Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
File: D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer (raw, json)
Hash identifier: y45+thpVfFSNFL4KzdZPSTK/8M9m4jPo83gPAN5Jfbc=
Subject key identifier: D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1A8A852DCDAF96CB2220B3F3A9B1082A31A861A2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.mft
caRepository: rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 21 May 2024 16:46:11 +0000
Certificate not after: Tue 20 May 2025 16:51:11 +0000
Subordinate resources: AS: 271293
IP: 170.233.240.0/22
IP: 2804:793c::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:8a:85:2d:cd:af:96:cb:22:20:b3:f3:a9:b1:08:2a:31:a8:61:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: May 21 16:46:11 2024 GMT
Not After : May 20 16:51:11 2025 GMT
Subject: CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:74:f4:64:47:c3:d6:45:50:74:94:fc:b8:01:
bb:49:02:ae:aa:da:36:07:00:a9:86:d8:62:35:2f:
c5:7d:2e:49:ea:43:01:30:41:1e:29:15:10:3d:e1:
5e:78:33:93:77:ee:81:a5:55:30:a6:c6:7c:7a:b9:
67:0c:9b:5c:55:98:e8:7f:c0:2c:f4:c7:d1:0a:4e:
d2:c6:fa:b6:8d:d3:22:28:b3:35:9a:89:23:ed:e7:
be:26:cb:78:60:83:c0:62:cd:a9:67:2d:ca:8d:2a:
7f:3b:52:46:7d:99:15:77:23:df:f6:b8:e9:63:51:
a7:22:37:88:8b:83:8b:7a:2b:1a:34:47:e5:05:63:
bc:a2:51:5f:58:e7:af:cf:2f:71:a0:51:5c:04:3f:
03:57:01:62:bb:c4:fd:89:86:82:8d:56:b5:50:e5:
2d:23:68:4f:8c:0f:18:c5:23:52:66:3d:0d:16:c7:
8b:7d:34:3d:2d:e6:5a:fd:bd:f1:f7:aa:f6:3b:b5:
29:2d:21:33:13:06:82:60:8f:17:fc:01:d3:cb:79:
9b:5e:bf:87:f6:ea:06:86:79:c8:f0:58:18:19:e3:
5a:59:65:86:6f:63:90:02:29:31:63:31:80:66:70:
25:ef:81:36:a8:26:4a:71:02:4d:a2:23:35:a9:1f:
c5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.240.0/22
IPv6:
2804:793c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271293
Signature Algorithm: sha256WithRSAEncryption
ae:cb:e0:38:93:26:2f:59:9d:be:68:53:1c:63:fa:d1:77:78:
b3:9b:73:c8:33:64:fb:14:5b:ca:66:f1:ba:cc:4a:d8:a5:40:
71:9e:47:39:c2:b0:dd:08:68:57:11:44:b7:4d:6e:75:c1:78:
02:da:6f:ec:48:8d:97:94:d8:0f:e1:71:13:55:65:30:c4:ab:
e5:ed:f5:fe:9f:c5:de:ea:a1:aa:98:7f:4a:69:03:db:26:50:
b0:36:0c:62:06:d0:6e:09:e2:7b:64:85:b5:22:90:d9:ee:7b:
32:c6:6a:64:0e:22:bf:e1:f9:2c:b1:a7:65:39:00:0e:e8:05:
de:87:28:87:f1:b6:06:9e:d2:1c:91:78:57:25:ab:be:3d:6a:
ed:6f:57:77:1e:33:85:29:57:82:52:d7:f1:6c:03:5b:cc:07:
29:31:d9:60:84:78:d9:ab:5e:9b:15:96:e7:98:81:38:fd:9d:
39:f0:91:f2:b8:15:33:7f:16:51:e2:0d:92:b7:66:eb:d4:ac:
33:fc:b8:27:19:2f:6d:62:86:b5:0e:bc:46:97:82:f7:e9:e6:
42:b7:10:8b:ab:fc:e2:6f:88:ab:aa:4e:ca:44:13:f6:36:93:
c6:b6:77:35:0b:5a:c7:23:92:70:2c:50:4e:ec:94:c7:95:f8:
e4:32:56:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:30 2025 by rpki-client