Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
File: 3C7BA9294464BE01B4C2A500708DD55CA879584D.cer (raw, json)
Hash identifier: 8x9OIG860l4aFPeyKw2dT1u2duqmeG/vdT8AusVyN+Y=
Subject key identifier: 3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0F2A919FB8EFE98F422EBF25ECF97F53CF4FE377
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.mft
caRepository: rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 19 Nov 2024 21:16:05 +0000
Certificate not after: Tue 18 Nov 2025 21:21:05 +0000
Subordinate resources: AS: 61621
AS: 267420
IP: 45.235.160.0/22
IP: 170.231.208.0/22
IP: 177.23.252.0/22
IP: 186.209.123.0/24
IP: 186.209.222.0/23
IP: 2804:4d3c::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:2a:91:9f:b8:ef:e9:8f:42:2e:bf:25:ec:f9:7f:53:cf:4f:e3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 19 21:16:05 2024 GMT
Not After : Nov 18 21:21:05 2025 GMT
Subject: CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:36:bc:52:08:ca:e3:0d:a2:95:7c:1a:f7:
58:47:d2:04:39:cb:1f:74:7d:84:1a:eb:7a:e6:31:
e1:f5:51:72:09:0e:a8:1d:28:e0:13:cd:15:6e:23:
46:51:12:01:3a:a3:37:9f:e9:9a:89:72:4f:c7:73:
2d:5f:c2:05:f0:8c:4b:5e:fa:08:9a:85:e7:b2:f5:
9d:e0:89:43:6d:be:00:82:36:23:50:2a:2b:2b:b4:
33:aa:2d:68:f7:6a:c3:43:8d:c2:40:58:ce:b1:ca:
7f:c6:29:a3:0d:66:aa:4d:61:1a:df:52:03:5c:89:
ec:f0:0b:68:65:df:c3:fd:18:4f:5f:d0:0b:4f:e9:
41:28:3c:9d:11:58:d8:b0:73:fa:3e:9e:4f:0f:d4:
be:97:64:f9:14:df:f4:c6:89:07:cb:76:fe:d8:52:
67:01:64:7a:0c:00:af:5c:42:32:da:7a:e5:d4:8c:
8b:d5:bb:42:2d:11:d9:ff:a9:cc:c3:a7:7a:63:86:
39:59:6a:f7:c5:1a:af:ed:3e:49:8b:99:63:f8:88:
c0:f2:cb:9b:47:56:3c:5a:b6:cb:3a:38:f7:de:c2:
c5:d5:90:8b:f4:c5:6f:c4:21:69:8b:82:7f:9b:30:
3d:1e:fc:4b:8d:f1:db:3a:0f:19:bd:3a:f7:3b:9d:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.160.0/22
170.231.208.0/22
177.23.252.0/22
186.209.123.0/24
186.209.222.0/23
IPv6:
2804:4d3c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61621
267420
Signature Algorithm: sha256WithRSAEncryption
57:8f:87:f2:c8:7c:f5:35:cb:f6:c3:ec:49:4d:b4:43:0d:aa:
1c:eb:ab:76:c0:18:ed:ad:c9:5f:40:d0:1f:70:bb:41:4c:47:
2c:a9:4f:fb:58:c4:0a:7e:53:7a:01:19:32:85:6c:b3:0a:e1:
e7:02:c2:e1:7f:d7:45:ca:ff:0c:dd:3d:5c:10:c8:a8:5d:6d:
3a:cf:0c:22:2f:0d:1d:73:95:5e:a2:f5:80:a5:d4:f0:3b:42:
8f:04:0b:e0:c8:02:11:a4:00:8a:5a:b7:41:7b:6e:fc:37:8f:
6a:24:ae:4f:fc:fb:df:94:a7:48:e9:dc:cd:16:69:a6:41:a6:
86:1d:b7:b3:62:9f:e3:4f:2a:0b:f2:ee:86:7d:2a:12:39:b7:
c6:29:ac:ed:39:2e:68:8e:5c:e7:bb:04:54:3d:f3:9d:ad:44:
d8:7a:02:22:6e:f6:eb:31:05:f1:a1:55:be:95:71:bd:ec:a6:
1f:38:bd:be:bf:85:1c:5a:9d:0b:67:0b:c9:9e:8e:1d:89:f8:
f2:bf:32:a8:cd:59:df:3f:13:31:33:dc:fc:bc:12:62:8c:49:
fb:55:36:f2:f0:0a:d4:df:70:dc:e4:18:fb:89:5f:a1:af:c0:
5b:7e:6a:99:e4:02:89:dd:3f:9a:74:10:68:c0:53:ef:2e:41:
3d:54:66:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:10:17 2025 by rpki-client