Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
File: 970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer (raw, json)
Hash identifier: elT6Y0EIrgvniv4B3+t2P5F8kQLRor9XOxQ9YJb7KPs=
Subject key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 221258C529C65164AC6DD50C124CE0C3A8633AA6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.mft
caRepository: rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 21 Feb 2025 18:57:40 +0000
Certificate not after: Fri 20 Feb 2026 19:02:40 +0000
Subordinate resources: AS: 264496
IP: 131.255.224.0/22
IP: 143.255.204.0/22
IP: 170.238.72.0/22
IP: 177.55.64.0/20
IP: 186.195.160.0/22
IP: 2804:2084::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:12:58:c5:29:c6:51:64:ac:6d:d5:0c:12:4c:e0:c3:a8:63:3a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 21 18:57:40 2025 GMT
Not After : Feb 20 19:02:40 2026 GMT
Subject: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:2a:83:a7:50:9d:f3:c9:16:38:e2:a7:ca:
e3:cf:e5:4a:70:02:f2:41:5d:f2:c3:03:2a:f3:f3:
9f:7c:4c:73:4e:ce:eb:b6:e7:1b:dc:b9:31:be:70:
cb:ae:d0:7a:a9:fa:5c:a8:73:25:dc:60:d9:d9:2f:
a6:7d:7b:ce:b4:8e:30:57:dd:67:2b:22:66:74:18:
64:65:ac:c2:b8:2c:a0:45:8c:01:47:63:a6:41:02:
5c:a9:d3:9d:d7:0a:7d:94:6f:0f:94:5a:e5:dc:94:
ec:0c:a1:a3:f4:df:dd:8b:b0:49:f0:c7:1c:ba:e8:
fb:eb:2c:bc:1b:1c:63:6a:56:29:c9:60:de:ea:e0:
c5:16:51:4f:60:c2:c8:f5:bb:01:2d:4f:46:bf:b3:
80:96:4a:2f:a3:b0:a0:c9:6e:a8:88:ca:36:55:15:
4f:b9:82:73:a1:c3:3f:43:bd:14:b2:87:2f:5e:44:
bd:e4:85:fb:75:36:4e:43:31:51:3e:8a:aa:67:17:
30:00:85:d6:fd:8b:ff:cf:c7:b6:dc:73:d9:6a:13:
94:1e:bd:6e:7a:f3:cd:81:2c:69:c5:8e:81:4f:d0:
f8:1a:16:f4:98:5f:70:c6:96:31:cc:38:53:6a:08:
54:a3:49:ef:c9:70:62:9f:14:56:51:8e:90:93:75:
f8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.224.0/22
143.255.204.0/22
170.238.72.0/22
177.55.64.0/20
186.195.160.0/22
IPv6:
2804:2084::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264496
Signature Algorithm: sha256WithRSAEncryption
c9:fc:c9:0b:e2:fa:20:f3:07:7a:5e:de:40:ea:a7:52:7e:12:
3d:a1:11:35:72:36:b3:ab:c2:f3:34:97:ad:17:56:c6:99:3e:
2f:32:00:00:7f:a4:2f:68:2c:8e:74:1e:db:a9:98:d7:36:7c:
a0:37:4b:9b:66:06:62:04:15:a8:72:08:92:ae:71:8a:9f:87:
bd:85:32:cd:cf:05:8e:be:e1:e7:a2:c3:14:25:99:0f:85:d1:
a0:db:16:f0:3e:9f:3a:76:1d:04:f2:a3:eb:5c:0a:c8:0d:d6:
be:3c:3b:9a:52:1a:c2:a5:7d:51:fd:55:23:0a:3a:0a:c8:91:
d8:80:fe:db:93:a4:e4:5e:b1:8c:fc:43:88:62:34:5a:a9:c8:
ed:9e:c8:37:43:44:e4:8b:da:f5:38:9b:f1:d6:7d:a0:45:7b:
59:26:0b:df:f0:c0:2f:aa:2e:14:4e:23:db:5f:ce:f0:61:26:
af:d2:7e:db:42:e8:a9:8c:bc:62:16:97:12:0a:5f:db:26:c6:
95:1d:a3:2c:ec:41:79:ff:8d:a8:3e:d4:ce:c4:b6:a8:66:b3:
8a:a3:55:c8:3b:c6:bc:87:df:a8:12:95:9b:64:01:8b:24:57:
42:4e:a0:b7:de:7e:7f:37:3c:4f:3f:c0:ad:50:06:e5:0b:ff:
6a:65:cf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:42 2025 by rpki-client