Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F.cer
File: 948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F.cer (raw, json)
Hash identifier: GwqdVi9qIvmQPnxShm6aLhilvcPc5Jm4tXobmTKkfgk=
Subject key identifier: 94:8B:70:67:C8:4F:B5:B2:FC:1B:E3:CC:E1:DE:F3:62:98:BF:93:9F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 12A0D610E890E60CA8297918FF00C2278F21747E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F.mft
caRepository: rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 09:49:40 +0000
Certificate not after: Thu 03 Apr 2025 09:54:40 +0000
Subordinate resources: AS: 262403
IP: 177.38.96.0/21
IP: 187.61.88.0/22
IP: 187.85.60.0/22
IP: 2804:3e0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:a0:d6:10:e8:90:e6:0c:a8:29:79:18:ff:00:c2:27:8f:21:74:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 09:49:40 2024 GMT
Not After : Apr 3 09:54:40 2025 GMT
Subject: CN=948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:64:26:53:a9:7c:19:82:b5:41:32:f2:97:f8:
78:92:28:e3:1b:91:6e:c7:9e:a1:fc:ca:8a:38:1a:
98:92:f1:a0:8a:50:ed:b9:12:31:04:1b:5f:d1:bc:
4b:b5:c8:3e:fb:6c:d1:65:ea:77:38:bf:8d:36:33:
50:23:32:dd:2b:34:63:7d:47:4b:63:95:18:39:92:
b9:30:d7:86:ea:48:4a:50:9f:d4:8b:f9:8d:82:d4:
e4:39:ad:7b:f2:b4:c0:2a:cf:2f:b6:e8:67:8b:08:
25:65:a8:8e:a1:cf:49:c9:10:9f:4b:fa:16:29:5f:
f2:d8:60:b9:c4:8e:13:8a:b0:d0:e2:92:8e:77:76:
30:41:f2:cd:1e:0f:50:be:e2:75:95:55:d5:28:c5:
6c:23:98:09:3f:a1:ae:06:6d:50:43:a9:ee:af:94:
83:00:8e:5a:04:0f:16:b6:ac:d3:44:8c:94:f6:36:
e7:9f:f7:25:aa:7d:0d:bd:d8:3a:cf:fc:59:36:6d:
de:fc:94:98:bf:88:70:5b:40:8b:bc:89:1c:ca:be:
1b:fc:21:3f:ec:8e:8d:0c:31:5d:60:3b:54:d9:89:
56:5f:fe:65:b8:0e:30:36:79:ea:5b:24:ad:04:7f:
c3:45:bb:9c:93:ba:61:69:58:47:7c:d2:44:6e:05:
08:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
94:8B:70:67:C8:4F:B5:B2:FC:1B:E3:CC:E1:DE:F3:62:98:BF:93:9F
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.38.96.0/21
187.61.88.0/22
187.85.60.0/22
IPv6:
2804:3e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262403
Signature Algorithm: sha256WithRSAEncryption
a5:20:6f:56:f6:d4:80:1f:e6:42:dd:08:17:1b:fb:de:dd:84:
d2:43:b5:68:b0:b4:bb:38:ad:a1:44:e1:1c:80:da:a0:7a:28:
30:06:9b:f4:2f:b4:84:b1:5a:41:c7:91:07:be:de:3a:bd:07:
b4:d0:eb:81:ab:fa:b9:9c:f9:7b:94:0b:40:96:40:dd:83:20:
88:78:c5:af:8b:f9:b8:10:b8:5d:04:0c:12:7f:47:eb:51:a8:
14:af:d0:e1:b1:a3:d4:b1:c9:b3:9a:cd:ed:4c:c3:f6:9a:8d:
06:06:8f:5f:48:d3:3f:f4:38:87:f1:15:14:b8:e2:b6:1f:fc:
58:5c:f8:7b:d8:23:95:9d:a2:69:97:fd:c0:09:44:85:47:fd:
2e:92:c4:d0:4e:57:59:1d:bd:da:bc:2d:fd:39:a5:df:75:cf:
4d:47:95:71:e4:b3:0b:43:ad:20:30:f5:f0:46:89:7e:82:67:
24:48:33:c0:31:a8:e7:ed:3a:39:bd:d1:52:d9:8e:38:84:d9:
1a:3e:ae:73:c6:06:75:92:2a:b2:b0:9c:3a:ed:ae:86:c3:c3:
eb:85:33:2e:81:bf:2c:3b:6e:e9:24:99:16:74:8d:fb:48:1d:
72:8e:3a:ef:28:33:33:ec:fa:3a:db:44:4b:bc:54:56:74:a0:
7f:1a:45:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:35:05 2025 by rpki-client