Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FF386C9BDA689F9AA04623D5ADF743F1BA316CD5.cer
File: FF386C9BDA689F9AA04623D5ADF743F1BA316CD5.cer (raw, json)
Hash identifier: TurXbzfWkh1WKZlFILXLV/6qrff45uWB5N6PT7Kp0VU=
Subject key identifier: FF:38:6C:9B:DA:68:9F:9A:A0:46:23:D5:AD:F7:43:F1:BA:31:6C:D5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 1187A0DA24A92693621A1888130E4377C3CBD567
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/GeKtUThforcB1ZbV6FKmxZcqeheyJEqkS1gdMuhVkyVN/0/FF386C9BDA689F9AA04623D5ADF743F1BA316CD5.mft
caRepository: rsync://rpki-repo.registro.br/repo/GeKtUThforcB1ZbV6FKmxZcqeheyJEqkS1gdMuhVkyVN/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 02 Aug 2023 19:19:32 +0000
Certificate not after: Wed 31 Jul 2024 19:24:32 +0000
Subordinate resources: AS: 61772
IP: 138.255.44.0/22
IP: 200.95.180.0/22
IP: 2804:1910::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:87:a0:da:24:a9:26:93:62:1a:18:88:13:0e:43:77:c3:cb:d5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Aug 2 19:19:32 2023 GMT
Not After : Jul 31 19:24:32 2024 GMT
Subject: CN=FF386C9BDA689F9AA04623D5ADF743F1BA316CD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:41:9e:bb:ad:60:ba:b0:29:1e:4e:88:37:
ba:f4:5f:b1:eb:ad:04:a1:af:b9:e9:fd:05:ed:f4:
60:42:04:da:9d:35:36:08:98:d5:86:54:b3:8e:6b:
37:04:04:6b:63:ff:bc:d5:b7:0e:e0:28:06:78:10:
ac:97:c1:7a:4c:bc:ba:8f:48:78:3a:36:8a:dc:c1:
ab:87:34:a0:a2:22:db:36:2d:2b:de:fc:78:06:10:
7b:ab:4e:f6:a0:c5:fc:62:a9:d4:1e:5b:9a:8e:c2:
dc:19:16:11:65:ca:90:5c:e6:0c:a7:9e:b3:f7:d1:
60:5d:6d:1f:90:f5:b8:08:e3:c5:9b:bd:ab:0f:05:
25:ac:e5:23:92:45:bc:ce:c9:df:de:cb:08:19:11:
e7:52:e9:fb:a9:55:92:b6:fe:b3:5e:d0:10:57:3e:
33:41:eb:c3:4b:04:46:36:52:26:80:b1:e1:04:63:
dc:65:cd:40:ef:6f:ef:d1:1d:6c:ec:10:9a:c9:eb:
28:e5:44:cf:34:83:50:d2:b5:0c:7a:0b:47:53:e9:
f3:a5:31:a8:88:1d:e7:3d:1e:be:0e:ee:be:80:33:
2d:97:74:20:e2:da:0f:75:03:c9:41:73:da:f8:b6:
f0:e9:c0:e0:bb:ef:ba:4a:48:59:e3:01:d1:14:6d:
06:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FF:38:6C:9B:DA:68:9F:9A:A0:46:23:D5:AD:F7:43:F1:BA:31:6C:D5
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GeKtUThforcB1ZbV6FKmxZcqeheyJEqkS1gdMuhVkyVN/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GeKtUThforcB1ZbV6FKmxZcqeheyJEqkS1gdMuhVkyVN/0/FF386C9BDA689F9AA04623D5ADF743F1BA316CD5.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.44.0/22
200.95.180.0/22
IPv6:
2804:1910::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61772
Signature Algorithm: sha256WithRSAEncryption
36:6e:b1:e2:2b:38:db:7e:42:b6:fe:2e:fe:fd:d6:7c:d1:eb:
43:d6:aa:3b:0e:44:c7:59:0a:c1:c4:b7:6e:3f:d9:94:46:03:
71:a4:b8:5f:1c:54:fe:0f:48:f0:b5:65:17:e3:76:87:9d:25:
48:28:ce:b9:3f:0b:70:5c:ac:4f:08:5f:83:11:21:31:b4:fc:
c0:88:3b:52:32:6e:9f:45:b9:fa:f1:22:85:a0:47:f6:71:2c:
c7:b5:42:da:a2:74:7c:1e:84:79:84:9a:81:6f:3f:2d:6e:00:
59:95:51:f8:4e:c6:5b:a8:bb:5f:78:19:56:e7:cb:59:89:06:
be:e1:a4:e3:5d:77:c0:fe:9d:f0:a2:3a:ea:13:ee:02:35:35:
69:89:29:7f:c9:e7:ae:ca:ac:86:31:f7:04:ce:2c:dd:3e:e9:
69:94:b6:7b:d8:44:f5:2e:f7:08:45:f5:c5:7d:8f:61:c8:1e:
22:5a:4b:85:d0:f8:82:0a:0e:88:2c:da:fe:0f:ed:9a:3f:1f:
c3:61:0a:0a:17:a0:13:a0:90:08:a7:77:7f:c6:a7:15:63:99:
9e:d3:ec:0d:16:47:a1:eb:be:d3:76:27:ae:6c:e1:b2:23:75:
3e:82:62:24:93:b9:c3:a4:c6:b0:59:7a:fd:db:3d:6a:76:81:
98:89:ab:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:23 2024 by rpki-client on console-fra.rpki-client.org