Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3BC35960C45E5F0F3B6EDEF99F631912B34FA4C5.cer
File: 3BC35960C45E5F0F3B6EDEF99F631912B34FA4C5.cer (raw, json)
Hash identifier: 995Gcd4ATtR3obtid412sH/H2L1iPgoO0x8UgYwOzCI=
Subject key identifier: 3B:C3:59:60:C4:5E:5F:0F:3B:6E:DE:F9:9F:63:19:12:B3:4F:A4:C5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 37006BD2B9D9041AD1834E73CC281C4A06DE3954
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0/3BC35960C45E5F0F3B6EDEF99F631912B34FA4C5.mft
caRepository: rsync://rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 24 Jan 2025 15:18:02 +0000
Certificate not after: Fri 23 Jan 2026 15:23:02 +0000
Subordinate resources: AS: 52641
IP: 177.125.132.0/22
IP: 201.55.204.0/22
IP: 2804:191c::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:00:6b:d2:b9:d9:04:1a:d1:83:4e:73:cc:28:1c:4a:06:de:39:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 24 15:18:02 2025 GMT
Not After : Jan 23 15:23:02 2026 GMT
Subject: CN=3BC35960C45E5F0F3B6EDEF99F631912B34FA4C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f8:e7:44:09:2f:86:3f:d2:c7:f1:70:e2:01:
dc:91:e3:0c:7b:17:56:d0:3f:7b:01:bb:87:22:5e:
b9:a2:99:e2:98:66:70:7e:29:a1:71:6b:7d:d2:f3:
cc:ff:ad:51:03:f9:56:77:6d:66:a6:e6:03:45:3d:
f2:a0:d3:02:ea:2d:3e:7d:c8:c8:93:79:3f:16:c6:
97:9c:d1:33:08:fb:d3:4d:cf:68:f7:cb:04:cb:e4:
ed:56:7a:61:d2:bc:d0:54:ad:1f:eb:ca:56:04:40:
94:1c:56:2a:4e:4b:d0:24:12:97:c5:a0:f0:aa:4f:
33:70:df:00:89:d1:6e:71:ae:bf:04:cf:31:47:13:
a2:4a:87:47:a2:8d:09:d6:87:a4:74:83:ff:60:da:
c4:1a:0b:37:65:93:4f:45:86:31:14:6c:7d:02:c5:
8d:76:73:cf:28:b1:29:0c:1a:ec:f5:aa:68:33:1d:
24:76:dc:55:4e:82:34:71:3f:9d:db:05:c7:9d:72:
22:0f:3d:59:ab:8a:55:25:e0:f9:78:ab:3c:70:34:
e7:d9:52:42:67:c8:7f:78:73:b0:30:57:7b:e4:3d:
aa:72:f1:31:b0:ca:dc:3b:bf:99:05:02:32:8e:2f:
57:2e:1a:f6:fa:0b:74:6e:6a:9b:fd:00:8f:75:bd:
36:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3B:C3:59:60:C4:5E:5F:0F:3B:6E:DE:F9:9F:63:19:12:B3:4F:A4:C5
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0/3BC35960C45E5F0F3B6EDEF99F631912B34FA4C5.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.125.132.0/22
201.55.204.0/22
IPv6:
2804:191c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52641
Signature Algorithm: sha256WithRSAEncryption
5b:8c:12:87:95:5d:b1:83:68:0d:98:c0:57:c4:69:0c:ec:6d:
2d:65:a9:02:e2:9d:31:d0:86:ae:40:a7:e9:f8:27:87:9f:ea:
24:de:0f:55:d5:5e:5a:13:eb:97:fb:ef:a1:32:64:35:f6:04:
db:94:54:c7:d4:db:91:15:71:78:10:5e:5b:78:9b:b7:db:07:
7c:dc:5c:1c:3d:32:9b:79:0c:c0:5b:cd:91:3f:40:05:69:52:
87:59:df:98:18:e3:e5:cc:c6:29:69:0f:90:7a:4d:5a:44:51:
04:e5:75:ac:06:42:f4:a3:5d:ab:92:dd:28:72:c3:c5:d7:ce:
9e:f0:c3:bb:6d:5f:fa:a4:d0:9f:72:98:4d:f4:2a:6f:bb:0f:
11:f5:7a:1c:e2:69:67:27:ab:71:f9:5b:cd:a4:c8:1c:dc:1e:
4b:e3:48:15:45:3c:40:dc:6d:f3:2a:d0:05:55:78:bf:3a:cb:
53:75:ff:a6:0b:71:20:73:ea:8d:1f:5f:27:8e:0e:64:66:45:
f9:c3:96:8d:63:34:cb:ea:ac:a4:d3:b5:33:ab:09:aa:a6:f9:
c3:6d:25:73:0b:f3:7f:1d:6d:12:e8:d6:86:c5:70:0c:e2:f0:
89:e8:7d:05:f2:13:0e:96:37:62:73:e7:05:61:58:88:6a:40:
56:62:f1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:15:53 2025 by rpki-client