Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C1AF1A41C801D3497F8CF835145DCC8887BF7309.cer
File: C1AF1A41C801D3497F8CF835145DCC8887BF7309.cer (raw, json)
Hash identifier: hOYDwOEKvGNpAgi7pK1Hkxi1YcjZ9lpPQPwHFq+Cgcg=
Subject key identifier: C1:AF:1A:41:C8:01:D3:49:7F:8C:F8:35:14:5D:CC:88:87:BF:73:09
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 653B227789879E183020A67BD977F36353091624
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/C1AF1A41C801D3497F8CF835145DCC8887BF7309.mft
caRepository: rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 28 Feb 2025 10:09:32 +0000
Certificate not after: Fri 27 Feb 2026 10:14:32 +0000
Subordinate resources: AS: 267578
IP: 45.70.164.0/22
IP: 2804:4398::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:3b:22:77:89:87:9e:18:30:20:a6:7b:d9:77:f3:63:53:09:16:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Feb 28 10:09:32 2025 GMT
Not After : Feb 27 10:14:32 2026 GMT
Subject: CN=C1AF1A41C801D3497F8CF835145DCC8887BF7309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e0:2d:94:65:79:72:ec:42:af:93:5c:34:9e:
aa:bb:c1:69:47:a1:d3:78:e1:d8:40:59:9f:f7:3e:
fc:c5:31:44:1f:a8:01:fb:0a:9a:aa:49:31:e5:4e:
e2:97:57:d0:8a:d4:92:f3:93:1d:0f:6e:7f:ed:7b:
af:67:d5:f7:d1:19:8d:02:19:fc:33:7a:83:ff:60:
f3:63:ef:e8:9e:ed:26:72:6a:29:a0:a2:74:68:e5:
ed:78:10:8d:6b:0b:69:86:3e:ae:76:da:d6:0c:db:
11:9a:e0:01:cc:90:17:05:f0:be:d7:b4:e3:37:e7:
54:7f:a2:b0:47:ac:fc:e0:d2:a5:5c:73:ba:09:96:
af:20:e8:23:4a:8c:08:df:6e:f5:d4:14:e3:fa:c7:
ac:04:f6:0f:85:e9:87:bc:10:06:bf:d2:f1:ac:e5:
7b:0f:53:5e:13:8e:f1:50:6d:56:ba:d9:55:33:b3:
97:0e:e8:81:c9:ff:c9:c2:85:86:d4:0a:32:e2:87:
ed:8e:c7:7e:a5:ca:40:f2:b3:76:38:13:74:af:db:
67:4e:8a:45:57:ba:07:f5:42:b2:13:51:84:c9:70:
1a:da:53:8c:ba:8f:88:23:d8:c2:b1:6a:29:7b:9c:
2f:72:3d:cd:e4:13:ab:8a:46:00:d4:9c:60:0f:07:
ef:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C1:AF:1A:41:C8:01:D3:49:7F:8C:F8:35:14:5D:CC:88:87:BF:73:09
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/C1AF1A41C801D3497F8CF835145DCC8887BF7309.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.164.0/22
IPv6:
2804:4398::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267578
Signature Algorithm: sha256WithRSAEncryption
13:84:e3:2a:0e:f1:8d:ea:39:77:86:c7:28:c2:66:25:1a:8b:
0f:79:51:9a:fb:12:3e:6f:85:39:10:6a:24:13:ef:7c:ec:82:
6b:f2:85:20:82:9e:b6:cd:56:c0:8d:fd:ef:88:6b:38:0c:ba:
5e:c5:0a:38:d8:c4:cb:75:3c:ce:1a:99:95:c6:46:58:05:89:
14:c7:cf:8a:25:5f:2f:59:04:44:bd:06:67:bc:cf:bc:de:b6:
6a:81:05:1a:8e:28:52:69:00:d1:03:65:c0:a9:0f:44:95:75:
66:42:90:70:c4:00:ef:02:11:62:74:fd:c5:f8:53:3b:6f:2b:
d8:4b:48:e3:87:36:8b:78:40:21:e4:03:ff:cd:e7:cb:85:51:
a4:a0:e6:2b:65:6c:1c:12:e7:a9:96:57:2a:1a:9f:dd:3a:9f:
24:9f:4d:c1:69:26:1e:70:59:ec:2e:75:37:0e:80:60:34:d8:
de:93:da:2c:7b:9f:c0:56:3b:01:c0:93:c6:a5:7a:07:0f:6d:
bb:40:e7:11:64:94:10:f0:11:b1:39:af:d9:5f:c4:62:44:51:
0a:05:37:bf:f9:e1:d4:bd:a3:f9:5d:e8:e4:5a:63:2c:21:c3:
6a:0f:be:df:08:a7:75:49:da:31:dd:fb:27:37:fa:2e:a1:72:
15:4a:dc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:43:05 2025 by rpki-client