Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/40BC064454A81D9D6E8ACCED4BB10B10B335AB3A.cer
File: 40BC064454A81D9D6E8ACCED4BB10B10B335AB3A.cer (raw, json)
Hash identifier: t8HSZY7g++INqSBFftfqKH0E/OqXRhUr2AFoM1w82Ik=
Subject key identifier: 40:BC:06:44:54:A8:1D:9D:6E:8A:CC:ED:4B:B1:0B:10:B3:35:AB:3A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 21BE19D02350328EA3AAAA12DA6C2F4DC43BD084
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/1/40BC064454A81D9D6E8ACCED4BB10B10B335AB3A.mft
caRepository: rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 20:51:08 +0000
Certificate not after: Wed 02 Apr 2025 20:56:08 +0000
Subordinate resources: AS: 265385
IP: 170.254.248.0/22
IP: 2804:3344::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:be:19:d0:23:50:32:8e:a3:aa:aa:12:da:6c:2f:4d:c4:3b:d0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 20:51:08 2024 GMT
Not After : Apr 2 20:56:08 2025 GMT
Subject: CN=40BC064454A81D9D6E8ACCED4BB10B10B335AB3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:be:1a:a2:df:b2:b8:7d:57:b2:46:cf:43:14:
96:33:ad:8b:8a:74:65:68:ea:e9:a5:ef:76:83:3a:
a4:ec:0d:2c:9e:ea:76:f5:c7:2a:67:a9:dc:bd:98:
43:70:90:54:81:6f:a1:9f:b1:cc:c9:69:3e:67:d1:
8d:bd:b1:8e:0e:5f:02:68:95:50:f1:d3:59:d8:8d:
fd:5d:55:0e:6c:5e:90:77:d2:1f:5b:ce:1f:90:2b:
ea:6a:fa:fb:c9:6f:de:1f:78:b2:25:66:2a:97:b9:
c6:e1:12:bf:cc:94:a2:0a:80:a7:36:45:4f:c5:af:
98:55:31:1e:6f:a0:89:d7:34:54:13:bf:f4:f3:03:
ca:2e:b7:2a:9e:42:0e:e1:c1:e6:3c:d2:75:bb:66:
ab:df:8e:e7:4a:6f:41:c8:c4:8b:6e:79:cf:02:bd:
4c:93:8d:5d:be:76:77:48:9e:ae:fb:1a:f8:d9:1f:
a4:ab:f2:6f:90:18:68:d5:7d:80:c1:fc:6f:49:36:
18:3c:d8:63:32:f5:65:ad:02:d1:94:82:1f:12:26:
5a:43:ae:6a:71:b1:88:a3:07:ae:e2:8a:e1:cc:00:
24:dd:35:eb:41:dd:bc:2b:02:9a:eb:b3:07:17:0e:
91:6b:1a:e1:57:96:20:f6:c5:c5:ea:e0:2b:07:b6:
1d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
40:BC:06:44:54:A8:1D:9D:6E:8A:CC:ED:4B:B1:0B:10:B3:35:AB:3A
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/1/40BC064454A81D9D6E8ACCED4BB10B10B335AB3A.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.248.0/22
IPv6:
2804:3344::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265385
Signature Algorithm: sha256WithRSAEncryption
1c:3f:a3:70:62:7a:d1:11:5f:9a:8b:e0:95:24:23:5c:a9:aa:
36:82:67:e5:87:2d:07:9d:37:b0:91:96:3c:90:ec:23:01:86:
ac:05:bd:bf:54:02:52:79:de:75:20:76:d4:f6:55:8e:dc:d5:
67:22:67:c5:7c:b4:77:cd:42:32:bf:ce:8a:b0:5d:88:5b:c2:
b4:ad:ea:89:70:75:56:49:e3:be:a6:9e:00:c6:91:c9:c6:39:
15:45:09:9c:ad:19:bf:d6:62:48:3c:5f:49:d4:a6:f5:14:cb:
11:32:15:39:31:ea:55:d9:88:c7:93:5a:fb:a0:61:9e:d7:e9:
d3:6b:5f:1c:a5:90:dd:48:fc:49:a5:fc:a2:a9:5b:6f:94:ee:
0b:7d:96:30:b1:33:14:07:29:ff:19:4f:44:b6:84:a2:e8:3f:
c5:f7:d2:18:00:00:f8:2b:07:49:c3:dc:cc:1b:4e:6e:c6:bc:
50:ec:d4:6a:f1:7d:da:77:68:9a:9e:ab:5c:4d:17:b1:d6:fe:
63:d6:1e:cd:65:97:28:ee:fb:6e:02:cf:8f:60:a9:cd:3d:5f:
c5:c1:59:a2:64:fd:25:ac:23:f2:3b:c5:74:e0:51:19:48:ec:
b8:c6:e5:e0:3e:72:90:6c:93:6f:14:1d:cb:a2:18:84:b4:86:
75:da:08:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:22:39 2025 by rpki-client