
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.cer
File: A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.cer (raw, json)
Hash identifier: hpLSyefPFbol01JBqcsYi976SY5vOSHuSoEyDX+0Kok=
Subject key identifier: A8:83:9D:63:C3:E1:12:D0:B8:3C:BB:01:0A:DD:E5:B4:C3:3B:0C:4C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 37886C4219C0EE6BD3AAFF0FB0F06C4DE68F30AC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.mft
caRepository: rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 07 Mar 2025 22:36:50 +0000
Certificate not after: Fri 06 Mar 2026 22:41:50 +0000
Subordinate resources: AS: 265890
IP: 131.196.4.0/22
IP: 2804:3f64::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:88:6c:42:19:c0:ee:6b:d3:aa:ff:0f:b0:f0:6c:4d:e6:8f:30:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 7 22:36:50 2025 GMT
Not After : Mar 6 22:41:50 2026 GMT
Subject: CN=A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3d:5b:ee:cb:d5:8f:de:d4:fd:40:d8:0e:69:
8a:5b:15:6b:30:58:0e:18:52:2a:6f:bd:f4:c3:b7:
38:ec:9e:8e:ab:80:f5:42:f5:90:52:08:af:90:9b:
9b:56:76:38:ca:1d:f6:cd:09:96:bf:02:c5:3f:71:
c9:37:44:4c:04:20:42:ae:a1:8f:08:32:b1:21:5b:
8c:06:a5:db:ec:ee:bc:b8:62:db:29:40:86:55:b7:
23:3f:f0:e9:7d:6d:9c:8f:89:d3:76:68:05:af:95:
ff:b0:dd:ad:a6:c4:62:71:eb:a9:0f:8f:4d:4c:9d:
57:a9:0f:14:10:71:08:6a:59:bb:95:2a:d6:a1:ac:
d3:e4:af:d6:b0:05:ef:5d:9c:6e:a0:69:cd:8f:0a:
69:6b:7f:f4:6e:69:ce:6b:06:52:0b:83:06:2e:7b:
29:aa:8f:e0:46:99:80:88:83:ba:5b:70:d6:3a:69:
33:0e:4a:ee:f3:4d:fe:a2:56:98:75:4b:ac:c6:c8:
e3:8f:41:47:f0:55:a8:37:37:17:67:83:5b:b0:f9:
2f:1d:f2:f4:a5:9a:f1:93:c9:cd:85:2b:b7:9d:eb:
37:5a:35:86:9b:a4:a1:a7:3c:78:1d:9c:bb:cf:9e:
f9:69:03:1c:88:3d:d4:42:90:b2:b1:ad:54:5a:78:
91:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A8:83:9D:63:C3:E1:12:D0:B8:3C:BB:01:0A:DD:E5:B4:C3:3B:0C:4C
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.4.0/22
IPv6:
2804:3f64::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265890
Signature Algorithm: sha256WithRSAEncryption
ae:cf:62:fd:91:5b:f6:24:47:da:8f:be:9d:0f:b7:1d:01:60:
b8:09:81:a3:5b:11:40:63:e9:fd:b7:4a:36:07:8a:88:ca:c9:
31:aa:f4:1a:cd:94:10:7d:58:6c:d2:a6:4f:d6:d7:d1:1a:48:
f7:ff:06:81:76:65:df:7c:a7:0f:d8:00:fe:58:62:8d:86:7f:
17:a5:17:1f:ca:0d:78:fa:9c:bb:5a:bf:55:6c:ad:3c:04:a0:
26:f9:7b:07:e7:f6:8b:1e:1a:11:3a:93:30:27:e6:e1:f8:d8:
24:80:16:a4:ca:8f:e7:98:9d:6c:62:a8:90:4e:9b:f5:d8:d1:
5d:5e:d6:f3:10:ac:e5:55:73:5e:03:82:c3:83:13:29:4b:f4:
cc:6c:00:c5:af:9f:39:2a:d1:a7:1e:85:99:07:ab:9e:7c:20:
4c:18:7e:d5:76:e5:44:1e:d2:ce:91:7a:52:d1:67:8c:3a:c6:
d0:0d:bb:39:32:2d:b8:95:7d:46:13:48:b4:29:04:4a:d9:f0:
8c:64:e8:4d:2b:c6:b4:b7:61:17:a0:a7:73:5b:4e:2e:39:9f:
41:dc:c9:4f:32:e0:67:9e:db:74:f7:fc:6c:e0:b6:4e:8c:49:
f9:8b:c2:bd:98:18:de:11:ef:32:f1:8b:27:91:d7:47:4b:85:
22:a2:e6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:13:58 2025 by rpki-client