Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/71CB0E9BA040DE2845A0FDC64E42B5CE56B47FD8.cer
File: 71CB0E9BA040DE2845A0FDC64E42B5CE56B47FD8.cer (raw, json)
Hash identifier: rTdLcuNvE+XH7I7UXrxtnOXwmQvgTngAuZ/fTFOmJpE=
Subject key identifier: 71:CB:0E:9B:A0:40:DE:28:45:A0:FD:C6:4E:42:B5:CE:56:B4:7F:D8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5B6B6E26592835ABD6B93C2CAA91767F05DCB394
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/71CB0E9BA040DE2845A0FDC64E42B5CE56B47FD8.mft
caRepository: rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 28 Mar 2025 14:04:17 +0000
Certificate not after: Fri 27 Mar 2026 14:09:17 +0000
Subordinate resources: AS: 61592
IP: 45.224.216.0/22
IP: 45.232.188.0/22
IP: 45.234.100.0/22
IP: 2804:4c34::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:6b:6e:26:59:28:35:ab:d6:b9:3c:2c:aa:91:76:7f:05:dc:b3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 28 14:04:17 2025 GMT
Not After : Mar 27 14:09:17 2026 GMT
Subject: CN=71CB0E9BA040DE2845A0FDC64E42B5CE56B47FD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:d5:af:df:77:48:ec:76:e1:fb:c5:1b:f0:
a5:7b:0f:25:4b:42:d8:8f:bd:27:35:64:24:ac:cd:
87:44:5b:45:d3:71:b1:a3:29:cf:fb:82:fa:bb:e1:
19:7f:93:7d:09:73:29:93:6d:89:6a:ed:c2:94:5d:
d6:6c:89:c0:a2:84:d4:0e:1b:ee:f3:3c:ef:84:88:
22:4f:53:9b:23:68:49:6a:04:98:91:0b:c2:09:20:
5c:94:aa:3f:f0:e7:19:9c:60:fa:7b:8f:49:4a:98:
5c:30:72:09:6d:f6:76:ee:ff:f6:e8:d6:01:0e:3e:
d9:bc:da:6b:62:b7:f4:a5:cf:63:c2:a9:c3:f1:d8:
90:d4:30:0b:22:48:cc:18:bb:38:a4:8e:01:c7:25:
79:eb:08:49:d9:50:c5:2e:74:bd:ac:fa:4c:92:d6:
be:59:cd:16:17:f6:73:8d:23:f2:fa:0c:f6:1b:64:
c2:5b:bc:85:46:bd:d4:6e:93:1a:48:27:41:72:35:
ad:1d:bd:4b:ba:3a:cc:83:27:55:bc:12:f4:5b:96:
9a:04:f6:f8:70:6b:75:f9:80:6d:70:ef:c0:5a:08:
78:6c:7c:f0:26:a0:fe:92:c2:6a:4c:f1:5a:5e:48:
17:1a:96:63:ea:bf:55:c6:42:8e:84:b9:17:98:fd:
a0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
71:CB:0E:9B:A0:40:DE:28:45:A0:FD:C6:4E:42:B5:CE:56:B4:7F:D8
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/71CB0E9BA040DE2845A0FDC64E42B5CE56B47FD8.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.216.0/22
45.232.188.0/22
45.234.100.0/22
IPv6:
2804:4c34::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61592
Signature Algorithm: sha256WithRSAEncryption
49:83:a7:aa:6a:1a:12:00:18:52:f3:22:6d:53:b3:04:97:e1:
10:4e:bf:88:0b:db:fd:5c:e3:33:d8:fe:ac:b3:11:6e:57:3b:
39:1e:f5:30:9d:e5:05:bb:90:60:bc:10:97:df:ae:02:c3:da:
eb:0a:dd:7f:69:a6:c9:1a:50:94:88:60:0f:7b:32:28:07:3d:
7b:a3:7c:c0:8f:cc:05:54:63:13:ff:d6:8e:52:bb:51:3e:29:
12:bb:3b:13:d2:d8:a2:23:c7:e5:1f:3e:c9:49:c0:22:ab:0d:
16:e3:18:21:04:75:b8:ec:a0:ea:c9:e2:d1:20:44:8c:d7:1e:
42:af:53:df:1e:7b:ba:c1:7d:72:79:c9:ca:ae:c5:20:c0:c6:
35:4d:0f:0c:ec:c1:d3:4e:87:6e:b8:38:32:f3:10:2b:cf:9c:
1a:c3:84:18:73:21:eb:e1:80:8e:93:7b:d5:c6:d3:d2:c2:7e:
d6:8c:1b:df:cb:21:88:6a:3c:02:d0:f4:d9:20:b7:ed:e9:7e:
c0:67:d3:ec:6c:73:78:f6:c7:ac:f4:de:b2:7a:ea:18:b2:31:
03:9f:82:7e:f0:55:cf:dc:7d:40:52:5e:5c:08:8e:21:00:09:
f0:5e:12:55:cb:e2:a3:26:6b:eb:11:c8:45:25:d4:a5:ee:9a:
5c:c9:46:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:11:17 2025 by rpki-client