Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer
File: 87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer (raw, json)
Hash identifier: wIOvpsFkkaMVHHSGFgoBp+7G7o9IZMWgjtvW8dOFh70=
Subject key identifier: 87:A5:4C:D6:8F:9B:76:4B:D3:E7:FE:C3:3B:92:8C:02:D2:5F:8D:88
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 571354F0A76031AC3AC6480A0517105DE2069BDA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft
caRepository: rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 20 Mar 2025 12:29:12 +0000
Certificate not after: Thu 19 Mar 2026 12:34:12 +0000
Subordinate resources: AS: 269375
IP: 45.185.104.0/22
IP: 2804:63a8::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:13:54:f0:a7:60:31:ac:3a:c6:48:0a:05:17:10:5d:e2:06:9b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 20 12:29:12 2025 GMT
Not After : Mar 19 12:34:12 2026 GMT
Subject: CN=87A54CD68F9B764BD3E7FEC33B928C02D25F8D88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5f:1d:e6:9f:d0:40:fb:a8:bb:be:7b:f7:19:
25:63:75:63:3c:37:d0:b6:cc:be:a0:b0:5b:4e:fd:
3d:a5:c6:b5:27:39:c1:3e:c7:4d:2c:3f:e1:f5:1d:
0f:97:f7:c5:55:f1:24:49:00:6e:e6:ff:59:78:36:
d4:98:d1:46:0b:84:76:13:81:48:56:4d:73:bd:86:
34:b9:84:89:20:29:f7:94:05:50:e6:74:f6:94:54:
1f:84:f6:15:3c:c8:a7:65:64:45:79:14:f6:56:77:
c0:00:aa:a1:7a:32:74:92:4f:4f:a6:8a:87:f5:1d:
20:74:b4:1c:49:b1:76:b4:90:ca:e0:07:46:0a:fd:
66:2b:0f:75:f3:04:2d:f7:33:57:dd:3f:86:05:14:
28:86:8e:43:35:92:fe:44:be:05:b2:8c:67:d6:23:
c5:13:53:0a:46:60:ce:a1:16:e1:4d:c7:6f:be:fb:
bc:7a:14:61:58:c5:38:6b:36:76:df:0d:79:58:2a:
57:ab:80:d6:94:95:92:90:54:a8:4c:8b:0b:44:7b:
55:a5:43:14:38:41:b8:76:bc:8d:2b:c8:f5:6f:3c:
89:e8:6c:1a:4a:4f:cf:d2:38:fa:e1:4b:95:17:56:
8d:40:61:6f:cb:07:38:d4:86:42:a0:e6:0e:e2:03:
76:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
87:A5:4C:D6:8F:9B:76:4B:D3:E7:FE:C3:3B:92:8C:02:D2:5F:8D:88
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.185.104.0/22
IPv6:
2804:63a8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
269375
Signature Algorithm: sha256WithRSAEncryption
9a:d1:df:cb:a6:71:a1:c8:83:b7:a2:14:9d:ee:e4:07:b0:7d:
3f:bf:70:d3:df:72:bf:4b:16:3c:1c:00:8f:b4:ec:e4:67:25:
1a:8f:86:5f:5d:67:20:fc:e7:a6:a3:51:53:61:12:2d:95:70:
e4:ca:9e:c9:ab:c1:c9:93:b1:e3:28:20:0c:2f:92:93:59:eb:
f1:63:cb:02:47:be:d0:99:b0:2d:68:af:63:e7:31:03:33:d0:
8d:ac:3d:b1:dd:67:77:62:d2:03:a9:61:59:b3:51:e0:0a:93:
7c:4a:c5:ef:a3:11:7c:1a:9d:6f:44:a3:7f:ad:1e:53:5a:a8:
8b:32:53:de:41:9e:8e:49:16:e3:f8:75:77:83:d5:e5:7e:03:
fd:44:7b:9a:fc:3e:90:db:1c:71:aa:ad:b1:a1:12:11:b4:d5:
4c:f5:40:03:6c:d2:b0:db:c6:48:c0:e7:69:0d:c9:91:54:00:
08:2c:8a:20:8f:af:95:c3:fc:1d:8b:3a:7c:84:14:ff:52:4c:
e8:22:63:7c:44:ca:cd:7b:fb:a2:75:8b:06:08:ed:88:03:ca:
d2:2e:53:86:ef:db:18:34:6b:cd:bd:46:35:09:76:14:ce:cb:
a9:56:b9:2c:0b:f1:99:58:1c:4b:43:52:1e:4a:e5:e8:ca:ab:
ba:30:d1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:31 2025 by rpki-client