
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.cer
File: E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.cer (raw, json)
Hash identifier: ZCvo70Xkv38Sm5oQDZBrsxmQbSOjImcgtYbPyeRM+ZA=
Subject key identifier: E3:9C:8B:A5:F3:D1:22:7D:86:25:CE:6F:02:FE:CB:FA:6E:3B:82:B1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5D59EC09C40099C319E95B634EE3B7F9356F9B2B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.mft
caRepository: rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Mon 25 Nov 2024 20:29:51 +0000
Certificate not after: Mon 24 Nov 2025 20:34:51 +0000
Subordinate resources: AS: 263623
IP: 143.255.44.0/22
IP: 177.185.240.0/20
IP: 2804:102c::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:59:ec:09:c4:00:99:c3:19:e9:5b:63:4e:e3:b7:f9:35:6f:9b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 25 20:29:51 2024 GMT
Not After : Nov 24 20:34:51 2025 GMT
Subject: CN=E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:75:2a:1d:34:98:db:cd:1d:32:77:dd:87:
f6:2b:eb:fe:25:fc:50:c7:f7:cc:3f:62:2c:04:24:
83:f0:94:a7:b9:85:e4:0e:35:29:c7:78:bb:bf:da:
84:05:bf:af:cc:e4:d0:e5:43:5b:33:ae:b6:70:a1:
ed:ed:6f:10:7d:f5:61:48:91:f2:cd:5f:7e:90:a6:
91:05:47:00:5d:53:19:1e:b2:f2:a5:5a:59:d8:d1:
a3:a0:63:13:31:56:38:2c:5a:64:c0:71:16:92:3f:
14:ab:b9:3b:05:db:2f:44:5a:dc:01:25:d3:dd:62:
e9:15:e6:f3:55:b6:88:71:bf:55:e3:1f:4e:92:a5:
35:1b:1e:6c:a7:9d:10:fa:73:aa:f3:2e:40:0d:8c:
d8:27:6f:2a:b0:fb:00:61:69:d8:45:b2:df:39:3f:
fc:e9:1b:23:d2:56:84:98:b5:26:70:2d:97:2e:27:
2e:4a:8d:35:cd:56:e2:44:7c:8e:8b:9a:81:39:f0:
24:80:69:2d:2e:2d:83:d4:a6:49:9b:d8:15:23:b3:
1c:62:75:ea:05:e6:de:91:fc:9e:88:51:c6:e6:3e:
fc:62:e4:60:d6:2a:41:cf:da:f3:98:e9:23:91:66:
85:20:b1:b9:5a:c9:ee:5d:15:7b:e3:9b:6f:4a:13:
53:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E3:9C:8B:A5:F3:D1:22:7D:86:25:CE:6F:02:FE:CB:FA:6E:3B:82:B1
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.44.0/22
177.185.240.0/20
IPv6:
2804:102c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263623
Signature Algorithm: sha256WithRSAEncryption
c6:55:a8:1a:e3:e6:1b:4b:dc:13:7b:2b:b4:f2:6c:b4:3d:3c:
c6:8a:3b:2a:ce:f7:17:5d:60:57:c0:79:ef:0c:c7:6c:52:0c:
71:65:ab:7a:7c:01:ba:4b:9f:cf:09:99:32:27:3d:7c:f0:52:
46:ac:a0:3e:0c:3d:2c:5b:5c:d6:fd:87:da:df:14:ba:73:ec:
de:b1:fd:e1:81:12:81:8c:7d:e9:dc:9d:c8:83:fa:0f:61:1e:
3b:15:cb:ab:00:bc:f9:9c:c4:06:60:81:7a:9e:e7:59:ed:49:
90:75:29:9a:b5:02:70:ad:1a:8f:22:fb:89:5a:f9:e3:02:07:
0d:ae:f4:72:5d:d2:d8:07:07:1b:ed:27:2b:59:59:82:e2:c7:
08:5e:2b:86:ff:a0:8b:76:85:b3:8f:e7:6d:87:ae:69:e9:71:
38:a0:74:48:dc:71:e3:c9:0d:82:5d:2a:6d:8e:ff:07:b1:21:
f3:b5:8e:4a:f0:a7:87:cc:33:ae:95:24:74:65:5c:b5:f3:76:
5a:36:c9:8c:97:b6:4a:b3:46:7d:57:de:6e:89:ed:93:f8:f4:
b0:2f:73:5a:46:09:0e:5b:5e:cc:47:4a:5c:ed:f5:77:d9:71:
a5:87:2c:be:59:d6:46:0c:dc:a1:02:06:2a:73:ba:a8:47:64:
05:d6:f1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:46:05 2025 by rpki-client