Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.cer
File: 32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.cer (raw, json)
Hash identifier: 2lM5vhW6PpS4P6kujzFmnHDDPS3l9B+7a1dalFE1aX0=
Subject key identifier: 32:BB:15:FB:C2:CC:D3:29:83:9D:40:CE:F5:9C:EF:6D:FE:3C:DA:F6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1131251568CD46DFA789097679103D8EDB921D78
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.mft
caRepository: rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 07 Mar 2025 20:47:13 +0000
Certificate not after: Fri 06 Mar 2026 20:52:13 +0000
Subordinate resources: AS: 267665
IP: 45.224.204.0/22
IP: 2804:44fc::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:31:25:15:68:cd:46:df:a7:89:09:76:79:10:3d:8e:db:92:1d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 7 20:47:13 2025 GMT
Not After : Mar 6 20:52:13 2026 GMT
Subject: CN=32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:84:5a:6d:d6:6c:84:f0:5b:22:df:3d:7a:
0c:5f:3d:a3:e5:6d:2c:2a:01:d6:5d:02:00:ac:d6:
d9:8a:60:36:89:14:64:f4:7e:40:8e:bb:63:54:e7:
98:a2:c3:96:b3:ab:87:e9:83:a1:f4:6b:23:f3:bf:
7f:cd:e4:ce:d3:5f:1d:06:fa:55:6d:99:24:51:9b:
d6:52:9e:f7:bd:d5:18:13:2c:7c:81:5f:2f:fe:f9:
d1:17:90:4b:9a:47:14:37:08:a1:05:35:62:e8:bf:
13:52:b1:65:e1:87:91:29:bf:03:f7:58:59:f0:d6:
90:69:29:ad:ff:98:e3:db:b5:a9:0e:3f:b9:df:04:
7f:05:db:ff:ac:f2:1c:b4:04:5b:5f:88:ae:61:17:
d7:1f:41:14:01:17:1f:72:57:28:70:bd:c1:f1:dd:
62:9b:c9:c3:21:f2:40:49:40:3a:1d:1c:4b:c0:39:
41:06:be:8b:fa:10:83:e5:6b:60:7f:6b:fc:2b:3b:
b0:02:28:48:ea:93:30:af:21:76:c9:81:91:77:75:
6c:74:93:71:09:3b:9d:90:c8:7d:95:e5:d8:a1:01:
93:4d:6d:1f:b4:99:78:f0:0a:eb:b7:49:82:d4:84:
75:bd:48:f0:25:fa:b4:49:89:b3:6d:d9:5b:39:d9:
a4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
32:BB:15:FB:C2:CC:D3:29:83:9D:40:CE:F5:9C:EF:6D:FE:3C:DA:F6
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.204.0/22
IPv6:
2804:44fc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267665
Signature Algorithm: sha256WithRSAEncryption
2f:e3:1d:9f:d0:63:ba:ce:a0:ea:26:41:12:3d:ef:91:6c:03:
fe:09:9c:86:1f:1c:eb:4a:d1:d3:6d:05:59:9a:fe:9e:8f:ab:
87:c0:97:30:d7:b2:5d:3f:29:b2:bf:64:f1:5c:e4:bd:05:5a:
9b:ed:ba:d4:84:0b:93:08:9f:9a:cd:36:bc:c6:a1:1d:11:0e:
5f:e2:e9:2c:70:69:ec:cc:72:07:34:42:dd:14:17:e5:28:10:
72:63:3e:8d:f6:7e:ec:c7:ce:c3:fe:30:87:fc:a8:ae:bb:7e:
23:f6:5d:c9:dd:7b:b0:9a:2e:c9:b6:27:9b:77:7b:74:1f:67:
cc:2a:00:c7:a0:e1:1f:a0:37:78:3f:53:5a:e0:c7:b5:05:5f:
53:61:99:da:9b:60:2b:78:ad:c1:d1:9b:02:64:84:5c:1b:92:
17:2d:62:b8:34:19:27:53:55:f4:c8:ba:cb:3c:0c:37:04:57:
d3:1a:9d:35:4f:8a:09:81:13:12:ad:f6:d6:bc:d2:28:b2:d5:
70:48:72:18:26:b9:81:da:3e:58:c3:cf:2e:2f:63:2f:b1:b0:
c9:5f:38:9b:89:82:7f:f6:5b:bd:49:7a:10:80:10:96:67:2f:
46:15:86:d6:c8:71:6b:5b:b1:65:7e:0c:dd:59:5f:f6:63:93:
d7:8a:f5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:11 2025 by rpki-client