Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D.cer
File: DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D.cer (raw, json)
Hash identifier: jv2Bve6ds3a9RIB01UigiTKjcaYtLYt3dkCyTdqdq3w=
Subject key identifier: DE:11:7D:F6:BC:F3:61:FA:73:A8:1F:DE:AE:5B:6C:BC:6D:D0:64:0D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 38A552BB00963DCCF57A3D63CF91E24A795EDA7E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D.mft
caRepository: rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 12 Dec 2023 20:37:20 +0000
Certificate not after: Tue 10 Dec 2024 20:42:20 +0000
Subordinate resources: AS: 28306
IP: 177.91.176.0/20
IP: 177.200.96.0/20
IP: 187.94.80.0/20
IP: 189.38.0.0/20
IP: 2804:34::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:a5:52:bb:00:96:3d:cc:f5:7a:3d:63:cf:91:e2:4a:79:5e:da:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Dec 12 20:37:20 2023 GMT
Not After : Dec 10 20:42:20 2024 GMT
Subject: CN=DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:97:7b:9f:6e:03:66:2a:6d:e5:55:0e:2b:
51:bc:7d:76:74:ac:27:19:87:a9:2d:42:98:82:6c:
d4:12:c2:27:00:26:4b:50:85:30:a0:28:dd:c5:e8:
31:5a:31:65:59:de:43:69:35:08:29:45:3e:34:97:
d1:12:43:57:e2:21:3c:12:23:c8:79:50:21:48:94:
c0:46:ea:13:32:36:ec:04:74:37:ca:b3:26:aa:62:
b4:20:86:af:9a:c2:d2:0e:b2:6b:91:a7:93:3f:cd:
c1:f9:d1:20:6c:13:1d:f1:54:3c:23:73:a6:ab:dc:
4f:a9:ef:be:91:3e:2a:43:ec:31:30:44:21:96:6e:
39:1e:77:ad:4a:d6:91:e5:1e:74:19:dd:2d:6d:6d:
fa:bb:da:08:cd:2c:e1:3b:2b:39:75:16:1e:27:24:
95:cd:c9:b4:2b:48:18:67:92:0e:26:40:b9:17:75:
6d:d3:70:cf:22:17:b5:09:c3:48:3d:36:d8:14:92:
5f:79:c1:50:78:04:82:9c:ab:e6:27:54:eb:8e:f2:
71:0d:3c:ae:da:78:9e:2f:0c:f4:06:86:d4:84:96:
89:cf:ce:23:9b:08:75:fd:70:ed:c2:08:74:cc:77:
28:09:ee:6a:d6:a3:46:2d:44:01:f3:13:f3:15:74:
0e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DE:11:7D:F6:BC:F3:61:FA:73:A8:1F:DE:AE:5B:6C:BC:6D:D0:64:0D
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.91.176.0/20
177.200.96.0/20
187.94.80.0/20
189.38.0.0/20
IPv6:
2804:34::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28306
Signature Algorithm: sha256WithRSAEncryption
0a:b4:cf:10:c8:74:5b:92:6f:e1:80:fd:de:f3:a7:93:c7:f7:
7f:f4:15:17:98:dd:39:7f:ef:0d:e6:9b:88:95:25:d1:34:e1:
d4:81:18:e3:89:a2:25:cd:50:b3:33:8c:a9:b5:68:66:82:ba:
0c:fb:dc:8a:1f:2b:59:85:35:b7:78:a4:a2:0b:17:79:18:46:
1a:40:5c:8f:0f:a0:27:cb:a7:9a:92:16:e5:8d:31:13:08:a9:
b7:86:d6:bd:2a:b5:9e:77:7e:e6:cd:96:32:0a:68:93:5b:ca:
4b:6e:67:ba:e8:a2:bc:9b:21:57:48:b3:3d:18:b3:e1:ff:e7:
a5:c4:f6:23:5a:b4:b0:1a:28:1e:35:fd:61:ee:b8:13:28:61:
0d:41:45:3a:f0:f1:08:8f:16:20:73:66:d6:7b:86:38:51:55:
81:7b:fa:cb:f7:84:09:b4:dc:68:e6:5b:1e:4a:21:8a:8e:0e:
1e:98:39:a5:11:71:83:fa:5b:d4:9b:3a:27:17:4e:f3:73:99:
9a:70:e2:ec:a2:6b:bc:74:52:81:04:4e:af:07:40:e4:f5:e1:
dd:28:a1:e0:1b:bf:ec:25:c2:8d:1d:5d:75:61:5c:36:3d:fe:
13:bc:16:fa:6e:0a:67:fe:c6:51:2f:06:0d:04:d0:de:6b:e9:
75:f2:b1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org