Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer
File: 88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer (raw, json)
Hash identifier: xUfciwcHyMksill6pFqGPGM83keSU98uZgvXCuJdPQY=
Subject key identifier: 88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7DB93DC9B40BE0621A38A918DC54B87DFD18C0D1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.mft
caRepository: rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 10 Mar 2025 15:13:44 +0000
Certificate not after: Mon 09 Mar 2026 15:18:44 +0000
Subordinate resources: AS: 262373
AS: 263151
IP: 168.195.252.0/22
IP: 168.205.24.0/22
IP: 170.239.36.0/22
IP: 177.128.136.0/22
IP: 191.242.176.0/20
IP: 2804:874::/32
IP: 2804:1780::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:b9:3d:c9:b4:0b:e0:62:1a:38:a9:18:dc:54:b8:7d:fd:18:c0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 10 15:13:44 2025 GMT
Not After : Mar 9 15:18:44 2026 GMT
Subject: CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8d:85:19:a4:b2:ef:da:12:72:c1:5a:e3:78:
14:9c:c3:60:87:3f:03:44:87:0f:dc:67:d9:1c:1a:
52:45:ed:32:1e:18:bb:3b:85:e6:cc:71:70:c3:2d:
dd:65:8c:80:b1:d5:4f:28:64:c2:d5:b4:cf:f6:29:
09:4e:b0:36:c0:da:8d:eb:42:c1:19:9c:a2:ff:a2:
cb:1d:a9:b9:fb:53:0d:b6:fd:0c:69:52:1a:52:12:
eb:fb:42:2d:52:26:92:e0:17:b3:dc:52:21:54:fc:
df:51:a5:07:7b:d7:89:38:fd:32:16:7e:01:94:c4:
4b:af:63:f2:3f:06:41:22:1f:66:33:89:a9:27:08:
84:01:5f:87:3b:46:3b:2e:14:a3:e5:9b:07:36:66:
3d:76:c8:fd:e9:e0:7c:35:3c:b0:a1:8e:9a:4a:ce:
c5:b7:2e:d9:f8:ba:66:bc:bd:83:1c:42:79:f7:e9:
5b:fd:43:c2:ed:50:2e:a3:04:11:6d:67:2b:22:ef:
d1:4d:88:33:5f:87:d4:b0:96:96:4c:d6:f6:34:3b:
9f:89:43:00:4b:88:8c:cf:0a:a3:01:56:f2:ee:f0:
0f:00:c9:35:96:5d:5e:91:94:99:3f:02:f0:0d:a8:
e6:4c:c2:47:67:7d:d6:48:53:ae:ee:c8:93:e4:2b:
e4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.252.0/22
168.205.24.0/22
170.239.36.0/22
177.128.136.0/22
191.242.176.0/20
IPv6:
2804:874::/32
2804:1780::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262373
263151
Signature Algorithm: sha256WithRSAEncryption
5f:08:00:17:8d:5e:c7:13:da:fe:46:fd:cb:e1:d2:17:00:95:
28:a3:02:34:cc:e5:ed:4c:73:6c:39:a5:99:7e:58:07:be:87:
09:a0:72:f4:87:75:09:0b:83:72:26:dd:0d:fd:62:17:26:00:
3b:cb:96:74:81:3e:93:56:8b:39:68:e7:42:62:23:6a:f4:c4:
88:17:6a:a2:75:2b:4d:95:db:b8:99:83:9c:59:d7:81:b1:ac:
57:94:e0:98:94:46:74:bd:e1:6e:96:ee:da:44:c3:2c:d2:e8:
c9:26:57:5e:02:3b:df:1e:47:26:f5:36:9c:a1:8f:30:93:30:
dc:26:bc:5d:72:01:38:c9:bf:5f:78:d5:11:af:e0:eb:ca:21:
98:f8:78:60:65:f9:fe:b6:a3:b4:dd:5a:83:31:e4:67:ac:17:
73:dc:00:3e:a0:94:ac:a7:5f:6a:e7:09:51:ca:64:07:b3:80:
47:7d:b5:7f:c4:a2:5d:2c:c0:6a:9c:bc:8c:85:1a:ef:3a:8b:
56:7f:b2:80:80:a8:00:3f:ee:9f:96:7a:06:54:b2:2c:c6:f0:
27:3f:d4:24:68:3a:57:d5:ad:b7:1a:a6:7f:b0:c6:aa:af:f0:
69:fa:3d:6f:02:74:d1:44:4c:6b:0d:fb:a7:57:06:0b:f5:59:
93:dd:aa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:40:47 2025 by rpki-client