Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D297690F68F4535C1EEA34AA4421792C2944DF34.cer
File: D297690F68F4535C1EEA34AA4421792C2944DF34.cer (raw, json)
Hash identifier: GP7I7oA8okJ07/Tm5PX0bcCO1P99J3ABtKQc8fX0W+M=
Subject key identifier: D2:97:69:0F:68:F4:53:5C:1E:EA:34:AA:44:21:79:2C:29:44:DF:34
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 77CBDAC2D3AC6A17975A8DDEB945FEAF14892DDF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D297690F68F4535C1EEA34AA4421792C2944DF34.mft
caRepository: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 15:36:14 +0000
Certificate not after: Thu 03 Apr 2025 15:41:14 +0000
Subordinate resources: AS: 11432
IP: 200.155.128.0/18
IP: 200.170.192.0/18
IP: 200.194.248.0/21
IP: 200.201.128.0/19
IP: 2804:138::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:cb:da:c2:d3:ac:6a:17:97:5a:8d:de:b9:45:fe:af:14:89:2d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 15:36:14 2024 GMT
Not After : Apr 3 15:41:14 2025 GMT
Subject: CN=D297690F68F4535C1EEA34AA4421792C2944DF34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:31:25:6a:80:06:4e:67:d4:b5:15:d8:d4:
cc:28:8b:11:e0:87:a7:17:d7:98:0e:a0:d8:9a:7d:
18:53:25:e8:0f:43:c2:33:66:f1:b5:2c:99:9d:e7:
0b:11:e8:7b:79:7e:a1:af:f4:4b:6a:3d:05:28:e4:
b2:eb:0f:cb:9e:af:ff:90:e0:9a:9c:58:cf:01:ad:
02:a2:4f:95:8a:0e:1a:17:06:3b:e2:21:f2:b1:05:
f2:27:62:34:34:5a:d7:be:bd:22:50:bc:f8:4b:0f:
dc:df:dc:78:ef:b0:b9:9e:3d:ff:17:6a:50:82:5e:
c2:40:49:af:a1:ff:f7:43:bd:d0:7e:b3:d4:a6:b5:
2a:8c:07:ca:2d:50:b2:fa:79:dd:46:52:5d:4c:97:
d0:36:bf:ac:ea:59:d4:e9:1b:62:0c:6b:42:5e:3f:
51:c0:78:6e:ba:0d:a4:47:93:df:03:00:88:8f:47:
6b:e9:7c:ce:ca:5e:55:38:a4:d7:4b:d1:4e:4c:ee:
b8:d7:fb:cc:41:af:00:5a:ae:02:f5:b9:b5:17:48:
cb:55:87:4d:2c:e1:a3:c3:b8:34:69:ce:c8:43:f9:
04:c3:d6:91:72:96:b5:20:53:1b:fd:99:eb:18:eb:
97:af:89:ef:e2:85:03:f2:44:58:24:9d:4b:d1:9e:
ae:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D2:97:69:0F:68:F4:53:5C:1E:EA:34:AA:44:21:79:2C:29:44:DF:34
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D297690F68F4535C1EEA34AA4421792C2944DF34.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.155.128.0/18
200.170.192.0/18
200.194.248.0/21
200.201.128.0/19
IPv6:
2804:138::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11432
Signature Algorithm: sha256WithRSAEncryption
9f:1b:02:2d:05:ca:4d:4f:47:4f:af:a4:9d:3a:f4:8c:f5:64:
c3:a9:b5:65:89:a3:28:27:aa:bd:b6:57:cb:6e:fd:e7:23:07:
90:35:59:b4:c9:f4:f6:19:79:e6:d7:8c:46:4b:e3:97:9b:78:
81:e7:87:46:e8:81:5a:84:b9:80:0c:b0:f3:ea:47:6a:55:ef:
79:46:07:8c:2c:b7:0b:2e:bd:78:48:98:0f:db:72:09:16:f1:
33:7d:ad:8e:c8:0a:de:78:87:4b:d8:e5:76:10:73:37:07:e3:
13:93:7a:3b:0e:67:2f:8b:5d:86:13:68:ad:8a:5e:9f:28:60:
b7:2a:07:b5:52:33:48:16:a6:7a:92:75:6e:df:a6:11:74:bd:
00:37:ee:01:49:59:04:33:03:32:5c:58:ca:0b:49:31:55:53:
6b:07:5a:78:bb:59:ac:5a:59:d6:fc:ca:2a:5a:2a:b4:07:6f:
cf:38:2c:4c:1f:0c:2a:18:b2:67:c4:52:56:ec:2d:06:b6:5b:
a9:7f:d1:3e:d3:2f:66:7d:cd:30:7b:3c:b3:24:5e:7c:f8:6b:
e8:71:95:f5:68:84:b5:94:4d:a0:64:63:ae:3f:73:fb:8c:48:
7e:5e:ff:88:e7:71:c1:cf:d3:cc:51:e4:d8:81:0c:79:19:f7:
e4:f8:39:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:06 2025 by rpki-client