Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F9ED4DB7FEBE40A94D4D7C5D6A17516A3C3CEDC.cer
File: 2F9ED4DB7FEBE40A94D4D7C5D6A17516A3C3CEDC.cer (raw, json)
Hash identifier: acI81RiexSR4l2WxW0tequaoOGCMMitEeLpQ4YK9QKk=
Subject key identifier: 2F:9E:D4:DB:7F:EB:E4:0A:94:D4:D7:C5:D6:A1:75:16:A3:C3:CE:DC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 693FC41B89EA51080F5C39875405155F094945FD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/2F9ED4DB7FEBE40A94D4D7C5D6A17516A3C3CEDC.mft
caRepository: rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 21 Feb 2025 17:36:05 +0000
Certificate not after: Fri 20 Feb 2026 17:41:05 +0000
Subordinate resources: AS: 271595
IP: 190.9.84.0/22
IP: 2804:7dfc::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:3f:c4:1b:89:ea:51:08:0f:5c:39:87:54:05:15:5f:09:49:45:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 21 17:36:05 2025 GMT
Not After : Feb 20 17:41:05 2026 GMT
Subject: CN=2F9ED4DB7FEBE40A94D4D7C5D6A17516A3C3CEDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:c6:78:37:32:b8:50:8e:96:5d:bc:dd:1b:
c2:8c:32:91:9e:0d:06:49:b5:cb:59:90:e3:a9:48:
17:89:94:e9:6d:f6:f9:f7:0e:17:02:68:d2:24:e0:
3a:b2:17:50:43:ee:ea:59:63:bc:97:56:2a:b8:6a:
67:ed:47:5d:01:bd:50:9d:4c:78:c4:ea:1a:53:32:
2d:8e:f5:5a:5b:22:b7:c1:00:c8:18:54:98:f3:2f:
e7:fb:91:68:88:07:88:91:d4:e5:36:88:8c:e9:73:
3a:12:47:7a:ce:a7:f3:91:a2:68:aa:17:11:53:f4:
3d:ad:48:54:80:49:6c:9b:ad:4c:24:a7:15:94:b0:
fb:82:dc:51:8b:43:29:c2:57:79:0b:70:fe:51:fb:
7e:e9:64:0c:22:59:05:67:62:7e:05:5f:08:a9:6f:
bb:19:76:64:38:a7:a5:21:5e:78:87:d7:e5:42:eb:
a9:2d:55:28:c5:c8:9b:fa:4c:de:f1:33:db:66:46:
68:48:a0:3e:b4:a7:f7:7b:00:0e:8b:81:ae:60:3d:
55:71:2f:b8:6a:d7:93:10:84:cc:e1:d4:b1:80:29:
5b:24:50:f1:cd:25:03:29:6d:7f:26:51:62:4f:18:
44:f6:61:70:f8:c8:ac:b2:a2:81:55:bc:44:02:95:
1d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2F:9E:D4:DB:7F:EB:E4:0A:94:D4:D7:C5:D6:A1:75:16:A3:C3:CE:DC
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/2F9ED4DB7FEBE40A94D4D7C5D6A17516A3C3CEDC.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.9.84.0/22
IPv6:
2804:7dfc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271595
Signature Algorithm: sha256WithRSAEncryption
67:ae:b5:d2:07:90:70:ba:81:64:e5:84:6a:58:82:07:d4:c2:
9e:c7:59:87:e9:4d:36:a2:50:d3:87:e3:79:8b:b1:4f:d5:f4:
e6:0e:c2:8c:5d:ad:63:7b:b6:39:aa:94:af:7a:36:d6:05:ab:
4c:44:1a:35:65:7f:ec:08:35:71:62:69:66:95:82:11:14:6c:
e7:61:13:f0:9d:97:7f:2d:04:98:41:3a:fe:c7:f2:59:86:7a:
92:8a:74:2d:d4:45:9a:ee:3a:35:bc:dd:01:fc:91:27:cd:86:
ef:ee:13:10:be:a8:3d:62:29:42:a4:c4:2a:b8:85:af:14:d7:
0e:ba:a1:4c:88:db:f2:f4:ec:c1:45:f7:9c:23:00:33:15:c6:
3e:f9:d0:06:30:ed:36:7b:8c:af:1a:2c:bb:a7:32:2d:c8:cc:
67:c5:8c:50:75:63:ee:8d:bc:ab:fe:ae:43:30:33:76:67:a0:
cf:1d:c8:9f:9d:ae:8c:e4:a7:b1:5d:83:dd:c1:2c:ee:1c:fd:
5d:b6:b2:46:8f:42:4a:9f:4a:60:2a:af:47:45:b7:1b:5c:48:
37:bc:70:67:2a:78:37:b4:18:b7:9f:ef:d8:43:a8:47:42:bc:
5e:3f:ca:70:b8:c1:f7:43:ad:75:e0:c2:71:64:c0:ab:57:58:
40:15:82:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:03 2025 by rpki-client