76:b0:38:95:16:e8:14:90:2b:53:e9:
e9:fd:ed:b8:fc:5b:17:b3:6c:29:93:0d:7c:a1:13:
b2:40:e5:5c:42:2a:01:7f:af:76:3f:32:32:cd:29:
80:28:99:e9:49:99:9b:59:25:51:03:62:0d:bc:55:
cd:03:6a:18:f7:4c:8c:83:07:50:fb:5b:45:3b:de:
62:d4:36:60:cd:1d:2a:db:68:e2:00:60:4d:ac:17:
b2:71:a4:0f:e1:8c:48:cf:0f:cd:e2:3a:a6:af:34:
e0:5b:95:36:e0:36:67:05:16:ae:8d:f9:70:4a:8e:
7f:1d:7b:03:c9:c8:36:74:40:4c:3b:f2:6b:f4:3a:
6f:6b:8b:2f:3e:df:61:a3:84:01:62:dd:96:ff:1e:
6b:3c:d3:85:b0:2b:b1:b7:5f:49:c4:53:42:8f:2d:
1c:3e:20:39:2d:01:80:ee:8a:b4:b0:d0:8e:25:e9:
71:3e:df:84:81:a2:29:c9:86:27:c6:c6:62:f0:5c:
cf:4a:77:f6:f8:53:0e:fa:50:cc:88:4d:13:b8:29:
88:1f:7e:de:61:99:aa:5a:aa:77:2d:c7:ef:2e:19:
80:0d:39:64:68:32:27:ee:77:26:90:6b:7a:e2:91:
c9:69:c4:8c:55:73:d6:05:b2:15:85:b6:f0:37:be:
f5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D8:63:FA:75:12:3E:C7:A1:F8:7D:43:46:61:F5:FA:B0:79:AD:F8:BF
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/0/D863FA75123EC7A1F87D434661F5FAB079ADF8BF.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.181.40.0/22
177.73.80.0/22
177.129.116.0/22
IPv6:
2804:628::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
53029
Signature Algorithm: sha256WithRSAEncryption
81:57:e7:b8:a5:1f:03:3c:8d:c6:35:34:f2:72:ce:22:08:85:
9e:d0:07:37:99:d6:ca:47:f3:b7:6a:5e:5e:f5:1b:c9:47:59:
a7:75:6a:56:c1:2e:75:1d:ab:fe:4e:11:64:79:28:57:48:53:
b0:e4:22:3a:e3:e4:8c:e7:e8:ed:c5:aa:7b:88:45:d1:66:10:
4c:44:68:12:52:d9:17:57:5f:c0:1a:46:0d:db:ee:ff:f1:58:
36:72:91:d3:b4:4c:86:90:82:0f:f2:0a:92:45:7a:18:07:ca:
3d:ef:81:58:96:f8:f5:72:03:10:b9:a2:a3:89:24:4b:cc:cb:
99:0c:e8:01:43:89:da:ea:65:48:bf:01:93:ff:b4:47:6a:e0:
2d:f3:d6:a4:b8:b8:3f:de:95:2e:a7:40:df:41:49:e6:c9:36:
59:7f:97:aa:29:b6:25:e8:2e:3d:67:c8:f6:70:ed:04:23:e0:
6b:61:df:e9:fb:ca:c2:82:d7:fa:30:a3:e6:14:05:4a:bf:33:
7d:7b:b1:f9:1f:24:48:23:c7:b7:a4:1f:d2:32:2c:ad:85:ff:
35:ad:58:d1:c5:df:61:ee:a3:45:98:95:f5:9f:4d:56:e0:a8:
0e:68:ff:6d:6f:51:99:eb:3a:8d:4c:ab:51:0b:0e:37:f3:81:
15:47:ae:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org