Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0AAE6E1FE9A1321EF6C2B5AE799BC2E5A1A90DA6.cer
File: 0AAE6E1FE9A1321EF6C2B5AE799BC2E5A1A90DA6.cer (raw, json)
Hash identifier: 49J/kT9562BPZqcJ8E5YiTZbNJVsxpIGHEDfn663jug=
Subject key identifier: 0A:AE:6E:1F:E9:A1:32:1E:F6:C2:B5:AE:79:9B:C2:E5:A1:A9:0D:A6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5EA3181E0E92FA04285463C5C9DA9ECA5AF4158C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2dQNNjjp4WJNzA4JTSsQa2pVnaa2RYyjDLuRv9q1vvyx/0/0AAE6E1FE9A1321EF6C2B5AE799BC2E5A1A90DA6.mft
caRepository: rsync://rpki-repo.registro.br/repo/2dQNNjjp4WJNzA4JTSsQa2pVnaa2RYyjDLuRv9q1vvyx/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 13 Mar 2025 16:49:53 +0000
Certificate not after: Thu 12 Mar 2026 16:54:53 +0000
Subordinate resources: AS: 266938
IP: 45.225.140.0/22
IP: 2804:459c::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:a3:18:1e:0e:92:fa:04:28:54:63:c5:c9:da:9e:ca:5a:f4:15:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 13 16:49:53 2025 GMT
Not After : Mar 12 16:54:53 2026 GMT
Subject: CN=0AAE6E1FE9A1321EF6C2B5AE799BC2E5A1A90DA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fb:00:a0:c7:f8:2f:df:9c:a4:18:c9:62:d5:
70:a7:a5:2e:c6:42:55:a0:b2:54:90:b9:e1:cc:1d:
6f:a6:11:99:11:4f:57:eb:e8:70:f4:05:db:61:83:
76:0f:59:69:6b:68:eb:01:8a:d2:3a:06:15:a6:37:
7b:63:05:84:f8:82:29:35:17:09:97:0c:96:54:bf:
04:c4:d9:25:2a:fc:64:b4:d7:85:d5:52:0f:75:8c:
36:1a:81:d5:e3:71:12:59:ec:37:14:3e:b5:40:dd:
bc:db:fd:fc:0e:fc:0a:57:72:c0:af:98:45:bc:68:
df:68:92:d7:65:92:a2:ff:82:ac:35:d4:20:3b:5e:
2b:6e:e1:66:cf:a3:e0:73:4d:30:3d:31:75:7f:16:
1e:72:c2:d7:be:24:8e:ae:3f:e0:41:a1:55:1e:09:
c0:bc:43:3a:5f:b3:6f:cd:9c:29:c3:28:f4:2e:b5:
13:81:52:2e:f5:3a:a2:6a:9b:ba:4f:bd:4c:e4:4c:
64:f1:46:b1:fe:9a:c7:d0:1a:28:12:c5:af:3c:55:
be:42:d0:75:46:9d:e1:b6:1f:81:92:0d:9b:3c:61:
38:24:1d:78:4c:3c:d9:37:49:fc:4e:d9:c8:3e:0a:
9f:70:f5:f1:50:19:e5:4f:96:7d:c8:d3:0f:23:d0:
6d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0A:AE:6E:1F:E9:A1:32:1E:F6:C2:B5:AE:79:9B:C2:E5:A1:A9:0D:A6
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2dQNNjjp4WJNzA4JTSsQa2pVnaa2RYyjDLuRv9q1vvyx/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2dQNNjjp4WJNzA4JTSsQa2pVnaa2RYyjDLuRv9q1vvyx/0/0AAE6E1FE9A1321EF6C2B5AE799BC2E5A1A90DA6.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.140.0/22
IPv6:
2804:459c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266938
Signature Algorithm: sha256WithRSAEncryption
3d:80:3a:b9:29:69:5b:e2:a6:6d:9a:f2:ff:6f:07:c5:75:25:
93:aa:19:3b:bf:91:1d:c5:66:47:80:94:34:81:85:41:1a:7d:
df:b0:5f:de:b4:55:20:25:8d:e7:e1:61:d8:5c:4b:49:1d:95:
57:06:f2:1a:9a:d1:cf:22:23:c5:80:ae:4a:c8:8c:64:35:c9:
46:c9:7e:83:07:56:78:13:a7:93:14:52:c3:57:3b:9b:ff:7c:
6d:a2:c8:b9:37:c0:3f:d8:74:c9:89:ce:da:99:f7:df:92:ae:
5a:1e:78:5b:01:f2:18:fc:81:de:5f:ca:50:a3:17:66:75:0c:
79:1e:36:31:da:17:34:e1:55:8f:c2:fd:23:f9:3c:09:4d:8f:
5b:23:71:a9:9d:fa:73:af:62:b6:06:94:90:6c:96:3d:47:b6:
48:48:fe:42:f7:78:8b:05:2e:b6:89:a0:ab:15:02:29:b8:f4:
38:22:c3:88:a5:3f:f6:82:e0:da:99:c6:4f:47:1f:b2:66:61:
72:ee:8a:85:40:d8:89:df:92:ff:f5:bb:be:52:47:55:0f:05:
03:fc:c5:f8:89:31:56:ec:d7:21:6e:5b:c7:ff:32:a6:f0:a0:
14:37:43:23:c4:f8:f5:6e:bc:8d:05:a0:83:b7:04:47:bd:ea:
62:a9:bd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:49:58 2025 by rpki-client