Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer
File: C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer (raw, json)
Hash identifier: q6keegzvA5+PV9BtSw0NpKJU1kNDLpyvIgAr81HGKYo=
Subject key identifier: C0:28:A9:5F:B6:F7:E9:B3:04:AB:7B:15:BA:9C:F3:7C:74:20:EE:43
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 512A6B606588D9E26A8BBE5B3250B27B2855C196
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft
caRepository: rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 07 Mar 2025 02:02:06 +0000
Certificate not after: Fri 06 Mar 2026 02:07:06 +0000
Subordinate resources: AS: 263915
IP: 138.204.224.0/22
IP: 2804:27a8::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:2a:6b:60:65:88:d9:e2:6a:8b:be:5b:32:50:b2:7b:28:55:c1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 7 02:02:06 2025 GMT
Not After : Mar 6 02:07:06 2026 GMT
Subject: CN=C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:87:0b:29:ca:fc:26:09:4b:5b:e5:78:af:b3:
5c:b0:5e:bc:86:cb:3b:74:f3:e1:ff:3a:92:04:b0:
45:8c:51:20:8b:1d:e8:cb:0f:61:12:f5:df:e3:4c:
d4:0e:d3:4a:c5:ca:b6:22:30:b0:ad:5a:bd:4e:78:
a1:66:e9:ad:e2:93:4c:40:7c:de:06:64:59:b9:c3:
a6:0f:11:64:d3:b8:a9:14:fa:98:c8:91:a8:7c:7e:
71:82:fe:3c:0d:10:5e:ef:f5:59:22:b3:74:d7:3c:
ab:a1:bd:10:84:a7:d1:ae:18:a2:4d:07:09:60:21:
d1:ad:0b:7c:93:ca:f9:18:ab:7c:0e:83:7a:ce:71:
9e:9e:a5:15:35:dc:a3:f7:37:17:58:06:a8:8a:0a:
97:05:1c:d3:d2:85:6d:55:9f:2c:c5:94:d6:dd:00:
c7:24:53:bd:3b:a2:88:e0:df:2a:48:f9:76:e3:ed:
bc:ba:22:76:6b:97:dc:bf:bd:46:dd:0b:b2:cb:fc:
b4:5d:20:4e:50:68:5a:9b:e1:b1:d1:66:d4:99:d0:
29:7d:27:36:6d:3b:96:23:3f:56:93:d1:5f:83:65:
64:de:fc:01:4c:f2:5b:81:7a:2f:61:86:3c:f7:c4:
6b:19:e3:0c:2e:53:af:5e:d1:20:4e:df:d7:e7:d7:
18:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C0:28:A9:5F:B6:F7:E9:B3:04:AB:7B:15:BA:9C:F3:7C:74:20:EE:43
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.224.0/22
IPv6:
2804:27a8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263915
Signature Algorithm: sha256WithRSAEncryption
7a:cc:74:61:50:f3:8e:82:a3:c2:94:0f:9c:00:0f:33:58:bd:
b3:2b:23:53:5b:37:76:a9:bc:76:66:39:82:84:27:d1:1e:61:
81:85:fb:db:c2:f6:b8:bf:70:1d:79:c0:0f:71:31:07:1c:fd:
22:15:b2:b3:e2:ba:31:3e:f5:08:05:3f:d9:91:ae:8e:0a:a7:
b3:93:20:ae:a6:4a:c4:00:b6:ee:a8:30:97:6a:d4:20:15:8b:
df:61:e3:7c:a2:23:13:7e:24:2a:34:bd:de:0e:7e:be:4d:82:
b5:c4:40:89:b9:de:65:a4:df:ed:43:b5:39:41:ae:f6:80:75:
28:26:3e:a3:10:ac:44:c0:88:75:74:cd:65:18:ab:43:31:2d:
24:3c:ed:90:61:04:4d:52:e3:ef:ca:84:4b:9d:67:08:00:89:
56:56:da:0e:91:4e:0b:a0:c2:49:9c:33:ef:be:a3:ca:10:63:
26:71:ba:5c:b2:0b:2c:e6:ec:34:89:ee:52:ff:2a:31:33:cb:
c6:7c:e6:ad:ea:dc:36:b1:b7:61:68:a3:b7:c3:c1:b4:04:f6:
f7:4a:53:e8:35:5f:88:6a:d4:ab:42:e3:17:43:0d:73:84:84:
00:24:ef:5e:3a:1b:2c:1d:a9:f7:32:cb:dc:44:e7:4a:cc:d9:
6a:c7:c8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:27:35 2025 by rpki-client