
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer
File: 21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer (raw, json)
Hash identifier: Lt4wQO+3SqadxNjfXkmg5HemfvmpOPG8odR2JyFVT/M=
Subject key identifier: 21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4859B01FD78558539233069AF1EEDD886D485BCE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft
caRepository: rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 31 Aug 2024 19:28:49 +0000
Certificate not after: Sat 30 Aug 2025 19:33:49 +0000
Subordinate resources: AS: 269626
IP: 45.190.108.0/22
IP: 2804:6768::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:59:b0:1f:d7:85:58:53:92:33:06:9a:f1:ee:dd:88:6d:48:5b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Aug 31 19:28:49 2024 GMT
Not After : Aug 30 19:33:49 2025 GMT
Subject: CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:61:bb:68:bd:16:c8:6a:4e:40:8c:7b:5b:e6:
c8:34:6e:a6:02:fe:16:d1:b7:55:0e:ba:ff:e9:c2:
83:2d:9f:64:93:8e:6a:07:e0:59:c8:2b:bf:f5:db:
0a:fb:82:09:c1:b3:d6:4c:65:1e:6d:dd:65:06:b7:
08:d6:08:0d:5b:08:55:38:00:5d:48:96:3f:98:02:
92:4c:af:67:75:6f:2f:e9:c0:46:95:62:e4:fe:f1:
44:cd:c9:de:ef:49:d9:24:5a:8f:45:ea:fb:a3:5d:
72:9a:4a:94:30:2c:af:8f:2a:7e:94:a8:a1:b3:e0:
7d:d4:ed:ff:1e:78:4b:fa:57:32:93:5c:02:70:fe:
6c:88:83:19:0d:eb:0e:bd:84:4f:6f:49:18:e5:1a:
51:e1:d9:8c:f8:01:52:6b:32:26:50:6e:8a:80:50:
37:8f:bb:c0:96:00:51:fe:dd:90:54:f7:f6:6b:e1:
cc:a0:fb:28:ea:b3:47:ba:0b:e6:fa:29:3a:78:2d:
94:d0:e6:6f:0b:cd:7b:8b:de:ad:0f:2d:a0:94:1f:
9b:fd:8b:9f:d4:26:a2:27:b7:80:43:f9:ed:eb:27:
e6:0e:4e:d4:40:4a:e4:2c:8b:70:69:1f:29:45:fd:
a8:8e:12:c9:d2:f5:08:b4:71:c9:c2:8f:68:1b:c3:
fd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.190.108.0/22
IPv6:
2804:6768::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
269626
Signature Algorithm: sha256WithRSAEncryption
b1:a4:be:f0:4f:68:0a:f2:df:af:84:c2:37:32:a4:c8:f9:5c:
58:5b:f7:d4:d5:cb:06:c7:6e:66:ac:1c:a2:29:31:67:db:4d:
78:4b:1d:29:be:49:5f:cd:99:a2:86:d9:21:51:cc:2a:cc:b5:
86:52:98:6e:b9:cc:04:51:36:16:11:6f:ba:df:d9:e2:b3:be:
88:48:5b:37:45:76:0c:b2:75:f4:9e:3d:3b:1f:f7:07:4d:10:
4c:61:b0:cb:2d:06:28:33:19:70:f7:71:e6:3a:2e:00:5b:10:
03:bc:d4:6c:ea:7e:3f:af:39:c4:5a:ab:7c:89:b2:50:d5:e7:
9e:ff:1c:61:07:9d:92:92:34:e9:5a:62:8f:88:07:c3:61:f0:
23:ac:85:fb:c5:63:3e:b4:62:62:23:d4:f6:95:a0:36:b6:8e:
77:83:23:ee:a5:09:3f:17:a5:42:25:44:da:2c:e6:f0:16:5d:
52:f2:ef:4e:48:dd:b8:a5:5b:66:21:8d:be:f7:86:51:f9:1f:
df:00:62:7b:2f:82:e2:98:91:e1:ad:52:8a:f6:4b:2d:c0:eb:
2a:c8:d0:5a:7d:81:3f:06:e1:a4:ce:92:d1:c4:d8:b2:a1:3b:
50:43:44:d2:e0:5b:ba:38:8a:62:3e:69:63:0c:ee:f1:bd:bf:
c4:54:77:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:22 2025 by rpki-client