Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8CE072C70BE0F9CDCB8AC1B39B64F87772C86479.cer
File: 8CE072C70BE0F9CDCB8AC1B39B64F87772C86479.cer (raw, json)
Hash identifier: pyVQ1gsHC5P0/N6rNgqfG0tEGnixtRE+0+MxND0Qs08=
Subject key identifier: 8C:E0:72:C7:0B:E0:F9:CD:CB:8A:C1:B3:9B:64:F8:77:72:C8:64:79
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1EB1C64885A6D80517A21B38B7391D57A3C5E778
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/8CE072C70BE0F9CDCB8AC1B39B64F87772C86479.mft
caRepository: rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Sat 18 Jan 2025 12:28:12 +0000
Certificate not after: Sat 17 Jan 2026 12:33:12 +0000
Subordinate resources: AS: 262675
IP: 131.255.52.0/22
IP: 186.233.228.0/22
IP: 2804:a44::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:b1:c6:48:85:a6:d8:05:17:a2:1b:38:b7:39:1d:57:a3:c5:e7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 18 12:28:12 2025 GMT
Not After : Jan 17 12:33:12 2026 GMT
Subject: CN=8CE072C70BE0F9CDCB8AC1B39B64F87772C86479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:8b:dc:c6:44:5b:9a:43:f9:6c:48:88:1b:
8c:75:b4:64:94:61:dd:d6:5f:d6:3d:30:08:bb:e8:
9b:d3:cd:ec:27:67:2f:ef:57:17:d3:74:b7:81:29:
9b:85:b8:62:5c:78:25:ce:6a:73:06:62:89:2e:1e:
2b:93:cb:b9:8a:e0:6c:77:6f:13:1d:d3:21:bd:fc:
46:3b:4a:be:30:21:2c:d8:66:fc:7f:1a:06:22:25:
40:82:7f:3e:56:aa:f0:5b:8e:2e:02:34:d2:a2:51:
1a:26:27:69:9b:33:68:df:c4:09:be:29:a9:be:c1:
a2:5d:80:bf:8d:db:44:f6:d7:1c:a3:9e:47:3b:69:
ff:20:ae:d0:4f:bf:ee:84:ac:8a:5a:76:8e:c2:8a:
ac:5b:d0:40:55:46:dc:0e:44:93:c5:11:f0:8a:ea:
8c:c3:e3:56:ac:e4:40:74:91:0a:5d:79:b6:a6:99:
1e:d1:d3:60:f9:3d:49:14:01:e1:fc:e1:93:13:a6:
e4:a0:06:25:c4:cb:3a:d3:79:9b:25:b2:c1:81:6c:
8b:d0:19:dd:96:45:59:ed:2a:2f:c5:a1:2a:43:05:
a5:be:df:96:64:a3:5f:b2:06:75:9f:41:15:30:8c:
e6:e4:cf:57:9c:4d:ee:05:9a:d6:0a:61:15:f9:d2:
5d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8C:E0:72:C7:0B:E0:F9:CD:CB:8A:C1:B3:9B:64:F8:77:72:C8:64:79
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/8CE072C70BE0F9CDCB8AC1B39B64F87772C86479.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.52.0/22
186.233.228.0/22
IPv6:
2804:a44::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262675
Signature Algorithm: sha256WithRSAEncryption
74:81:4d:12:c9:8c:fb:95:84:4d:27:4a:f9:7c:b1:0f:c0:cd:
62:66:35:59:8b:70:92:49:66:24:87:43:e2:49:b2:38:26:c3:
29:87:8c:7b:13:4c:93:d5:50:8d:b2:5a:8a:f1:4b:39:d0:96:
8b:a0:57:3d:f2:ee:80:9b:d7:33:a0:2c:5d:cd:d1:d1:02:f2:
24:fd:ff:64:de:ef:21:33:e1:9c:b0:d4:85:de:6c:0f:08:a2:
e0:61:8b:a6:31:b6:66:1d:29:21:9a:dd:2a:4c:a9:9c:2b:a5:
99:3c:33:88:ae:ba:8c:28:3e:37:7c:bb:0c:fe:c5:b2:4c:ad:
89:5a:3f:31:df:98:55:fe:da:6e:7d:29:dc:a5:10:91:e9:c6:
8a:e5:67:e5:e4:6b:26:aa:a0:89:77:d5:2d:ae:a7:78:11:35:
93:ef:22:21:b5:cf:99:fc:d7:ff:06:13:85:10:9b:a4:4b:5b:
e6:09:4f:a9:63:48:bd:c8:4a:ef:76:d1:e6:d2:80:47:45:23:
09:17:9f:8e:76:6a:a6:b3:41:39:4a:48:1b:fa:79:66:9d:4e:
ee:16:b9:e6:df:64:54:10:a8:27:d7:64:9f:21:4f:4e:e6:36:
1b:bf:eb:23:62:a2:ad:04:7a:2a:81:90:f9:09:74:3c:2f:c1:
67:69:12:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:15:18 2025 by rpki-client