Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.cer
File: 8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.cer (raw, json)
Hash identifier: PWYnxVer96K1ZDk92pFUOo+MNniu2rDjHWMee4Vaogw=
Subject key identifier: 8C:AA:8B:2D:24:A1:84:59:06:84:6F:8F:9F:EF:9D:5C:F6:AA:C1:91
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 7316A92B37489DFEE612C916C54B09A994B2E069
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.mft
caRepository: rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 30 Jul 2024 18:27:18 +0000
Certificate not after: Tue 29 Jul 2025 18:32:18 +0000
Subordinate resources: AS: 28577
IP: 138.99.52.0/22
IP: 186.208.216.0/21
IP: 2804:d74::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:16:a9:2b:37:48:9d:fe:e6:12:c9:16:c5:4b:09:a9:94:b2:e0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 30 18:27:18 2024 GMT
Not After : Jul 29 18:32:18 2025 GMT
Subject: CN=8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:5f:1b:9d:10:23:50:98:6f:57:bb:30:53:
3b:23:a7:84:d2:11:b3:0b:04:ba:60:4c:3e:17:a3:
4a:a1:5e:07:ad:f1:4e:0d:7e:c1:37:d3:a9:04:52:
34:3a:48:ff:69:de:14:e5:7f:87:2d:35:3a:4f:8d:
1c:3d:06:7e:48:3b:93:23:e7:67:0a:9f:21:ec:09:
2a:42:be:51:d3:d6:54:bd:42:dd:60:3a:dc:b3:c1:
3e:21:b6:47:94:da:59:bd:ee:b4:6f:80:b7:e9:97:
8f:33:54:c7:46:39:9e:5f:87:38:a0:d4:b6:57:9f:
69:9b:0e:7d:79:03:bc:e5:ba:94:05:d4:df:3e:17:
a3:15:8e:2b:dc:d9:a8:42:e6:2b:c6:50:39:6d:d8:
44:cc:aa:70:10:cd:80:20:f1:5e:ba:c1:60:32:1a:
87:e4:1d:ad:0b:4e:88:e8:c6:8f:d3:e6:1d:56:18:
33:d0:2d:72:8d:35:49:76:c1:62:4b:cb:9b:ab:25:
50:19:93:83:46:b5:ee:2a:af:9b:ba:4c:9a:69:2a:
31:df:0e:83:4b:22:d9:74:9e:42:1e:24:43:d8:57:
70:fd:ec:f2:20:e6:16:97:ec:82:1a:cf:5f:79:80:
0a:c6:23:66:ae:5f:53:69:3f:d2:a7:2e:9b:60:dc:
0d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8C:AA:8B:2D:24:A1:84:59:06:84:6F:8F:9F:EF:9D:5C:F6:AA:C1:91
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.52.0/22
186.208.216.0/21
IPv6:
2804:d74::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28577
Signature Algorithm: sha256WithRSAEncryption
20:43:ac:f1:0d:73:d6:10:e8:32:79:b6:03:59:93:f4:9a:23:
ec:ad:2b:cf:cf:94:bb:52:38:75:3c:68:bb:6a:b1:eb:e4:2c:
f7:9f:9d:11:26:61:e6:f0:a8:f6:90:79:d1:8c:86:11:a3:80:
22:f0:09:6e:b8:02:91:b8:b5:82:46:05:7a:d2:46:3d:cc:b9:
cd:17:56:25:76:80:46:2f:3a:c0:27:3e:28:c3:cc:ee:0e:0a:
df:b7:fc:7e:90:5e:50:0c:18:b5:32:28:67:5c:e3:91:0d:5f:
a4:36:39:01:7f:16:a6:b9:3b:4c:97:80:3a:28:86:e3:fd:3c:
3d:b1:c1:b8:c4:4d:36:f0:88:01:c5:e8:10:de:87:9c:8d:40:
db:f6:81:03:01:6d:06:93:eb:23:c6:36:ef:20:d2:49:83:ad:
cd:87:d1:dc:9f:e0:47:cd:de:8f:ac:83:e8:ec:ab:3d:04:ee:
4f:d4:a5:f5:94:9b:a8:f7:46:71:4f:ff:2d:c1:2e:64:19:54:
50:b8:e1:96:1e:e8:f9:11:34:d5:b6:a2:8f:ae:bc:2d:27:21:
dc:41:33:42:9d:d8:70:5e:3c:49:55:80:2e:2a:a5:6d:cf:bd:
62:c1:4e:1d:84:b9:ba:11:17:da:54:63:bf:c4:c5:02:1f:aa:
ca:8e:be:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:14 2025 by rpki-client