
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer
File: 3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer (raw, json)
Hash identifier: 1KjRS0cIO+ZTxkJc9dNn6JHdEUVB8EEOQwF7Z21BNrc=
Subject key identifier: 32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 55DB6B90E1EDDA1F5D17AD4CC8212D273B850F86
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.mft
caRepository: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 23:50:52 +0000
Certificate not after: Wed 02 Apr 2025 23:55:52 +0000
Subordinate resources: AS: 61784
IP: 138.186.184.0/22
IP: 201.55.200.0/22
IP: 2804:1948::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:db:6b:90:e1:ed:da:1f:5d:17:ad:4c:c8:21:2d:27:3b:85:0f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 23:50:52 2024 GMT
Not After : Apr 2 23:55:52 2025 GMT
Subject: CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e4:f5:06:e1:00:5b:4e:51:02:4f:bd:54:ca:
a4:eb:9f:0f:cf:eb:54:9f:6d:24:9b:98:74:b7:8f:
3b:81:e3:81:3c:bb:7f:92:f7:62:69:76:75:97:8e:
ac:7c:60:9b:48:31:65:03:07:20:8c:e6:ca:01:85:
a2:a0:77:c5:ad:6d:eb:2c:d5:af:84:84:9c:1a:f4:
95:ec:4b:81:fc:26:06:b6:69:67:f5:5b:20:7c:a3:
85:a9:3f:74:1a:cb:e9:52:89:0b:27:f8:55:21:6c:
3f:79:8f:0a:15:74:2e:69:7b:2a:10:cb:65:c9:60:
3a:48:24:c8:87:d3:9b:54:48:e7:81:0a:0a:1c:cb:
11:fd:98:8b:e9:81:d0:f2:0e:ba:8f:26:9d:5d:db:
93:bb:55:72:ab:32:e2:a9:11:b7:9b:88:eb:05:9f:
35:ae:4d:47:05:21:96:06:3a:3a:a1:54:65:e9:e3:
b2:e7:d7:55:58:22:ad:03:9d:94:65:ec:a9:e6:d5:
68:bd:28:bd:b4:a2:52:15:0f:de:6a:06:24:e5:56:
0e:55:c8:ad:1f:e1:50:dd:b5:b3:6e:97:7f:1f:da:
b9:66:8c:2a:c7:bc:80:a6:e7:f7:6e:d1:dd:e0:f8:
6b:62:9e:99:13:72:72:49:66:a7:1c:10:35:43:37:
1d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.184.0/22
201.55.200.0/22
IPv6:
2804:1948::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61784
Signature Algorithm: sha256WithRSAEncryption
bf:5d:4f:49:ae:7d:e8:c7:63:c9:8f:7c:51:83:3e:32:c0:8d:
c2:40:2c:98:d9:fa:0e:b6:a5:a9:30:96:9a:e4:3a:a9:59:0c:
b8:a9:00:bf:5b:bd:3f:93:f8:d9:9e:1f:07:6a:cb:c7:95:70:
49:a5:73:f6:b8:ea:1b:c5:46:07:4a:de:05:50:07:61:15:8a:
19:62:f8:b8:c4:35:86:88:da:7e:d2:ce:c6:81:33:bd:29:9c:
26:ea:18:74:f2:3a:22:b3:34:0b:10:40:a6:9e:93:5d:da:17:
ad:cf:96:43:15:5c:94:8e:98:dc:3a:34:ef:10:c2:0a:a3:8d:
f5:17:9a:57:90:52:6f:6a:9b:78:41:ac:ad:dd:2f:0e:55:2b:
12:59:bb:8f:73:0e:56:d7:fa:4d:96:26:d6:6d:14:c6:8b:b8:
d3:91:7a:90:68:87:28:6d:7d:f3:1f:cc:4c:27:16:12:df:de:
b7:fb:83:e7:ea:e1:16:06:58:a6:75:52:de:0c:ba:27:42:60:
be:31:ff:bc:6d:b8:f3:ee:11:55:2a:4f:f6:0f:8d:54:36:c6:
a1:26:c3:5d:33:d0:e7:7e:8f:e2:a2:f4:b4:53:80:97:a4:2a:
f1:f5:ac:66:c5:bb:00:c6:bd:61:94:13:e5:30:2b:00:86:f5:
90:48:bd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:26:57 2025 by rpki-client