Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DAFBE65FF96BBA89F467D4F20B0549C579F099DA.cer
File: DAFBE65FF96BBA89F467D4F20B0549C579F099DA.cer (raw, json)
Hash identifier: TUsECCQXT78xlRVCJnzXd0TDhHEtYS9Cqv4FCzOBGM8=
Subject key identifier: DA:FB:E6:5F:F9:6B:BA:89:F4:67:D4:F2:0B:05:49:C5:79:F0:99:DA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 3A81280643A9EA8F73BD39C3986DF39138BD40AE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/1/DAFBE65FF96BBA89F467D4F20B0549C579F099DA.mft
caRepository: rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/1
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 04 Oct 2023 23:02:53 +0000
Certificate not after: Wed 02 Oct 2024 23:07:53 +0000
Subordinate resources: AS: 263145
IP: 168.205.136.0/22
IP: 170.245.224.0/22
IP: 177.154.28.0/22
IP: 2804:1774::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:81:28:06:43:a9:ea:8f:73:bd:39:c3:98:6d:f3:91:38:bd:40:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Oct 4 23:02:53 2023 GMT
Not After : Oct 2 23:07:53 2024 GMT
Subject: CN=DAFBE65FF96BBA89F467D4F20B0549C579F099DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:db:eb:62:da:2f:af:d3:aa:7e:69:74:eb:70:
d9:a7:67:4f:52:d9:7f:2c:1f:0a:28:c6:fd:b6:4a:
56:43:71:46:c6:a9:fa:de:63:9a:5c:99:da:2b:6b:
70:9b:7c:08:71:5f:5a:c0:b8:49:8d:2e:0c:9e:08:
e4:93:5e:4c:15:0c:27:eb:ff:0c:ae:0b:63:4a:ba:
37:25:ae:43:76:79:e5:dc:70:12:a3:ff:9c:90:b1:
fc:d4:68:02:2f:62:12:cf:c8:e4:88:19:c4:73:4e:
fc:8c:9e:ad:8e:e0:5e:01:6a:ad:4d:19:93:4b:46:
bd:2a:e5:30:e3:9b:d0:40:34:c8:f7:f5:95:16:30:
b8:ee:b0:3e:b1:05:3a:c7:11:68:8e:c2:13:02:29:
0e:f8:82:40:78:1a:6e:bc:05:59:6b:e8:cb:14:0e:
e9:1e:d1:5c:8a:21:89:1b:3b:d1:ae:74:7a:72:3f:
00:a6:60:a8:07:3c:70:b7:2b:26:12:1e:c7:4b:2a:
11:74:b0:f5:4a:0e:a8:b9:2a:ad:7f:d3:0b:66:ce:
f8:8e:28:f7:2b:47:f6:7a:0d:ac:60:7c:35:5d:57:
cb:27:7f:da:c3:06:1e:2f:6a:f2:09:ac:9d:70:f9:
c0:58:00:87:ae:a3:cd:0a:a3:e5:60:45:dc:33:f5:
f8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DA:FB:E6:5F:F9:6B:BA:89:F4:67:D4:F2:0B:05:49:C5:79:F0:99:DA
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/1/DAFBE65FF96BBA89F467D4F20B0549C579F099DA.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.136.0/22
170.245.224.0/22
177.154.28.0/22
IPv6:
2804:1774::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263145
Signature Algorithm: sha256WithRSAEncryption
3f:5f:eb:b1:29:22:33:0b:4a:3b:a2:89:87:24:85:00:91:1b:
a3:32:00:ba:65:99:82:61:04:08:8e:ce:0d:c8:43:7a:29:27:
cd:5d:97:51:6d:c8:87:53:76:e3:1b:3e:bb:2a:ce:6d:1b:ff:
fd:97:82:35:af:a0:63:88:45:59:5c:0c:03:b5:62:ad:9d:b0:
2f:ff:cb:aa:d7:1b:16:ac:52:80:b3:72:ee:da:65:a0:a0:39:
ba:3a:05:7a:e1:1c:64:61:6a:39:3e:cb:63:fb:0d:03:ba:3b:
6b:2c:47:0b:e0:cc:26:1c:9c:87:5a:a7:51:23:8f:50:49:7f:
e8:8c:c9:7f:84:3c:6a:1b:03:15:2b:50:21:26:cf:46:c7:58:
ba:92:a5:87:e6:ca:71:98:eb:53:b3:2e:82:d8:20:40:e0:de:
94:98:84:83:28:6c:f9:55:79:a3:9a:5d:d5:29:af:31:2e:08:
f2:11:59:5f:31:78:92:79:c9:52:6c:fb:db:2f:03:82:8b:42:
e9:22:30:0a:f4:99:c5:8a:be:4c:62:f4:0b:3e:31:11:e5:6a:
35:de:fa:a5:e9:73:fb:ad:b4:56:3f:ea:19:23:3b:2d:62:53:
b5:39:5e:03:9c:8b:19:74:c0:87:54:ab:f8:58:fb:fb:69:2d:
1b:e9:ee:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org