Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/120A9C3453B5738E8A876659112F7012CE9B71A6.cer
File: 120A9C3453B5738E8A876659112F7012CE9B71A6.cer (raw, json)
Hash identifier: ixXOS2PwR2fJSlyMpCohIX9ooJpgWC5tUaxad8NRX+0=
Subject key identifier: 12:0A:9C:34:53:B5:73:8E:8A:87:66:59:11:2F:70:12:CE:9B:71:A6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 35B251D9E55F83D39ECC67FA5B6A08572AD6C1A4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/2/120A9C3453B5738E8A876659112F7012CE9B71A6.mft
caRepository: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/2/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 23 Dec 2024 14:24:57 +0000
Certificate not after: Mon 22 Dec 2025 14:29:57 +0000
Subordinate resources: AS: 28202
IP: 177.44.0.0/17
IP: 177.130.128.0/18
IP: 179.189.160.0/19
IP: 186.216.64.0/18
IP: 187.44.0.0/18
IP: 187.120.64.0/18
IP: 189.91.0.0/19
IP: 191.53.0.0/16
IP: 191.240.0.0/17
IP: 2804:87c::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:b2:51:d9:e5:5f:83:d3:9e:cc:67:fa:5b:6a:08:57:2a:d6:c1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 23 14:24:57 2024 GMT
Not After : Dec 22 14:29:57 2025 GMT
Subject: CN=120A9C3453B5738E8A876659112F7012CE9B71A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e5:19:5f:ee:0c:c1:0a:eb:d1:1b:09:3b:ec:
6f:64:a8:0e:d3:71:d0:dd:1d:ae:dd:6c:6c:d9:61:
e0:c0:19:03:8a:98:c7:40:e7:ab:09:70:13:8d:02:
a8:77:66:f2:0d:c5:c5:d9:e2:4f:b4:98:40:78:4f:
3b:9f:41:2e:db:8e:bf:61:34:d7:89:25:4a:bb:44:
3d:0d:5e:e8:d1:4e:b8:34:58:31:d9:58:ee:c8:b0:
91:ec:5a:6a:55:6a:22:e0:de:1b:40:81:53:21:08:
61:db:51:ec:a6:36:06:7a:d4:91:6b:d3:61:75:5d:
e9:43:78:25:24:c1:a7:72:3e:85:bc:54:3f:7b:42:
15:c0:c2:ec:5b:92:de:62:41:f1:ae:7a:99:56:e3:
4b:a3:eb:c6:e0:59:70:0d:c3:11:e5:d4:92:be:82:
ee:a5:39:12:31:31:6d:56:cf:b2:72:bc:df:29:3d:
8a:11:15:3d:9e:5c:89:a1:07:a7:8e:9b:cf:27:42:
73:37:ed:a1:54:c6:62:93:d4:58:27:90:5d:29:48:
94:50:b7:c0:c9:15:3e:7e:c2:06:88:28:8d:60:70:
48:96:b8:30:0c:7c:68:b2:89:b9:aa:9a:8c:cc:d2:
35:ea:54:b7:60:f9:85:a1:4b:f2:8a:49:be:dc:ad:
44:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
12:0A:9C:34:53:B5:73:8E:8A:87:66:59:11:2F:70:12:CE:9B:71:A6
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/2/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/2/120A9C3453B5738E8A876659112F7012CE9B71A6.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.44.0.0/17
177.130.128.0/18
179.189.160.0/19
186.216.64.0/18
187.44.0.0/18
187.120.64.0/18
189.91.0.0/19
191.53.0.0/16
191.240.0.0/17
IPv6:
2804:87c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28202
Signature Algorithm: sha256WithRSAEncryption
0c:7c:86:c9:9f:1a:b5:87:a8:25:3d:5f:ca:0b:51:31:b7:1b:
7c:67:89:88:ee:6f:96:70:8b:66:d7:63:12:f0:d4:e5:e1:cc:
11:37:fc:7f:0b:0e:4a:41:77:23:b1:b3:b2:b9:d9:a8:10:e4:
eb:87:07:e0:ed:70:a6:59:71:b7:64:e6:e0:da:9b:fa:0a:32:
f5:b6:86:4a:55:b7:1e:d3:54:e6:d0:ad:fd:f6:58:7e:50:ec:
99:92:65:3d:6d:fb:81:98:be:60:e1:bb:11:20:e7:9f:31:59:
d2:08:2f:00:19:9f:c3:49:bc:ad:9f:bd:2d:44:2a:5f:a5:b9:
40:48:eb:08:c1:54:a6:e5:68:26:3e:45:06:c6:c7:9f:bf:c1:
26:37:53:4a:0a:85:a3:db:32:b0:53:94:98:9c:97:ea:0f:ae:
e6:d9:bb:c8:24:a1:71:67:00:10:15:a4:70:f4:5d:61:24:32:
9f:b7:82:99:f9:27:1b:99:8d:c8:32:0a:dd:89:d9:a3:d1:a1:
e7:5d:aa:c9:a9:56:aa:8a:44:53:11:e9:16:54:a4:7d:38:5d:
1f:16:ac:cd:20:86:e8:20:cd:49:46:ae:5e:14:b1:8d:c3:76:
67:1a:e8:a4:6f:0d:6f:9e:9e:05:50:c9:35:bb:00:78:03:a7:
8e:a1:95:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:47:18 2025 by rpki-client