Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D54D28DD1135EB4EA68416B42CFD19DF502929D2.cer
File: D54D28DD1135EB4EA68416B42CFD19DF502929D2.cer (raw, json)
Hash identifier: kvzuWGr1zNHywEvzhzsQ2H0l2lJWzAgXtJ43XG+Rgf4=
Subject key identifier: D5:4D:28:DD:11:35:EB:4E:A6:84:16:B4:2C:FD:19:DF:50:29:29:D2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 564365ACE8AC596F0075B20DBF4FF7D0B1042650
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.mft
caRepository: rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 29 Jul 2024 13:38:32 +0000
Certificate not after: Mon 28 Jul 2025 13:43:32 +0000
Subordinate resources: AS: 269572
IP: 45.189.68.0/22
IP: 2804:66a0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:43:65:ac:e8:ac:59:6f:00:75:b2:0d:bf:4f:f7:d0:b1:04:26:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jul 29 13:38:32 2024 GMT
Not After : Jul 28 13:43:32 2025 GMT
Subject: CN=D54D28DD1135EB4EA68416B42CFD19DF502929D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:02:80:14:17:e5:0c:a0:de:04:91:43:64:
e0:61:84:ef:80:d5:13:e2:b9:8d:10:95:2a:38:79:
8c:9d:fb:1a:ec:54:de:59:52:18:cc:e8:69:f7:3f:
35:1b:1a:7c:17:d5:0d:5c:bd:bd:c0:c8:ed:42:94:
38:91:86:02:fc:11:7e:be:1b:6d:8e:87:7c:f5:81:
5b:8a:d3:69:be:2c:65:f9:0a:26:4e:01:bb:7a:22:
06:d1:d9:87:ad:32:5b:73:5d:76:7c:6c:ad:68:f3:
0a:65:13:f0:4f:d7:30:5d:6d:31:e8:2f:84:ab:11:
57:1d:d4:9c:d7:44:32:04:38:09:da:c0:11:99:38:
4a:cd:2e:48:c3:06:78:7c:85:91:89:bb:2e:e8:2b:
8e:1d:9b:c3:59:48:58:9d:64:9d:24:22:15:fd:bf:
ee:1d:08:64:6b:c7:4f:2b:2e:bf:ca:c7:d9:70:44:
eb:ba:55:2a:aa:96:4c:09:c8:02:9c:73:d2:5c:9b:
e6:96:55:b8:06:16:59:fe:8b:4c:34:e2:27:e1:82:
2d:ba:a0:f9:d1:5f:3d:33:7b:54:7e:23:31:06:b9:
6a:4d:b7:51:02:6f:0a:98:a4:59:25:68:e5:2a:0c:
53:28:cc:95:70:80:c5:55:56:de:fb:92:9e:e0:cc:
a9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D5:4D:28:DD:11:35:EB:4E:A6:84:16:B4:2C:FD:19:DF:50:29:29:D2
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.68.0/22
IPv6:
2804:66a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
269572
Signature Algorithm: sha256WithRSAEncryption
8f:11:84:4d:8e:b7:b7:9b:2e:84:cc:36:2d:e2:1c:38:80:fe:
da:5f:92:5f:8c:da:2b:09:f3:d2:dc:0a:be:7c:c0:6d:8e:ac:
2c:ec:47:d2:27:7d:98:29:bc:94:16:a7:23:25:bd:e2:ed:8a:
13:5a:16:09:37:1e:6d:92:da:2b:e8:00:1c:9a:c1:0e:f7:32:
b6:0f:be:d6:58:1a:16:24:6f:56:24:b4:65:75:75:96:de:cd:
a4:a2:73:e1:95:13:60:af:46:ac:67:3c:c5:58:1f:4c:ec:b7:
d3:13:e2:bc:4c:86:7e:3f:b0:80:78:3c:7b:c4:5f:f6:2e:8f:
70:d3:d7:e7:89:92:10:64:a4:84:ee:a7:ba:77:1c:e6:52:01:
bd:52:14:b2:b0:85:27:34:3d:1a:da:af:ed:19:8c:75:a1:3e:
23:7e:24:47:75:6c:04:d7:b9:07:4d:bd:dc:f8:d1:32:fc:d7:
ff:f6:93:58:f8:f1:0c:ad:b5:e9:5d:ea:cb:ac:26:77:70:ac:
6b:3e:e1:5e:7e:3e:62:da:ca:3e:60:8e:72:3f:86:67:cb:83:
ee:39:f9:17:a5:df:7e:00:39:fd:79:ef:8b:c9:7a:20:6f:74:
32:bd:dd:c0:83:8c:69:1c:86:d3:0e:ee:5a:d6:8c:45:8f:c0:
2e:3a:74:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:40:01 2025 by rpki-client