Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/667B7A3A996C94B3C7BB4263E1DCE48A4AAD8EEA.cer
File: 667B7A3A996C94B3C7BB4263E1DCE48A4AAD8EEA.cer (raw, json)
Hash identifier: aNZFlSF8gc9z0YrWM6aioNiaWTQ19l6uIm6Q2hMQQdY=
Subject key identifier: 66:7B:7A:3A:99:6C:94:B3:C7:BB:42:63:E1:DC:E4:8A:4A:AD:8E:EA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4586B59F4347B2242C6F911BC1222F0B4DFD6E44
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/ELnYhLVpUKUPfNiEYnfytHcTFQGzbr3NpwbNoQQ6tiCH/1/667B7A3A996C94B3C7BB4263E1DCE48A4AAD8EEA.mft
caRepository: rsync://rpki-repo.registro.br/repo/ELnYhLVpUKUPfNiEYnfytHcTFQGzbr3NpwbNoQQ6tiCH/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 20 Apr 2024 01:49:39 +0000
Certificate not after: Sat 19 Apr 2025 01:54:39 +0000
Subordinate resources: AS: 263472
IP: 132.255.136.0/22
IP: 191.242.56.0/21
IP: 2804:125c::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:86:b5:9f:43:47:b2:24:2c:6f:91:1b:c1:22:2f:0b:4d:fd:6e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 20 01:49:39 2024 GMT
Not After : Apr 19 01:54:39 2025 GMT
Subject: CN=667B7A3A996C94B3C7BB4263E1DCE48A4AAD8EEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:aa:3d:f3:f8:0e:db:ad:24:6b:e5:85:23:
14:e3:0f:dd:8a:35:87:fd:f6:ce:f8:7a:1d:16:98:
18:fa:26:af:a1:39:a0:a4:a7:49:a5:a6:87:4a:a2:
b5:2b:ad:79:0b:e2:f8:34:d0:90:79:f9:2b:ef:a2:
d8:88:28:e2:9c:9b:a2:7b:3d:79:64:34:45:25:82:
1b:df:f7:55:6d:08:0c:c4:9e:b1:e9:d4:08:9c:ae:
14:f6:32:fb:d8:92:3e:a7:91:5f:64:e6:ec:8d:2b:
3f:78:3f:a6:eb:d5:3f:f4:08:6c:c9:9b:18:23:eb:
15:f7:71:9e:33:d3:f0:1b:98:90:4b:36:8f:9e:a5:
03:e7:b1:62:67:4e:37:16:0b:b8:7e:c5:fe:b3:75:
9a:c0:6b:cb:2b:6d:b8:cd:0b:f9:5f:32:c1:9f:22:
b4:f1:db:a5:37:59:92:a8:cc:50:d1:d6:9c:88:da:
47:b1:a4:85:54:08:a0:a3:ae:3a:2c:aa:de:f4:58:
eb:33:99:b6:c7:6c:31:84:23:60:88:1d:d8:29:a4:
27:4e:a2:c9:21:31:ef:fd:a6:96:1d:e7:64:50:b6:
62:64:08:4d:83:a5:f7:cf:9b:53:04:aa:0b:aa:00:
5c:d8:56:b2:c7:07:5e:a3:dc:c5:a8:ee:6f:6a:79:
1b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
66:7B:7A:3A:99:6C:94:B3:C7:BB:42:63:E1:DC:E4:8A:4A:AD:8E:EA
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/ELnYhLVpUKUPfNiEYnfytHcTFQGzbr3NpwbNoQQ6tiCH/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ELnYhLVpUKUPfNiEYnfytHcTFQGzbr3NpwbNoQQ6tiCH/1/667B7A3A996C94B3C7BB4263E1DCE48A4AAD8EEA.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.136.0/22
191.242.56.0/21
IPv6:
2804:125c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263472
Signature Algorithm: sha256WithRSAEncryption
67:58:99:13:0f:b8:85:a4:1f:fd:0f:4e:e5:98:e7:b8:8d:76:
f0:18:fb:a9:9c:fe:c7:38:93:c7:b4:bb:ec:ce:48:ee:42:70:
cc:b7:98:8f:51:34:95:c1:01:2a:00:ea:89:56:bb:b7:04:10:
f6:88:e7:00:9a:b5:5c:48:d0:52:25:68:c2:a6:aa:65:ce:96:
7d:f6:4b:93:86:bf:85:24:33:bf:8d:d3:57:1b:61:dc:77:88:
5e:ff:b2:cb:f0:7c:cf:f0:8d:b0:8e:c8:87:26:ac:1d:8b:45:
61:45:1e:e7:d2:90:0e:2f:52:d4:5a:23:7e:c3:c8:0d:df:a6:
23:2a:fc:0d:ac:25:e9:46:74:16:30:c9:f2:9e:ba:e9:62:7b:
c1:ec:d5:90:eb:a4:21:12:cc:78:d6:25:d1:8c:82:9b:c8:96:
5c:a2:3d:51:96:d0:42:e0:30:1a:52:29:3c:b0:6f:72:50:c6:
6e:1d:f7:9a:7f:b2:e5:6c:b0:12:eb:45:fc:4c:1e:37:5e:b7:
5d:3e:3f:db:25:77:b8:2d:d4:a4:96:64:a8:00:2b:d5:89:b3:
0e:f3:18:7b:09:aa:2a:93:53:ad:b5:50:5d:e5:3d:69:f1:37:
69:8e:da:ac:a9:65:2f:36:3b:92:0e:59:37:6d:81:a9:8e:e5:
9d:42:b3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:47 2025 by rpki-client