Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.cer
File: D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.cer (raw, json)
Hash identifier: D5qb1SENEwETCxqHtRaf6EHXvNnegG/AoVyJF/uOFbI=
Subject key identifier: D9:61:AB:15:52:8E:D9:EF:FC:F0:F0:DD:A2:FE:0C:7D:0C:B9:93:4B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 55A17E10030199FBEAE083E65206F8985300544D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.mft
caRepository: rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 19 Dec 2022 18:17:32 +0000
Certificate not after: Mon 18 Dec 2023 18:22:32 +0000
Subordinate resources: AS: 52706
IP: 170.233.212.0/22
IP: 177.126.16.0/20
IP: 2804:c70::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:a1:7e:10:03:01:99:fb:ea:e0:83:e6:52:06:f8:98:53:00:54:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Dec 19 18:17:32 2022 GMT
Not After : Dec 18 18:22:32 2023 GMT
Subject: CN=D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:d1:cd:5f:a0:86:75:74:3b:51:50:b1:ac:
4a:33:1c:ef:cb:49:45:a2:0c:7a:5b:8c:a8:39:46:
38:ea:73:a6:9f:73:a6:c0:b6:d8:42:0a:3e:5e:79:
94:36:e5:c1:b4:1d:b9:53:ed:58:f4:ab:5e:1b:3a:
41:1c:a2:64:a6:6a:e2:1a:7f:b1:f4:be:a4:71:64:
ee:62:9d:31:a5:de:e0:46:87:04:ef:b5:58:97:36:
45:72:9f:78:ab:13:c4:37:a9:f9:8f:9d:12:1c:d6:
21:91:11:fb:5d:55:79:8e:68:e2:46:8d:ea:02:7c:
3a:8d:cd:f0:1f:9e:3a:69:cd:af:a4:9d:dd:82:7b:
b3:50:d8:46:ac:63:61:9e:bc:3f:75:e7:59:72:bc:
c7:ce:b0:26:20:fa:6e:c6:e5:2d:cf:01:4d:d5:d7:
f9:ab:f2:96:f1:1f:57:8a:49:ee:88:bd:b6:fa:24:
bf:aa:85:54:79:d8:c7:9d:79:6c:ac:ba:8e:04:91:
d8:46:45:4a:77:ef:81:08:02:c0:16:45:86:e2:21:
84:ed:05:b1:50:bd:96:2c:d7:d1:f4:b4:ca:e7:8a:
0e:32:f5:c9:02:72:af:b5:00:1b:a1:30:95:df:b1:
7a:95:3a:d1:6e:c4:1d:a2:42:ae:0a:ae:8a:0e:82:
06:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D9:61:AB:15:52:8E:D9:EF:FC:F0:F0:DD:A2:FE:0C:7D:0C:B9:93:4B
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.212.0/22
177.126.16.0/20
IPv6:
2804:c70::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52706
Signature Algorithm: sha256WithRSAEncryption
72:38:4e:5d:9c:4c:27:0a:e8:ef:ac:f6:ac:84:3d:6a:5e:39:
dd:dc:22:44:88:6f:7a:0c:34:1b:9f:02:2a:51:10:11:b5:d7:
ef:a1:dd:4a:da:e5:be:ee:9f:0c:b8:b1:e5:4d:cb:44:79:b2:
58:0b:b3:e6:cb:10:be:93:31:a4:2f:77:59:6d:5d:a9:e5:a3:
be:83:b6:27:76:c3:0f:00:91:94:e8:9d:b4:89:75:6b:dd:55:
91:76:c9:a4:3d:cd:19:96:0b:d7:02:4e:cb:d8:e7:b9:fe:59:
b6:17:b4:c9:9c:86:f1:72:e7:5b:e8:25:bf:a9:c4:64:f7:84:
95:f4:19:4f:e6:79:98:f8:2f:08:e4:15:09:65:93:db:4e:6d:
b7:96:ff:50:32:a5:be:31:06:e9:a3:49:90:56:72:87:51:e4:
39:ca:0d:65:cc:b5:54:44:3d:55:54:7a:dd:7b:b1:12:fb:fc:
bf:f3:cb:76:4e:ab:72:f2:18:5e:f1:c0:67:06:3e:d4:53:cc:
58:51:63:8a:c3:94:e5:6e:40:73:39:4d:28:4b:9d:bd:3d:b3:
9e:23:b9:27:d4:90:b5:1c:ab:8e:84:c0:51:fa:e1:01:02:21:
2f:15:c2:0c:93:63:35:da:a4:a4:77:2f:63:db:32:ed:fb:68:
55:a2:f8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org