Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
File: 3DDE2C96A736983C4145E6A74FA601EF275DE118.cer (raw, json)
Hash identifier: CIvv3x9h81iOd2Atpc/Hl6LXke5ExWM9NYTSIInRY9c=
Subject key identifier: 3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 6DDC6DF2C7DE1DDE3BD3D2E8A31D6F29E2447493
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft
caRepository: rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 07 Mar 2025 10:35:25 +0000
Certificate not after: Fri 06 Mar 2026 10:40:25 +0000
Subordinate resources: AS: 52783
IP: 131.255.116.0/22
IP: 138.122.132.0/22
IP: 170.78.116.0/22
IP: 177.74.184.0/21
IP: 177.200.64.0/20
IP: 2804:10f8::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:dc:6d:f2:c7:de:1d:de:3b:d3:d2:e8:a3:1d:6f:29:e2:44:74:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 7 10:35:25 2025 GMT
Not After : Mar 6 10:40:25 2026 GMT
Subject: CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ea:21:2b:5c:5d:75:09:3c:60:9c:15:e3:85:
d4:02:17:ab:05:c6:6c:14:70:5d:0a:01:3d:29:d5:
22:43:7d:09:fb:bb:43:63:72:c9:7a:61:37:28:e5:
a5:1e:ad:55:16:aa:59:21:91:4f:f3:a9:30:39:b4:
09:ad:bb:39:9a:bd:ec:c4:23:de:96:da:cf:e1:8b:
43:8b:00:8b:54:15:0a:a1:80:54:4b:49:ae:c2:8c:
ce:16:78:bc:b1:81:56:8b:37:96:f7:5c:e5:ea:3f:
5a:9f:8d:ca:c8:ac:60:c4:ac:b9:ed:3f:9e:48:dd:
71:ca:27:4e:5f:01:19:f8:d6:a6:9a:98:0e:50:83:
03:c7:ba:04:1f:04:d8:07:97:af:30:cb:53:ae:c2:
eb:e5:95:b3:65:03:95:3c:06:cd:7a:4e:bd:cb:87:
4c:c0:91:2c:7b:34:e4:1b:41:55:ed:44:ad:50:fb:
46:0a:88:68:3a:84:1c:21:7d:26:09:9f:30:c1:90:
2b:c5:48:2f:83:0b:bc:61:e0:ed:e5:23:71:5e:ae:
be:d1:81:42:bb:cb:cd:8b:ba:6d:cf:20:8c:83:cd:
6c:0f:15:a5:ad:ef:16:76:0f:ec:81:0d:d1:b9:e5:
d7:6a:55:06:52:04:57:1e:4f:58:eb:f5:fe:fa:27:
4f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.116.0/22
138.122.132.0/22
170.78.116.0/22
177.74.184.0/21
177.200.64.0/20
IPv6:
2804:10f8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52783
Signature Algorithm: sha256WithRSAEncryption
2e:e9:ac:99:5e:e0:de:7e:39:b5:21:87:6e:cb:60:65:2a:03:
46:1c:2d:ed:9c:79:d4:44:1c:67:ae:bc:ef:27:27:db:49:1b:
66:0f:8b:d0:67:9f:f8:86:02:41:8b:75:5a:b8:25:81:e6:c9:
bb:28:23:be:11:09:d5:a3:43:5b:02:6d:f9:ad:60:8d:b7:fb:
0a:97:fa:e6:1b:86:92:a5:63:7f:99:04:0c:3e:dd:1f:e3:d5:
ef:30:5a:cc:e2:d0:5c:6c:b3:ea:94:49:c1:bd:74:96:ae:26:
fd:8c:e2:6b:7e:4b:cf:f1:76:27:3b:7e:3e:ef:d3:3e:ad:e9:
7d:84:63:f9:4c:15:9c:57:3e:94:3e:75:4d:8e:7e:0f:de:37:
34:99:30:6b:ac:ac:49:17:48:a9:92:a5:c4:e6:6e:54:f5:f4:
3a:3d:c2:af:0a:c1:5e:63:a5:a7:ad:29:e2:d8:30:dc:58:ee:
47:2d:4f:34:8f:53:4f:a0:69:0a:e0:2b:2f:61:2a:82:e7:f2:
cf:95:18:a1:64:06:be:c0:17:0d:d7:fa:5d:aa:25:5c:4d:65:
0a:83:06:5d:47:d8:df:2b:f0:e0:26:60:32:24:58:48:9b:1d:
3b:d5:63:f5:16:62:dd:bb:33:a9:3a:57:9c:46:80:0c:0d:19:
e4:f7:67:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:36:20 2025 by rpki-client