![](/console.gif)
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EA3CB73F1539D7A39F2950E39373301FB95927B9.cer
File: EA3CB73F1539D7A39F2950E39373301FB95927B9.cer (raw, json)
Hash identifier: +wsLEXTJzXR8M53XGBDYa1egNoxjDMwxRrWGHfar+ZY=
Subject key identifier: EA:3C:B7:3F:15:39:D7:A3:9F:29:50:E3:93:73:30:1F:B9:59:27:B9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 66051BB83DC7EA4F41374652E505FD8F8E763C2F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/EA3CB73F1539D7A39F2950E39373301FB95927B9.mft
caRepository: rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 20 Dec 2023 15:08:54 +0000
Certificate not after: Wed 18 Dec 2024 15:13:54 +0000
Subordinate resources: AS: 52807
IP: 138.36.28.0/22
IP: 167.250.12.0/22
IP: 170.79.24.0/22
IP: 177.53.40.0/21
IP: 2804:2198::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:05:1b:b8:3d:c7:ea:4f:41:37:46:52:e5:05:fd:8f:8e:76:3c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Dec 20 15:08:54 2023 GMT
Not After : Dec 18 15:13:54 2024 GMT
Subject: CN=EA3CB73F1539D7A39F2950E39373301FB95927B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fb:33:46:f7:37:35:1b:3a:9d:8a:78:70:28:
83:d5:da:78:37:76:4a:af:b5:fc:16:58:a2:67:40:
4c:ef:79:e3:32:c1:d7:03:97:ac:4c:af:7a:ba:33:
3a:ad:ec:ad:b1:21:cd:56:b2:bb:b7:17:6c:c4:32:
e4:af:ad:1f:8b:19:d7:91:09:c5:91:7e:80:b3:5b:
ea:d4:db:d2:ce:31:f1:f7:28:b4:29:29:77:46:c8:
19:27:a6:bb:9b:b0:74:6d:75:5e:39:66:9b:00:f6:
28:48:2a:db:5f:ed:e1:2e:3d:ec:27:79:f2:1a:1c:
35:5a:8e:a2:f0:3e:59:fc:fc:db:60:5f:9e:7e:94:
a7:d2:a4:0f:90:e1:c9:ed:d6:f3:5e:a0:43:b5:93:
3e:88:ce:a3:c7:c7:d5:24:4e:7b:3f:72:b2:4a:a5:
62:c9:eb:69:1f:a5:a4:28:17:4f:a8:a2:21:bb:8b:
69:fc:1c:bb:0f:ce:49:47:31:5d:4a:d7:c3:9f:d6:
f5:69:6b:78:e5:4c:92:87:34:19:d3:3c:e0:c8:a8:
4e:a9:b5:7a:df:e3:00:72:37:5a:da:44:08:7c:d9:
7e:af:3e:f2:71:be:8a:a2:bc:87:95:0e:85:1b:9b:
99:e1:c4:f9:b7:e8:b3:d0:db:9d:61:36:f0:6a:34:
75:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EA:3C:B7:3F:15:39:D7:A3:9F:29:50:E3:93:73:30:1F:B9:59:27:B9
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/EA3CB73F1539D7A39F2950E39373301FB95927B9.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.28.0/22
167.250.12.0/22
170.79.24.0/22
177.53.40.0/21
IPv6:
2804:2198::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52807
Signature Algorithm: sha256WithRSAEncryption
3b:25:c1:b2:80:57:f4:b8:53:d7:20:3b:81:7d:d4:78:fa:a4:
e3:a5:08:c3:4b:21:f5:d8:a1:31:d5:b6:25:d5:86:44:76:a1:
77:d4:26:50:9e:63:63:d0:94:28:78:bc:e6:5f:d6:c8:a5:73:
7f:e6:42:34:24:7e:ca:be:fa:a7:db:47:95:42:2c:78:d1:ee:
d2:d4:76:0a:5f:90:72:a2:49:3c:10:3b:ba:2a:50:df:de:3e:
bd:d2:8a:31:f7:ec:6b:31:a3:84:4b:17:54:83:41:7f:22:ef:
4c:26:8b:fc:35:9e:5e:fc:80:01:c3:1a:1b:fe:d1:e2:df:f8:
50:09:e3:fd:89:2d:2e:33:a0:c4:bc:6e:89:fd:c5:25:eb:ea:
3b:09:b6:be:87:e8:07:b1:d3:df:79:b6:cb:fa:ce:65:88:33:
8c:69:f8:ae:a7:69:93:61:d5:46:29:bd:57:97:e1:b3:af:51:
4a:ea:f8:80:ca:77:0c:11:31:0a:47:46:d9:37:11:96:1c:b1:
4b:52:f1:54:67:ed:c2:75:49:b6:7f:4d:ce:86:49:b1:e4:81:
20:10:05:fb:bb:ca:80:66:0d:64:21:3a:76:06:94:6e:6e:8c:
ff:a6:ea:2b:0b:d7:6b:e9:be:15:ae:e6:25:ae:ed:93:50:65:
8a:86:32:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:47 2025 by rpki-client