
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F.cer
File: A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F.cer (raw, json)
Hash identifier: 25UIrPPuRDFj4rIXLQUA2k0dOnJgcscPVHyW3JB2ZhY=
Subject key identifier: A1:25:E3:4C:BB:9E:F2:E8:9F:FA:32:29:9D:80:F0:A2:1A:0D:DC:9F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 33B0B2E320271AEDE4D9AC654FEB28F4C694C44A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/1/A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F.mft
caRepository: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 08:06:59 +0000
Certificate not after: Thu 03 Apr 2025 08:11:59 +0000
Subordinate resources: AS: 268084
IP: 45.168.244.0/22
IP: 2804:57c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:b0:b2:e3:20:27:1a:ed:e4:d9:ac:65:4f:eb:28:f4:c6:94:c4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 08:06:59 2024 GMT
Not After : Apr 3 08:11:59 2025 GMT
Subject: CN=A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:f6:78:73:dc:2f:b8:d5:16:d6:5f:cb:9f:
05:f3:82:f9:ba:6c:1a:65:79:62:91:79:a4:25:5a:
7f:5c:30:c4:1c:b5:db:5a:20:f8:94:8d:40:1c:dd:
5a:9c:c2:ba:f7:46:d0:1e:e0:13:54:47:e2:c6:5b:
ea:6a:9e:c4:18:3b:1b:98:0e:9b:75:41:f8:bf:2e:
12:01:b8:45:41:16:4f:69:2f:30:88:c6:bf:6a:a4:
d6:bc:1c:d1:6d:8c:8f:cd:91:f1:c7:3e:cc:00:0c:
e8:cd:ee:f6:b2:df:8f:b2:3d:2c:dd:6e:a2:8f:e5:
52:a7:a5:55:07:ed:ca:46:1e:5d:d6:4c:af:01:aa:
58:47:05:00:56:bd:86:f3:ff:d4:4b:ba:47:7f:50:
45:d8:fd:82:fb:28:2d:18:fe:7d:51:ca:29:25:60:
7f:d3:a0:e3:e3:bd:70:88:6b:98:51:65:89:af:c2:
2c:37:dc:42:94:35:ae:db:63:35:11:38:bb:d9:d9:
d8:5b:a7:11:87:84:4f:28:95:79:14:b9:c7:01:2c:
fe:4d:10:3e:af:e4:b5:19:44:07:ba:96:01:8c:98:
2e:34:ee:4f:73:8e:86:14:78:9d:09:55:e9:18:80:
1d:d7:5c:7d:88:95:e2:fd:ac:9c:87:7d:c7:99:6b:
8d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A1:25:E3:4C:BB:9E:F2:E8:9F:FA:32:29:9D:80:F0:A2:1A:0D:DC:9F
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/1/A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.244.0/22
IPv6:
2804:57c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268084
Signature Algorithm: sha256WithRSAEncryption
55:ea:5e:5c:ea:c1:37:b5:e8:12:dc:e2:cb:62:ed:68:e7:06:
b2:a5:df:40:6c:5d:06:bf:ee:5e:f6:d6:46:07:00:9f:04:23:
12:69:e9:d7:4b:5a:fd:4c:14:f8:a6:7a:75:e1:be:87:9f:75:
a6:1c:b1:00:96:42:63:aa:ec:e9:dc:02:41:82:3a:f9:ac:f1:
d5:96:de:89:df:91:6b:90:6e:b8:e4:f1:f1:11:90:6e:9b:5e:
ad:9a:d2:c6:98:50:eb:05:e2:03:a9:f6:61:ca:02:65:a8:74:
4f:ea:36:a3:08:fd:d8:02:23:aa:57:a4:cc:57:07:6e:b4:84:
51:6c:ac:82:78:6d:12:d7:dc:a5:1a:d9:89:d5:cb:eb:6e:29:
3b:44:7f:fb:ca:ed:99:26:2c:5f:c6:3e:72:35:96:08:29:06:
10:6a:da:02:86:1e:e3:6f:87:be:45:71:2e:4c:ef:bb:2d:69:
4e:86:4f:f1:95:5e:2f:c6:6b:89:7e:13:41:97:bd:a6:54:e1:
13:ae:d0:30:65:9a:c5:a3:ff:9d:9c:fc:33:52:9b:1f:3f:05:
e5:f8:66:89:df:b6:86:c8:04:dd:8d:45:75:6e:cc:22:29:c3:
1d:7c:d6:78:9e:fb:d8:24:e1:b6:ea:6d:a8:76:92:4a:0d:e9:
dc:91:e5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:30:30 2025 by rpki-client