Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.cer
File: 481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.cer (raw, json)
Hash identifier: Z9zBqijr+ZEfBBAoWx3Mud7R3ZMk99/Nl16zjnSDQz4=
Subject key identifier: 48:1B:24:AC:65:23:E8:C3:FC:CE:DE:9F:C8:B8:A7:4C:C2:C4:E5:F9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 78EF16C5604EDC38E24DE5D967F4F2CAB6DCD5FF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.mft
caRepository: rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 05 Mar 2025 18:35:17 +0000
Certificate not after: Wed 04 Mar 2026 18:40:17 +0000
Subordinate resources: AS: 267248
IP: 45.232.20.0/22
IP: 2804:4a8c::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:ef:16:c5:60:4e:dc:38:e2:4d:e5:d9:67:f4:f2:ca:b6:dc:d5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 5 18:35:17 2025 GMT
Not After : Mar 4 18:40:17 2026 GMT
Subject: CN=481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:1b:99:a5:e0:00:d5:30:d8:87:09:b5:63:
4f:1e:64:f1:88:fc:b2:70:f4:62:27:41:89:a6:51:
63:00:69:84:4f:97:00:9d:14:a2:1e:d3:de:76:55:
bc:fc:7e:74:49:30:98:8c:50:cb:cc:b8:23:e5:b6:
f5:a2:b1:63:76:64:8c:8f:86:7a:89:13:06:6d:cc:
2f:34:88:90:dd:7b:68:06:42:a3:32:99:80:7d:c0:
6c:35:35:fb:85:7e:50:ec:ef:9a:30:bb:fa:79:69:
70:28:c4:ba:1e:98:01:91:d4:ef:98:f3:43:34:1a:
63:73:24:a7:f2:dc:cf:89:f2:89:76:e4:97:00:e6:
ef:b0:97:0a:e3:5a:09:f3:e9:66:0a:5f:e5:d2:55:
20:c9:b0:0e:08:64:b1:30:3a:14:d8:73:be:f2:7f:
ee:06:a3:f2:75:0e:a8:a0:90:9a:b1:83:79:8f:76:
52:3f:31:a2:70:1c:dd:2e:4a:56:6d:ef:84:f0:2f:
1b:ac:eb:35:6b:a4:30:1b:a7:a6:7f:7c:ad:80:f9:
fe:ca:5c:30:7c:db:ee:c7:21:bf:9d:9d:3b:38:2d:
80:57:f2:4c:b3:2a:4a:28:2c:dc:17:6b:d9:ce:22:
1d:93:0a:a4:85:7c:77:d5:e7:01:0d:c6:3e:33:b3:
37:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
48:1B:24:AC:65:23:E8:C3:FC:CE:DE:9F:C8:B8:A7:4C:C2:C4:E5:F9
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.20.0/22
IPv6:
2804:4a8c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267248
Signature Algorithm: sha256WithRSAEncryption
8f:84:0b:cd:76:2a:6f:2a:99:9e:0b:ed:85:47:93:4f:e9:f8:
a6:08:34:c8:d4:fd:d8:6a:a6:53:d9:3d:c2:b1:6b:06:61:35:
93:5f:cd:af:ce:92:a4:b0:9c:27:35:38:b8:89:ff:96:fe:56:
4e:40:1b:c3:1a:85:61:a8:53:8f:4a:f7:fe:a8:f8:d5:df:25:
e8:47:a6:47:f3:6d:2c:01:27:3e:9b:45:28:c0:b0:3f:19:ef:
a2:f7:4d:c2:d2:de:64:15:ee:10:2a:ae:c9:bc:ca:67:02:a8:
c9:79:1c:af:3e:3b:1d:41:8c:4a:6b:24:d3:d7:26:24:51:97:
0c:39:77:da:43:58:ce:ed:26:82:bc:5c:b0:78:d4:8f:b9:72:
e3:2f:d5:6a:fc:39:b4:a3:84:73:0d:ed:f7:03:78:fb:9e:1c:
70:98:11:7c:05:95:9c:d0:88:4e:54:fd:bb:2c:24:9d:7f:42:
92:a1:79:78:bf:0a:28:61:21:c3:e8:a7:52:13:52:ca:3a:26:
fc:2c:06:31:ff:d9:2a:c5:b8:b4:17:46:95:5c:ee:46:70:92:
af:22:17:d4:75:00:ee:10:85:d1:7f:bf:86:e9:cb:87:9f:dd:
5c:c0:d9:b0:11:8e:b1:9d:a6:25:da:13:97:d5:2b:2f:85:7c:
00:9a:3b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:02:02 2025 by rpki-client