Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.cer
File: 9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.cer (raw, json)
Hash identifier: DO+1EPFCIjKCdEhiPRfIa4B5d8EeYTuGRW7Hb3RvqoY=
Subject key identifier: 9A:A6:93:22:4E:78:5F:3D:03:76:FA:01:CC:D4:6E:7A:7D:A4:CE:60
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 44F64EEB499D293C038F81D6C3CFB987589EEC82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft
caRepository: rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 07 Mar 2025 07:12:11 +0000
Certificate not after: Fri 06 Mar 2026 07:17:11 +0000
Subordinate resources: AS: 267328
IP: 45.233.152.0/22
IP: 2804:4bc4::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:f6:4e:eb:49:9d:29:3c:03:8f:81:d6:c3:cf:b9:87:58:9e:ec:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 7 07:12:11 2025 GMT
Not After : Mar 6 07:17:11 2026 GMT
Subject: CN=9AA693224E785F3D0376FA01CCD46E7A7DA4CE60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6a:48:2f:e5:18:4e:e3:2e:97:5e:0e:cd:9f:
45:91:51:fa:a0:43:a6:58:c4:86:01:cb:66:ba:16:
bc:8f:af:de:76:29:7a:85:d2:f3:f1:6b:9d:5a:69:
55:b6:a5:84:70:45:4b:15:bf:ac:5d:9d:a7:0c:c7:
84:d8:9a:20:8c:04:a6:6e:a1:26:ce:f8:64:9f:98:
b3:de:72:38:fc:16:92:4a:22:b5:43:1b:26:60:50:
ae:e3:6c:cc:20:a0:03:ed:51:cf:63:13:92:d4:b0:
57:84:60:90:8c:45:d7:6f:54:ac:84:85:81:55:3c:
87:9a:67:4d:2e:ab:cb:5b:5a:4f:1d:67:f2:b9:50:
90:bc:6e:39:ff:bb:34:e0:9b:de:50:40:c6:4f:6a:
95:bb:be:48:66:8b:78:3a:08:a0:23:27:35:d6:a0:
e5:e7:3f:8a:5f:93:ae:31:42:6d:75:4e:a4:19:e5:
70:ef:90:14:00:6c:12:bc:e7:51:a2:94:b3:46:7e:
4a:c1:a7:0c:5a:49:12:38:66:9a:65:f3:23:0c:8c:
16:dd:6c:41:71:95:21:20:b8:6d:8d:77:c3:ae:0f:
b0:5a:39:8f:63:59:c2:89:32:7c:49:1e:13:d9:e5:
a4:25:d6:12:54:5a:a1:ba:54:bb:2e:10:80:14:94:
94:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9A:A6:93:22:4E:78:5F:3D:03:76:FA:01:CC:D4:6E:7A:7D:A4:CE:60
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.233.152.0/22
IPv6:
2804:4bc4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267328
Signature Algorithm: sha256WithRSAEncryption
d0:d5:50:40:68:d4:44:1c:78:b8:f0:90:1b:77:77:70:be:fb:
51:1e:41:1c:0b:ca:cf:7f:6f:2e:a1:67:de:26:76:f3:ab:ca:
89:c7:4b:f3:69:4a:3e:ec:09:70:1d:3e:b0:21:e8:70:c2:01:
76:e8:8c:0e:06:9b:a7:8e:94:3b:7e:df:1c:c9:c7:8f:36:04:
cb:01:76:5a:da:3d:f9:28:4e:24:ed:15:63:8e:c0:42:81:a7:
48:9f:df:b1:ad:d9:7f:8b:3e:03:d0:23:14:ba:e6:8f:19:2a:
92:d7:ac:9e:d3:ef:43:52:7d:9d:bb:e2:65:a6:0c:6d:4a:41:
3f:97:84:0d:c7:1e:1d:ea:6e:eb:48:3f:0f:d3:53:57:5f:b5:
b6:76:fc:3a:97:34:ec:57:02:a8:e3:70:43:de:6c:7d:95:28:
82:29:0f:1d:84:92:7a:cc:0a:8a:c3:97:6b:a6:d0:8b:f4:5c:
dc:e6:72:da:5d:e8:b2:b0:f5:c6:3e:b1:5e:47:b2:62:7b:0e:
80:b5:1d:d6:1a:e0:22:79:94:97:6d:98:fd:b2:15:33:60:6b:
3f:81:0a:72:e3:b5:a0:cd:c2:8f:b0:5d:9d:5a:4a:1f:34:20:
74:80:c9:5d:7f:71:f4:9b:c9:cf:e4:87:1c:41:f0:ad:70:68:
ff:d4:d9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:54:26 2025 by rpki-client