Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer
File: 9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer (raw, json)
Hash identifier: 1/+QClDDmhdtOaHLHcK3JzgroghQ6nChfk8lZ+F2xZg=
Subject key identifier: 9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4F711EADF242B49440D7693EB279035E5E7C9FE0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft
caRepository: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 03 Feb 2025 15:09:24 +0000
Certificate not after: Mon 02 Feb 2026 15:14:24 +0000
Subordinate resources: AS: 264880
IP: 168.227.56.0/22
IP: 170.246.184.0/22
IP: 2804:2f40::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:71:1e:ad:f2:42:b4:94:40:d7:69:3e:b2:79:03:5e:5e:7c:9f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 3 15:09:24 2025 GMT
Not After : Feb 2 15:14:24 2026 GMT
Subject: CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:e7:23:a9:63:00:29:d8:b7:74:9c:fb:b5:
b1:4e:54:fa:45:01:63:d2:97:54:b9:34:9c:26:f0:
b1:29:4b:17:03:98:0e:54:41:2c:b2:bb:09:0e:bf:
8d:dd:85:3a:ba:9b:d5:8e:a1:0b:0f:30:de:c5:d3:
d1:cb:71:91:18:cb:71:ae:61:d8:2c:9f:da:fe:8d:
56:f8:96:bd:2b:a6:42:8c:80:90:90:b1:6c:2f:99:
b6:9d:f4:81:37:f8:bd:cd:dd:b6:f7:bd:db:73:0b:
ce:8f:66:5b:29:93:4a:0e:a6:98:3f:90:64:f5:f0:
5c:ea:18:dc:af:07:19:d5:d5:c4:41:df:15:82:1a:
a8:ae:88:83:86:a4:4c:bf:52:32:19:b4:77:d0:41:
ce:9e:ca:44:42:af:fa:42:f5:8c:9b:e3:88:7e:24:
4c:ef:f4:43:e2:0e:4f:da:d8:c6:ca:55:02:1c:88:
6a:64:2e:4a:87:1e:76:c7:92:84:a2:f5:46:b9:af:
17:28:28:06:4d:af:f4:1a:f7:91:be:16:a5:8d:f9:
ec:0f:73:7c:15:c2:e4:7c:b5:e8:d2:8e:31:75:47:
97:4d:e7:3b:6c:4c:61:59:89:e0:83:c0:fa:74:99:
58:75:03:70:28:3e:da:06:8e:4e:56:98:91:69:3b:
18:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.56.0/22
170.246.184.0/22
IPv6:
2804:2f40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264880
Signature Algorithm: sha256WithRSAEncryption
78:f7:c7:1c:63:72:04:d0:64:92:8d:1f:ba:a9:2f:77:26:1a:
7c:18:4d:08:43:fa:e9:0b:2b:ae:4c:c6:c2:3e:22:9e:56:33:
9c:7e:ec:9e:fe:bc:0f:72:90:23:ee:57:66:d7:67:a6:46:5b:
a2:ba:6b:01:d7:6e:b3:17:3d:3e:d0:b4:59:be:28:c7:14:c1:
fe:3d:0f:81:67:5f:a9:f0:c2:f5:51:bd:dc:a2:26:bf:96:55:
a1:84:1b:50:8e:b5:22:7b:68:94:d7:37:3f:9e:96:9e:09:a4:
2b:8d:53:41:00:60:21:03:93:16:98:65:9c:0c:a7:9c:8b:c8:
8e:6d:80:e0:ad:85:b6:c4:f3:2d:91:89:92:12:1d:66:50:31:
ff:02:5a:7e:2e:15:89:9d:ce:03:bb:b2:cf:3a:f3:e4:c5:7d:
be:92:db:b7:0f:14:fb:3c:c5:08:e7:4a:bd:c1:be:8e:f2:e0:
9e:3a:e0:ef:2f:32:47:a8:ee:b4:e7:37:b0:aa:17:ad:23:48:
cf:4f:be:a7:66:e4:6f:07:81:e1:91:03:17:f3:b9:e9:56:ea:
35:ae:63:f6:2f:51:75:94:f9:5c:87:db:02:ac:9b:41:31:a8:
03:71:28:72:2e:65:c4:2a:d3:e0:75:51:72:87:6f:15:f3:d6:
d2:3d:1f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:33:35 2025 by rpki-client