Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer
File: 2D59905C3FCA5BDA34D7101B088D80451D026C47.cer (raw, json)
Hash identifier: osQbZfS1I6SdJkHR1pUqSHm/U6AjPp9wd+WERXyhZV8=
Subject key identifier: 2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5D2B2B60576A00F181F86265FB3139BF3639FB6A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft
caRepository: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 07 Mar 2025 01:03:26 +0000
Certificate not after: Fri 06 Mar 2026 01:08:26 +0000
Subordinate resources: AS: 264233
IP: 138.117.116.0/22
IP: 170.80.100.0/22
IP: 2804:249c::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:2b:2b:60:57:6a:00:f1:81:f8:62:65:fb:31:39:bf:36:39:fb:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 7 01:03:26 2025 GMT
Not After : Mar 6 01:08:26 2026 GMT
Subject: CN=2D59905C3FCA5BDA34D7101B088D80451D026C47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:40:c3:47:98:f5:73:f7:a7:55:78:2f:4f:59:
ba:ba:f9:55:ac:e9:e0:11:9f:14:42:60:f6:bf:eb:
b8:ad:3e:f1:e1:44:0d:57:00:8d:2c:7c:c6:8a:ab:
76:fb:06:a2:b6:5c:b6:90:0e:71:bc:8b:a7:4a:dc:
05:b4:c0:48:c4:ad:20:44:45:89:1a:43:c4:64:ad:
8d:ed:0a:8e:15:4c:fe:18:37:52:dc:30:7f:53:34:
b9:35:a5:fb:76:c7:61:70:b0:89:8c:15:83:30:0c:
63:3c:4f:42:60:b2:5a:54:f3:1f:fe:69:19:bf:e1:
2c:f7:57:6b:2c:87:b1:09:ab:6d:1f:0d:56:ec:39:
86:1a:58:45:ac:b8:f5:e5:d7:69:05:ec:fd:ba:43:
ed:6b:16:89:b7:9a:02:73:85:80:5d:3c:1b:35:05:
9f:36:fd:44:16:a7:2c:8d:c8:cc:e1:ea:37:b1:24:
88:d0:e9:4e:f8:97:22:31:f4:36:31:5b:80:04:6d:
a9:db:cf:31:ae:22:5a:bf:6a:32:b8:6b:be:fc:cb:
be:51:16:ef:f6:2a:12:d6:0c:8b:4f:49:d3:dd:25:
46:57:de:27:99:c5:a4:42:8c:cc:86:c9:fa:12:e9:
6b:f1:18:e2:f1:03:e6:7a:1e:4e:6c:09:0c:29:cb:
ca:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.116.0/22
170.80.100.0/22
IPv6:
2804:249c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264233
Signature Algorithm: sha256WithRSAEncryption
13:0c:74:96:41:40:d6:39:ff:7c:10:bd:46:e4:92:8c:a7:fb:
24:f5:e5:6a:36:cc:8d:c0:4e:07:2c:60:86:7f:09:f6:de:6d:
02:72:8e:d1:1b:d1:e9:08:22:37:79:c1:29:9b:86:aa:b8:c2:
2d:35:f5:fc:11:60:f8:bb:ba:14:11:80:eb:34:b5:91:26:cb:
dd:d8:f4:9a:ff:62:70:2f:95:c8:f4:cd:a8:d3:31:28:b2:dc:
c8:6c:79:45:ff:84:94:04:d5:1d:01:5c:98:27:cf:95:43:09:
0f:60:da:34:3a:de:e0:a3:a5:68:c9:31:77:dc:04:83:34:78:
ee:8e:91:1c:09:2c:ef:37:ed:e6:fe:2c:48:26:c5:02:81:b8:
18:b9:a4:ab:e4:3c:13:e6:b6:99:e9:28:1b:b2:b6:35:42:0d:
86:c7:56:aa:b8:f4:59:c4:7f:dc:55:fd:a1:e7:06:6b:7a:da:
b2:19:fd:16:4f:e2:5b:e0:cd:6e:88:78:82:d0:86:8b:01:e3:
3d:85:6b:07:d7:2e:70:35:5c:04:e5:20:ae:05:a6:22:ba:cf:
68:3a:b5:e3:19:98:f9:40:5d:12:59:90:02:aa:58:f1:1e:07:
ae:88:5d:ad:0a:30:77:e4:fc:aa:d5:7d:b1:6a:90:d3:78:7d:
18:77:8d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:49:43 2025 by rpki-client