Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer
File: BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer (raw, json)
Hash identifier: Fe2yC2loVEP/G9dtMUCH0ekpdSzScf2Ihj/tW1EmF9o=
Subject key identifier: BA:BE:21:7A:35:2A:9C:19:0E:5C:0D:A6:54:11:19:FA:A8:49:CC:E8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 120E6793C8B040CDC33EE80C6F9AD2CFA3A9C0EF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft
caRepository: rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 04 Feb 2025 19:46:57 +0000
Certificate not after: Tue 03 Feb 2026 19:51:57 +0000
Subordinate resources: AS: 265936
IP: 164.163.24.0/22
IP: 2804:4020::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:0e:67:93:c8:b0:40:cd:c3:3e:e8:0c:6f:9a:d2:cf:a3:a9:c0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 4 19:46:57 2025 GMT
Not After : Feb 3 19:51:57 2026 GMT
Subject: CN=BABE217A352A9C190E5C0DA6541119FAA849CCE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a9:e8:c5:d7:04:99:74:bc:53:36:2e:a7:c9:
87:4d:1f:11:05:29:e6:de:af:00:8a:80:d1:86:27:
a8:e8:cc:09:fc:6b:91:31:e4:3a:95:df:40:a5:51:
71:8f:e7:91:a2:39:92:90:5d:1e:d3:52:65:93:d0:
18:49:99:d6:ad:c8:6f:94:4a:38:d8:b1:13:fa:51:
3a:85:85:66:eb:62:3c:97:69:30:01:d7:25:d1:21:
90:da:f1:39:3a:9e:a7:9b:0a:dd:67:2e:56:b7:a6:
e5:02:b5:29:a1:a0:47:ee:b8:cc:26:7f:5e:4f:93:
4a:45:65:b5:6e:c4:00:d3:d6:55:90:a3:4b:50:37:
17:8d:66:fb:d9:8c:22:ee:2b:7d:85:0c:8a:d4:cd:
84:28:8b:76:43:68:2b:d6:01:07:8d:4f:74:6c:51:
ea:a7:96:a1:57:de:20:4a:0e:87:ea:e5:f1:72:13:
26:10:84:de:69:66:1d:da:19:73:ee:06:7c:73:b0:
cc:58:43:bb:f8:8e:23:95:50:b6:99:45:63:ab:89:
30:47:0f:ac:fa:29:e0:47:46:56:3b:d0:d9:e1:fc:
16:21:cd:1b:b4:5e:c6:f2:e6:3f:14:8e:dc:51:73:
ae:86:8a:f7:fa:cf:b7:29:f1:19:df:3d:52:32:c6:
bb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BA:BE:21:7A:35:2A:9C:19:0E:5C:0D:A6:54:11:19:FA:A8:49:CC:E8
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.163.24.0/22
IPv6:
2804:4020::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265936
Signature Algorithm: sha256WithRSAEncryption
75:b7:30:b7:e9:22:6c:d1:61:3b:f3:9d:43:a6:cd:3b:e4:ef:
58:1e:9c:4c:70:c4:d8:80:fd:a3:56:de:e9:94:ab:20:4a:32:
c7:48:65:f8:f8:e3:a6:18:1f:d8:df:16:41:a9:6f:61:20:c4:
14:bd:36:25:11:2b:61:95:e6:0a:4b:79:50:fe:49:88:53:b0:
cb:84:83:f0:98:a8:21:42:81:44:72:9f:98:bf:00:a4:a8:59:
bb:7a:85:0b:95:cc:34:91:44:dc:6b:bb:53:43:eb:ed:e3:46:
c5:42:9a:aa:31:c3:b8:8a:e6:ab:78:2b:1a:e1:6a:ca:ff:e8:
8a:3e:9c:78:cb:c2:55:31:82:43:05:6e:90:c6:69:ac:5c:62:
03:8f:8c:8a:2e:44:be:06:ac:3d:94:88:eb:da:4c:f5:8d:c0:
ff:27:4d:5e:ca:bb:24:ca:a9:6b:0c:c5:6c:a4:ce:cb:14:fc:
eb:ff:06:2f:eb:6e:00:ae:60:72:19:19:b7:6b:a5:6a:0e:28:
5f:eb:db:15:74:ce:ed:4a:73:a1:13:75:7f:de:fd:67:7c:27:
db:91:b0:d2:16:f9:30:d2:8f:31:fd:e9:f0:aa:65:73:f0:e4:
7b:11:d7:a3:10:b5:09:8a:b9:74:8f:c5:70:42:2e:cf:bd:3c:
a3:0d:ff:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:46:29 2025 by rpki-client