Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.cer
File: CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.cer (raw, json)
Hash identifier: PQSJD44+zuhqCsEAV/qcgmuey3Gs90CU0WoqxEsogqM=
Subject key identifier: CB:51:95:08:91:86:F4:5B:7D:B6:BF:0A:FE:46:DF:C5:AF:B4:77:09
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3ED57E286A7CA971FD203B35DB5E3E357D9E0BF8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.mft
caRepository: rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 07 Mar 2025 09:03:23 +0000
Certificate not after: Fri 06 Mar 2026 09:08:23 +0000
Subordinate resources: AS: 266528
IP: 45.65.128.0/22
IP: 2804:3d64::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:d5:7e:28:6a:7c:a9:71:fd:20:3b:35:db:5e:3e:35:7d:9e:0b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 7 09:03:23 2025 GMT
Not After : Mar 6 09:08:23 2026 GMT
Subject: CN=CB5195089186F45B7DB6BF0AFE46DFC5AFB47709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a8:23:8e:fd:cb:7f:46:5e:cd:d7:5c:2d:f7:
c4:8a:27:35:2d:01:63:c0:ff:92:3b:d2:66:12:22:
96:ec:d3:84:88:b7:e2:95:ff:5f:27:e3:52:94:95:
f2:97:33:a8:46:9b:0a:f5:7e:30:9c:09:20:f7:dd:
11:53:cf:e7:24:c2:9c:ee:f1:bb:55:84:a8:cc:b7:
79:91:10:fa:53:9c:99:d0:e9:6c:d0:87:d2:58:64:
d3:82:9b:01:8e:9d:cf:88:e0:bc:56:0f:ef:3a:df:
0a:77:9d:4f:96:39:df:59:57:20:c4:72:f5:f3:5d:
96:53:f3:13:f3:40:7a:78:99:0d:c0:2e:5e:ea:c2:
ee:20:ab:eb:63:43:9a:73:82:e9:77:5b:b4:61:52:
ef:1f:26:3d:5b:e7:29:84:d4:48:b8:c4:88:5b:14:
37:ce:3e:0a:69:c9:7b:48:d3:c2:96:71:d1:fc:fb:
f4:27:e9:8a:1e:32:0f:d9:0b:cc:4e:4e:e6:eb:4d:
b6:30:19:84:f9:6d:a5:e2:96:95:3b:dc:b7:63:87:
ee:36:04:c5:f4:e7:aa:c5:a2:da:ba:72:37:bb:e8:
17:22:02:99:7c:f8:bc:20:b0:8b:4e:f0:18:6e:83:
0b:10:3f:28:9d:67:f0:22:71:69:33:a2:43:3e:72:
a9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CB:51:95:08:91:86:F4:5B:7D:B6:BF:0A:FE:46:DF:C5:AF:B4:77:09
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.128.0/22
IPv6:
2804:3d64::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266528
Signature Algorithm: sha256WithRSAEncryption
4d:64:44:a4:87:ff:6c:3e:81:f2:c8:6f:24:2e:b1:16:bc:48:
0a:8d:de:a5:f5:91:9d:37:ce:b9:3f:03:c1:7a:ac:2d:63:34:
90:86:9f:34:ea:b3:2b:5b:5f:9f:a7:06:79:97:86:fe:28:d9:
21:a9:cf:f2:60:88:1d:b3:c5:f2:ad:7b:91:fd:a1:1d:d6:4a:
5c:fd:87:31:06:a2:93:2d:01:71:5f:00:8e:1b:9b:92:d7:2c:
d3:c0:8b:89:4e:fb:0f:ca:0a:60:33:61:22:c0:57:ec:c6:4c:
d3:7b:2c:8a:39:5e:ed:80:14:a5:81:c8:68:07:cb:d3:d4:18:
3b:78:a4:70:f3:67:4c:db:27:0e:ad:6a:07:ed:6e:bc:c4:ea:
51:6e:a4:2f:d2:18:40:98:d5:42:83:df:1b:fc:df:19:77:68:
9c:09:f3:5b:75:1d:e4:9b:30:78:c8:d2:62:90:f8:0c:c6:60:
9e:40:2e:43:4b:c9:e0:68:28:f9:bd:11:53:13:b8:8a:53:14:
dc:bc:84:94:96:ec:77:4d:64:e1:01:02:cb:05:9d:a4:b1:2b:
8c:6d:1f:f6:46:8c:b9:a6:d2:48:71:e9:9b:02:ac:41:c9:7e:
58:d4:e4:06:09:a1:0d:1d:02:1d:a9:92:87:fa:3b:aa:97:f7:
7d:6b:d4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:40:56 2025 by rpki-client