Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer
File: 9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer (raw, json)
Hash identifier: Z7l8aMcaLcadko1GhT0KVwE6lEZVrB9TlD8Og4G76Kw=
Subject key identifier: 9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 199C8A3E2414333A23A8D984924B21301CE91C9E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft
caRepository: rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 02 Jul 2024 17:39:19 +0000
Certificate not after: Tue 01 Jul 2025 17:44:19 +0000
Subordinate resources: AS: 263586
IP: 132.255.16.0/22
IP: 138.117.64.0/22
IP: 168.228.104.0/22
IP: 177.155.88.0/21
IP: 2804:f74::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:9c:8a:3e:24:14:33:3a:23:a8:d9:84:92:4b:21:30:1c:e9:1c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 2 17:39:19 2024 GMT
Not After : Jul 1 17:44:19 2025 GMT
Subject: CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:a6:30:ff:5f:db:6f:35:cb:cc:da:b9:87:
25:8f:97:19:bd:0f:66:c3:94:1d:5b:a0:8f:c2:61:
0f:e0:40:96:c7:65:2b:49:a7:01:a3:f3:9f:ee:0a:
48:a1:60:d1:07:f2:f1:be:2e:f8:63:d1:03:55:fb:
98:1b:14:c9:ef:f9:38:35:32:46:80:9a:42:61:cb:
90:1d:74:c8:b8:2f:e8:dc:c7:61:12:52:c2:25:15:
f6:30:5d:e7:f6:e4:7b:14:13:c7:57:d6:dd:e7:e4:
a8:18:75:3e:8c:aa:2b:63:7a:02:fd:c2:58:e9:50:
88:37:c8:d5:4e:1e:19:94:da:f0:87:b5:cc:35:e3:
87:80:72:c0:30:a4:08:78:72:e2:75:c4:fb:60:d3:
95:1b:62:7a:cc:96:08:c4:14:c3:91:25:f3:26:06:
48:32:bf:d8:af:39:d4:a1:28:31:ca:ce:5d:92:84:
64:ff:41:e7:f6:98:ce:86:9c:50:0a:85:4e:16:32:
bf:2b:75:fb:d3:44:10:14:86:64:62:44:b6:24:46:
a0:fe:9b:bb:bc:b2:e5:53:d6:16:f4:02:6f:d7:c5:
3e:53:1e:f3:70:89:5c:5e:51:36:98:18:d8:4f:c9:
69:64:81:27:5d:11:a2:6d:62:b1:73:41:c8:20:91:
cf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.16.0/22
138.117.64.0/22
168.228.104.0/22
177.155.88.0/21
IPv6:
2804:f74::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263586
Signature Algorithm: sha256WithRSAEncryption
8e:fa:29:c7:fb:e5:d9:cc:f2:fa:90:64:5f:44:bf:b1:a9:96:
2a:64:90:8b:74:2b:88:93:ca:0a:b7:51:40:36:01:fc:60:18:
b4:18:20:2c:0f:e9:22:b7:27:80:69:01:64:38:69:45:7b:bb:
64:8e:0c:4c:79:e5:fc:2f:1e:3e:1e:5c:86:eb:b9:d9:73:d9:
47:ba:90:83:20:5b:e5:4f:c7:8d:0d:0f:e8:d2:ae:3f:3d:02:
02:2f:c0:de:0b:d7:98:d7:a2:5c:08:17:6e:6a:28:c4:81:2c:
8f:c2:10:4f:68:93:b0:ec:cb:be:fe:54:e3:2c:61:7d:64:2c:
93:86:61:7b:f5:72:7b:dd:a5:6b:2e:cc:f6:1b:bf:e8:8b:1c:
30:fe:e5:ac:58:e2:49:8c:1c:e8:f6:21:a1:e8:68:9c:61:3d:
e5:e2:43:b7:19:a3:90:fd:59:74:65:e6:64:4a:87:a4:3b:04:
05:7d:5a:a1:00:28:8d:f9:c5:b2:da:7c:73:f3:a5:0e:33:3c:
c6:d8:01:41:13:48:b6:76:23:04:e4:a9:2d:dd:e1:54:fc:20:
51:ef:a1:4d:7a:5f:da:45:be:f9:b7:ef:dc:af:27:00:92:b9:
81:4f:da:8a:b5:b7:9d:6d:ce:8a:fe:0e:8e:7f:6c:8f:95:f6:
b4:93:49:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:14 2025 by rpki-client