Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer
File: 7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer (raw, json)
Hash identifier: OnI8+kx14N8rsorXXR7MI1JQZedI+2KxPKTxvWqd5XE=
Subject key identifier: 71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 194991A05FDD538BB13EC16ABFAB5207A385DC42
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft
caRepository: rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 06 Mar 2025 12:48:19 +0000
Certificate not after: Thu 05 Mar 2026 12:53:19 +0000
Subordinate resources: AS: 264182
IP: 138.97.104.0/22
IP: 2804:23c8::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:49:91:a0:5f:dd:53:8b:b1:3e:c1:6a:bf:ab:52:07:a3:85:dc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 6 12:48:19 2025 GMT
Not After : Mar 5 12:53:19 2026 GMT
Subject: CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:65:10:2f:da:ce:e5:42:52:b9:41:86:ec:
42:3b:e3:9f:87:52:c9:aa:f3:f9:66:de:8c:30:66:
2f:c5:00:a3:f3:d7:aa:07:8b:b2:cf:05:92:b3:3d:
87:45:50:ff:3c:96:c1:ed:1b:7d:59:8e:3e:03:76:
9d:4a:7a:cd:2e:9d:69:ee:06:1b:b6:3b:aa:7c:8f:
5e:77:f3:f9:b0:1e:56:af:ea:0a:f2:cb:91:ce:ad:
09:e3:68:0f:b4:d7:d6:e7:18:84:22:6f:4d:14:2d:
c0:f1:de:61:e7:a3:99:e1:57:7f:98:8f:4e:65:bd:
47:cb:24:94:a3:36:31:3a:a2:75:0c:07:6d:60:cc:
85:a0:6d:66:b4:5d:a2:5b:84:2b:9c:96:70:e8:41:
f9:b6:e6:20:57:48:39:0d:ca:98:be:df:37:0e:87:
08:de:81:20:da:bf:32:0b:20:c2:20:6e:1a:b9:b6:
52:96:d2:ef:d8:a0:78:26:74:33:8e:83:ee:3a:0e:
56:1d:4e:40:8b:e4:91:3c:8b:0e:53:01:26:d0:ca:
25:9c:ae:d2:ef:53:52:ff:7d:3f:33:58:0a:ba:9a:
25:f8:55:63:5e:29:ff:85:96:38:6d:80:2a:96:b8:
81:4a:b9:a9:7f:56:c7:93:3b:6e:7b:f1:d4:66:94:
25:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.104.0/22
IPv6:
2804:23c8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264182
Signature Algorithm: sha256WithRSAEncryption
21:6a:cf:29:2d:73:b4:fc:c1:ce:36:c0:75:ef:1c:9c:03:13:
ad:be:67:e4:f3:86:b8:a4:62:90:53:a0:7f:80:89:ce:21:63:
fb:a2:a0:3d:57:23:30:07:4d:d3:d8:49:d5:f7:33:af:6a:62:
e8:aa:e6:74:16:5a:57:fd:1c:9d:74:72:1e:10:3f:09:b2:d0:
7b:ff:a2:a7:bb:58:24:ad:9e:53:c7:81:89:b3:93:d3:9b:26:
1e:bb:ef:6a:e9:0a:f6:ac:c0:5e:80:d7:b5:53:20:39:71:73:
03:48:72:c1:49:82:88:96:9f:da:0f:e1:17:9c:52:cc:5b:40:
af:fd:8c:58:53:e9:20:c5:a9:2f:80:52:59:bf:3e:e6:eb:34:
97:3c:74:40:c2:2d:4f:89:7b:82:0d:b6:eb:d5:e2:19:b0:48:
69:f9:af:a3:3e:c3:de:e1:74:27:bc:78:1e:20:74:e1:de:53:
02:f4:fc:fd:6c:35:cd:d4:b9:47:da:11:e9:0f:54:f2:28:a4:
bc:6e:f8:7f:e0:22:65:14:30:ad:8b:b5:04:51:0b:72:d4:bc:
90:e4:c4:6b:e8:56:9b:51:8f:ee:e2:bc:c9:6b:fc:75:a0:36:
48:94:e6:b2:62:13:58:ad:06:d4:28:81:b4:ac:08:45:4f:d2:
08:0c:15:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:31 2025 by rpki-client