Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3BAAD03DACE169BF27B158252E2E6ABA9451938D.cer
File: 3BAAD03DACE169BF27B158252E2E6ABA9451938D.cer (raw, json)
Hash identifier: ZkLT5M+XCKqT4Mvr+9rUErGZnfcvwQqHaeUN7uWh/Zc=
Subject key identifier: 3B:AA:D0:3D:AC:E1:69:BF:27:B1:58:25:2E:2E:6A:BA:94:51:93:8D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 35A16C99C2A6793DAEFDF09F2D543173EEDA2891
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/3BAAD03DACE169BF27B158252E2E6ABA9451938D.mft
caRepository: rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 09 Dec 2024 17:05:08 +0000
Certificate not after: Mon 08 Dec 2025 17:10:08 +0000
Subordinate resources: AS: 265256
IP: 168.0.156.0/22
IP: 2804:2d00::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:a1:6c:99:c2:a6:79:3d:ae:fd:f0:9f:2d:54:31:73:ee:da:28:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 9 17:05:08 2024 GMT
Not After : Dec 8 17:10:08 2025 GMT
Subject: CN=3BAAD03DACE169BF27B158252E2E6ABA9451938D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ea:70:15:96:00:8f:61:08:c4:61:14:2b:3f:
3b:40:ea:11:bb:e9:c2:f7:5c:a9:b7:37:d2:8c:0d:
fb:c6:d6:7b:48:df:9d:36:2d:4b:e1:d0:b8:5b:00:
20:22:c2:09:b3:40:fd:20:d3:f1:1c:80:f9:ca:59:
dc:f5:16:ac:f2:4f:fd:fd:99:57:6b:4f:e8:7a:b0:
67:92:ff:46:7c:2e:d5:b2:87:6d:e5:76:c0:38:37:
57:3e:b7:27:fe:79:84:8e:ec:c2:b2:8e:f4:91:d1:
1e:d5:36:99:c8:ad:36:d1:5f:2e:1a:9e:ab:31:b1:
60:18:d9:73:e6:54:ae:ed:d1:54:c5:b8:50:6e:1d:
3e:09:d4:ec:4b:42:38:33:3c:16:01:fb:75:78:7f:
af:ba:6e:e5:64:dc:62:bb:bd:d3:94:19:ad:89:9c:
98:a3:b4:e1:8e:f4:91:83:04:0a:87:dd:81:1b:c7:
d3:61:23:8c:ed:95:7d:ea:0f:8f:23:b3:f4:fc:1a:
a8:6f:7b:11:0f:99:df:5b:61:61:75:26:c5:16:4d:
ed:87:d3:a2:41:df:ce:a4:29:7f:7d:3e:59:7e:d8:
30:b5:36:35:7b:8f:80:41:50:37:91:78:73:42:9c:
7e:5f:35:9f:b4:b0:3c:9b:9f:3a:ae:28:81:9b:1b:
22:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3B:AA:D0:3D:AC:E1:69:BF:27:B1:58:25:2E:2E:6A:BA:94:51:93:8D
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/3BAAD03DACE169BF27B158252E2E6ABA9451938D.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.156.0/22
IPv6:
2804:2d00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265256
Signature Algorithm: sha256WithRSAEncryption
aa:42:cb:58:37:b9:b4:1d:60:0c:54:82:8c:26:10:2c:a6:4a:
a5:b1:dc:32:3f:0c:bc:72:45:15:2b:6e:d0:7f:69:5b:32:0f:
c9:f9:b9:6a:cb:cb:96:39:bb:85:cf:71:02:4c:03:c9:5c:67:
cf:75:00:ab:4d:ea:62:30:f1:f9:e1:36:77:43:3b:44:27:3e:
bb:29:60:4b:e6:d7:64:02:b7:05:e6:09:c7:a5:59:ec:48:5b:
ba:4b:49:2a:43:bb:0b:5b:38:f1:95:da:1c:0f:bb:75:e5:58:
53:6d:8e:4f:0c:8d:63:5b:ae:8a:2c:4a:5b:48:5e:ac:3b:6c:
8d:19:17:48:85:c9:9e:14:39:04:69:68:f6:c4:16:29:37:c2:
03:ee:f2:29:43:f9:9a:e6:84:59:cb:94:ea:09:59:76:27:c9:
e3:b9:b8:d8:43:25:40:cb:f5:6a:8d:dc:89:99:1c:d6:4d:cd:
95:ef:10:f9:27:70:02:08:a8:fc:a0:d8:8a:03:f1:6c:39:8b:
df:f1:cc:cc:c0:7c:92:0a:70:a6:36:39:37:61:1c:fa:97:06:
05:65:b9:12:4d:c4:bb:22:de:f9:a8:e2:ff:9d:96:fc:f7:78:
b9:9e:15:90:d9:20:5b:35:ff:6d:13:80:58:b0:83:0a:9a:8b:
ea:e1:70:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:40 2025 by rpki-client