Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.cer
File: 701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.cer (raw, json)
Hash identifier: EWBYkNZ693QbaQp3/9098QO44aYHns9cg7VXdoZocTo=
Subject key identifier: 70:1C:A9:DD:24:FE:6B:BE:9C:FF:CE:3F:0A:DB:C6:64:A1:21:57:1A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 592A0B01362D428981640888A7C71B992FAC0DFF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.mft
caRepository: rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 05 Mar 2025 18:35:52 +0000
Certificate not after: Wed 04 Mar 2026 18:40:52 +0000
Subordinate resources: AS: 263849
IP: 138.185.200.0/22
IP: 2804:26b0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:2a:0b:01:36:2d:42:89:81:64:08:88:a7:c7:1b:99:2f:ac:0d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 5 18:35:52 2025 GMT
Not After : Mar 4 18:40:52 2026 GMT
Subject: CN=701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:ed:47:b8:fb:ff:c4:3f:b7:6b:9a:cd:f0:
73:cb:2a:d4:2a:69:e5:84:f9:50:ee:56:9e:fc:d1:
c6:2b:d2:d1:d9:87:1f:20:ae:01:5b:a9:69:7b:73:
3c:0c:df:1a:9f:c6:cd:ba:6f:7c:ed:d4:ef:0d:57:
7d:6d:17:86:43:c0:ff:49:02:d3:5f:be:46:13:6f:
82:44:68:6f:52:f5:7d:55:e0:d6:ad:d5:00:65:d1:
e8:49:d1:8e:5b:b8:3d:98:9d:5c:3e:25:47:ba:7b:
a9:22:20:cd:88:bf:cb:03:20:00:63:8d:c6:34:a1:
39:d1:6a:d6:14:84:72:69:58:ee:b1:bc:03:6a:b7:
a0:f0:2c:71:c4:f9:46:04:20:86:cc:06:ad:8a:5b:
ac:1a:81:67:bc:98:96:73:71:0d:32:2e:8c:83:9d:
b3:4f:36:b7:f9:b7:37:6c:6f:41:bf:d5:7e:d9:1a:
c5:55:5c:47:fe:9e:5f:b7:12:5e:72:c4:fe:fe:67:
40:24:93:d6:d3:0f:9a:bc:8b:95:b8:96:a5:d5:27:
f6:ce:33:1d:fd:b9:87:f0:f7:85:66:10:da:4e:cd:
f8:55:9c:91:bd:bc:06:8e:55:cc:aa:6b:af:f8:33:
8b:03:05:a5:dd:d2:82:36:2e:44:58:99:33:9d:4a:
e0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
70:1C:A9:DD:24:FE:6B:BE:9C:FF:CE:3F:0A:DB:C6:64:A1:21:57:1A
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.200.0/22
IPv6:
2804:26b0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263849
Signature Algorithm: sha256WithRSAEncryption
9f:d9:9c:2f:33:9a:e7:b2:07:19:a3:2e:50:5a:05:15:3e:91:
f1:68:83:0d:d3:14:0c:52:d6:6b:52:02:24:d4:8a:85:8b:d6:
57:ef:fd:f1:25:9e:4c:a2:42:67:e3:08:a5:1e:bd:e3:11:de:
6d:55:4a:80:ce:7b:d2:bc:34:a4:c4:5b:1b:1e:86:cd:48:69:
d9:40:5d:c2:68:87:66:50:c6:0a:8b:d5:a8:a8:b4:37:e7:0a:
eb:22:b8:6d:f3:bd:6d:24:f4:f7:e6:94:36:2a:e9:91:f3:fe:
b6:43:92:c7:0b:fe:55:87:ed:62:58:1e:86:c7:28:74:00:55:
a4:ed:a6:c0:e9:38:1e:3f:38:0e:b6:ec:70:bd:6c:aa:6d:38:
3e:8b:f9:68:ab:c8:07:29:a3:c4:34:bc:03:18:ab:93:8c:1a:
60:32:58:8f:87:27:19:86:bd:1c:f4:e4:9e:d5:b2:38:f2:18:
bd:60:f5:cf:a5:50:d6:f2:00:48:0a:b4:97:4f:2b:4e:d1:ea:
e8:52:4c:08:15:4f:e2:4a:99:03:11:91:fa:d2:d7:30:9a:5e:
c7:1f:74:34:59:52:05:f8:35:e3:c8:d6:10:34:ab:fb:de:4a:
cd:ec:a9:ac:e9:af:bd:27:4e:dc:f1:8c:55:bd:70:a5:21:ce:
fd:78:d3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:12:08 2025 by rpki-client