Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
File: AFA55E041FA0E5D394A1480902275296B12C222A.cer (raw, json)
Hash identifier: C+72sAnHh6an6Cc2y6TBI56HRpyfEeyS4EcFjzfubGM=
Subject key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2A8DACE0C7784A3F4ECB156297DC8B0A61C3D6AC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.mft
caRepository: rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 26 Feb 2025 19:31:11 +0000
Certificate not after: Wed 25 Feb 2026 19:36:11 +0000
Subordinate resources: AS: 61851
IP: 177.75.224.0/20
IP: 201.149.124.0/22
IP: 2804:1a4c::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:8d:ac:e0:c7:78:4a:3f:4e:cb:15:62:97:dc:8b:0a:61:c3:d6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 26 19:31:11 2025 GMT
Not After : Feb 25 19:36:11 2026 GMT
Subject: CN=AFA55E041FA0E5D394A1480902275296B12C222A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:78:ee:fc:34:4c:ec:b1:62:fb:92:b4:a3:
ac:3d:3b:db:07:25:c1:bf:39:54:0a:d2:d4:54:db:
c7:03:6f:7e:c0:9c:b9:fc:88:aa:36:7b:09:ff:b3:
9f:ae:99:79:73:9a:b0:bc:ee:5a:2e:e6:7b:9f:68:
89:c2:fe:c4:7a:d8:bb:75:81:77:6b:05:b1:76:e8:
29:99:ce:b8:bf:7d:a8:3c:50:47:0e:9a:66:36:56:
5f:11:11:d5:a5:bf:dc:67:da:6a:f1:8d:9c:13:79:
26:76:d7:1a:fe:2f:60:61:f8:b2:6a:0a:28:64:d2:
c9:67:2f:29:74:79:14:68:43:24:1e:42:d3:9f:5b:
1c:34:41:1b:d4:e0:87:84:eb:72:ff:25:4e:88:3a:
9c:99:95:6b:99:69:3c:e5:b8:03:27:17:d5:1c:1d:
fd:31:da:4e:85:e2:28:60:72:81:eb:47:bd:2d:fd:
ef:59:00:44:f9:e4:60:bf:5b:12:d5:e3:eb:6e:25:
b6:81:33:27:7a:5d:cf:64:69:31:fa:86:b0:f0:0e:
d4:ef:9d:69:0f:0d:d8:2f:2f:9c:52:0d:9f:4a:28:
61:b9:47:2c:45:1a:23:88:77:de:79:8b:1c:76:5c:
65:a5:a2:5f:41:da:e9:92:47:ce:14:4e:35:bf:fb:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.75.224.0/20
201.149.124.0/22
IPv6:
2804:1a4c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61851
Signature Algorithm: sha256WithRSAEncryption
98:f6:cc:34:7d:6d:f6:d2:69:6d:77:d2:a2:b2:fd:ae:a4:ad:
91:9a:8e:69:bd:1a:63:5f:db:2e:af:8b:62:28:db:17:35:08:
b3:ac:71:51:7e:c8:d4:05:47:cb:7c:cf:af:cf:b1:fe:43:9a:
39:07:21:fa:2a:24:96:5b:bc:d2:be:ad:42:d7:59:e3:fd:d9:
10:fe:cd:12:f4:f7:67:02:f3:2f:6b:3b:ed:0e:bb:6b:5d:83:
4d:07:0c:7b:09:26:cf:00:42:14:71:e3:c2:47:7e:53:ba:01:
c5:a2:37:d1:b3:ac:5b:78:a7:a2:5d:fd:3e:89:9e:26:c7:bf:
0e:e4:74:a3:57:db:fd:ec:97:31:70:c4:a4:54:55:74:75:1e:
c5:36:1e:e5:76:9c:79:ea:7c:18:4e:3a:2a:1d:8a:ec:21:41:
b7:f1:2f:e0:e8:01:cb:f4:8a:67:bd:1c:2e:7c:f3:7a:de:7d:
ed:ba:18:ba:29:5d:4f:77:4d:74:37:f6:63:3b:23:f8:9f:8a:
b3:b7:b7:6b:09:61:ee:b0:4a:21:1d:0c:11:6f:50:4f:92:66:
97:52:1d:37:05:13:d9:73:e1:eb:7f:e9:d0:3d:b6:0a:8d:33:
87:29:b3:bc:33:7d:42:03:36:94:14:ce:10:07:2e:2a:3c:eb:
2c:fd:3c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:50:53 2025 by rpki-client