Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F.cer
File: 1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F.cer (raw, json)
Hash identifier: boExJuePP9lyzmeL9tn1C6p9cnwSZ4/oNoErTk7Z3Ng=
Subject key identifier: 1B:DF:7A:3D:41:48:DF:1D:00:5B:63:FE:AC:01:57:72:6F:A7:BE:6F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 679DFF5D1810F1C5E5259F4411222BDDA7F28A7E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F.mft
caRepository: rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 15:40:05 +0000
Certificate not after: Thu 03 Apr 2025 15:45:05 +0000
Subordinate resources: AS: 270928
IP: 190.123.2.0/23
IP: 2804:73a4::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:9d:ff:5d:18:10:f1:c5:e5:25:9f:44:11:22:2b:dd:a7:f2:8a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 15:40:05 2024 GMT
Not After : Apr 3 15:45:05 2025 GMT
Subject: CN=1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8d:fd:89:d0:3a:00:d7:c1:c5:2e:75:b1:01:
fa:ab:e3:6d:c3:d3:c2:c1:ff:39:da:93:0b:ed:ac:
cc:34:ec:eb:d0:f5:93:c3:cc:f5:4f:4f:24:80:17:
73:c4:20:c6:20:16:91:5a:17:74:ff:18:11:fa:22:
a8:3d:08:68:f5:c1:e3:d7:d3:dc:58:f1:a8:13:06:
c2:3a:a4:00:d4:79:87:36:45:78:70:f8:96:47:2a:
fd:c7:7f:f5:63:f3:63:a1:99:37:ae:76:d9:2e:90:
b4:ac:e6:90:e2:4e:de:12:9d:c8:78:c8:64:cd:5c:
25:a1:c0:a4:e0:52:69:77:17:c0:2f:da:76:d3:f3:
93:8c:cd:85:13:8b:7a:2c:66:71:32:9a:0b:9e:b3:
1b:ca:e1:91:6e:c8:3c:8a:8a:43:64:1e:54:bd:de:
6f:ec:59:b5:77:e4:4a:d2:14:17:b8:98:4a:92:e8:
5e:99:40:f4:11:b1:ee:9f:7d:7d:09:54:96:bb:35:
e3:5f:2b:72:70:ce:b6:1e:c4:0e:e1:13:aa:e3:90:
01:f8:1f:99:3c:c4:fc:e6:fe:f8:e3:85:c4:ef:b0:
db:fc:85:f5:21:a0:d7:a2:bd:dd:aa:9d:55:0e:5d:
d1:38:54:43:6a:30:2f:b1:79:85:d0:01:50:33:92:
00:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1B:DF:7A:3D:41:48:DF:1D:00:5B:63:FE:AC:01:57:72:6F:A7:BE:6F
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.123.2.0/23
IPv6:
2804:73a4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270928
Signature Algorithm: sha256WithRSAEncryption
bb:14:f3:e0:fd:7f:0e:d1:20:9b:ed:d2:e8:b7:e5:ae:e0:37:
18:b0:0d:48:26:14:25:53:53:41:3a:bf:f0:e2:cf:10:0b:43:
0e:b4:3c:2a:48:b0:a9:dd:1c:0a:d2:ec:62:dd:8f:df:11:3e:
09:ca:60:cb:1a:57:27:12:f9:60:68:2a:09:c8:4c:ac:39:c3:
24:c6:a7:04:5c:b0:77:93:79:7d:d4:80:fa:4c:f0:11:04:5d:
4d:10:45:4a:8d:63:26:17:32:01:e0:3c:e8:ac:67:c2:99:c0:
e9:46:cf:b3:e0:f1:b7:98:b0:40:9e:b2:99:6f:25:47:20:35:
70:71:42:bd:9b:d0:74:32:9b:c2:08:bc:00:0e:79:5f:fb:24:
e4:11:51:23:5a:4d:d9:90:51:43:41:cd:06:63:fa:89:79:2b:
23:2c:ef:5c:5a:7c:02:d6:ae:d2:29:f0:f6:d7:d6:2e:e5:d0:
c1:41:ab:57:71:cf:f3:61:57:8c:54:a3:64:95:e3:49:db:ac:
10:fd:49:b6:e5:cd:c5:28:5d:b3:75:d2:44:72:9a:af:e2:bf:
3e:ed:f5:da:92:52:27:8b:76:d0:b0:97:8f:02:cd:ae:fb:eb:
40:3e:57:a0:72:b4:b3:63:27:2a:a7:63:75:4c:82:f8:e3:01:
cf:7c:43:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:33:53 2025 by rpki-client