Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer
File: B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer (raw, json)
Hash identifier: I5UcmE80o/BSpfmVjhwtvnNY1m8m0IH7soWXLZiqqs4=
Subject key identifier: B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 233B4B01745E6C6F66F94E705DF4215FD7A77B1C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
caRepository: rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 06 Mar 2025 20:00:59 +0000
Certificate not after: Thu 05 Mar 2026 20:05:59 +0000
Subordinate resources: AS: 264963
IP: 170.0.68.0/22
IP: 2804:3098::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:3b:4b:01:74:5e:6c:6f:66:f9:4e:70:5d:f4:21:5f:d7:a7:7b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 6 20:00:59 2025 GMT
Not After : Mar 5 20:05:59 2026 GMT
Subject: CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:88:43:39:54:58:cc:d8:83:7b:33:09:cd:
55:c6:86:5d:ff:c4:ee:88:4a:95:e3:99:99:a3:3b:
d5:04:01:ec:31:a5:d1:36:b1:71:7e:61:7d:87:5c:
90:1b:d8:90:8e:f5:01:79:fb:d2:c8:12:2d:76:cd:
ff:9d:cd:b3:23:71:19:64:03:4b:22:7c:58:81:fa:
72:3e:2a:4f:fc:94:fb:68:e0:f1:5b:bc:8c:b2:9a:
33:22:87:59:24:48:ad:8f:e8:00:7d:0f:d3:4f:22:
56:24:87:9f:a1:32:62:ea:e9:4b:48:7e:1e:15:94:
f7:51:a2:85:12:38:8a:33:ee:e4:20:6c:18:50:52:
ef:0b:69:52:b1:2a:a9:39:f2:ac:49:05:81:63:bc:
9c:b2:49:fc:2f:1a:9b:cc:df:cc:d7:7e:f2:a4:c7:
89:3f:24:13:ed:15:ae:9d:a2:11:ce:ee:93:24:a8:
ed:63:f0:b2:63:bf:43:6c:49:16:56:06:ae:02:cf:
e9:d8:4d:92:4a:c0:7c:23:b5:53:77:97:66:5e:4f:
4d:8e:5e:19:fb:eb:f0:70:3f:66:81:95:b9:3b:a4:
66:5a:bd:d6:9a:b9:79:2f:3a:71:eb:3d:af:c6:a9:
0c:0c:50:40:de:68:6a:80:53:a0:be:aa:81:b9:37:
f3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.68.0/22
IPv6:
2804:3098::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264963
Signature Algorithm: sha256WithRSAEncryption
29:21:af:73:fd:29:0a:da:90:7f:1c:b2:a7:22:63:95:21:0c:
f9:f2:4e:ad:3a:22:bc:e1:60:4a:4d:63:b6:17:a9:f3:c3:0e:
d3:e5:60:bb:be:94:80:da:ad:e7:4d:7f:ef:23:bd:09:2d:50:
58:ac:34:41:ca:0f:20:18:54:82:fe:c5:5e:f8:c8:ed:ff:ee:
99:13:d0:22:75:c1:ff:c3:11:6a:8f:f2:29:86:08:7c:13:07:
cc:ce:14:16:d6:1e:08:cc:26:8d:0c:df:20:23:f9:e6:ad:1a:
09:e2:26:5f:0e:46:c2:92:93:80:fa:4a:5c:73:74:03:e5:0a:
10:f3:9e:f0:75:bb:49:34:44:84:07:e9:3f:2f:f1:a1:06:28:
01:0d:99:1a:c0:aa:8f:ec:3b:a5:e1:aa:3a:82:14:e2:7a:73:
e2:d6:40:97:f1:30:cd:24:84:62:0c:09:b6:3b:eb:47:2e:cb:
f0:81:26:c8:a1:5d:39:ac:4a:c5:df:4b:b1:91:e9:4a:12:a5:
53:34:fb:ed:ee:e4:3f:62:34:68:c6:07:82:97:f5:8b:62:41:
dc:08:c9:89:ec:8e:6a:27:51:d4:66:82:d7:c6:bc:43:c9:d5:
70:a8:30:5e:e3:9f:18:af:12:6d:e0:fa:d6:ea:ac:ac:0e:2f:
48:68:a3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:18:33 2025 by rpki-client