Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
File: ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer (raw, json)
Hash identifier: o10tHLU9a02YFEu2uKPqKAEsOmQoc2+Nhpv8ksx+vxk=
Subject key identifier: EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 6841D454CCF42DE7B2956ECEE3DA72A99E08DB98
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.mft
caRepository: rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 06 Mar 2025 23:08:59 +0000
Certificate not after: Thu 05 Mar 2026 23:13:59 +0000
Subordinate resources: AS: 269597
IP: 45.71.208.0/22
IP: 45.181.36.0/22
IP: 45.189.176.0/22
IP: 2804:6700::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:41:d4:54:cc:f4:2d:e7:b2:95:6e:ce:e3:da:72:a9:9e:08:db:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Mar 6 23:08:59 2025 GMT
Not After : Mar 5 23:13:59 2026 GMT
Subject: CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f5:66:57:41:1a:00:cc:5b:9e:9d:94:70:46:
0c:72:41:ac:23:8d:4f:0c:2a:f2:95:db:13:b9:21:
d6:f3:9c:9b:1b:4b:87:89:53:bf:09:f3:15:59:00:
16:ce:85:a2:84:e3:81:09:e6:a2:7e:fa:70:c5:4b:
4f:a3:80:5c:9e:4e:50:59:65:50:9d:41:ee:e5:39:
ae:12:d2:92:77:5e:ab:c2:83:29:ad:10:76:cd:77:
a2:c0:de:2b:58:76:91:4c:25:7f:ef:96:1d:05:0f:
b7:7a:87:5f:9b:f7:2c:3c:af:f5:b3:12:fe:fd:a1:
cf:f0:57:b8:8d:47:79:e4:54:0b:1d:0c:02:18:19:
29:54:79:5a:a8:06:04:34:ad:78:c2:dd:77:06:bc:
b5:50:11:17:57:95:2f:52:05:61:79:bb:6a:61:c3:
ee:55:ef:81:20:e5:86:a3:2a:0c:da:7e:e7:b3:21:
47:81:5a:0f:63:76:a8:80:57:f6:83:60:3f:bc:58:
f7:48:ab:65:dd:c3:97:36:8d:ee:81:3f:2b:cc:5d:
fc:07:64:c7:9c:e5:4e:6a:b3:0f:5c:06:c9:89:1f:
68:b2:fe:64:33:66:d8:5d:5b:88:c5:a9:f6:e2:93:
24:d9:f4:78:af:44:6c:c4:7c:96:a5:3a:c5:54:fc:
91:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.208.0/22
45.181.36.0/22
45.189.176.0/22
IPv6:
2804:6700::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
269597
Signature Algorithm: sha256WithRSAEncryption
38:4f:ad:33:9b:a6:1f:81:44:d4:8c:bf:8b:be:f0:cf:a6:67:
93:0c:e8:98:0a:08:95:fb:52:37:0e:ae:c9:09:f6:33:8c:51:
0a:50:a3:c4:10:82:74:a9:64:c7:99:91:67:dd:c1:cc:e5:a1:
9d:3c:d6:41:ec:0a:29:39:30:62:e8:b4:79:4f:b1:10:ce:0a:
c7:4b:5e:98:d8:7c:d3:38:1f:99:f9:88:12:43:96:16:1b:ab:
dd:95:c5:21:0c:82:b4:22:93:63:35:fb:47:ae:1a:f6:e5:a3:
c5:dd:3e:91:26:7e:e0:22:58:5d:98:33:94:ed:bd:94:2b:86:
d2:04:24:49:38:e7:51:da:89:09:82:9e:8a:53:03:bd:a4:62:
98:b3:44:57:0f:1f:20:6d:9b:b9:83:34:62:ba:a7:85:ed:ad:
a4:41:3b:2d:9d:25:95:92:9f:e4:0b:a1:e5:72:35:3e:bc:33:
ba:a6:fa:9a:4b:33:80:7c:ce:76:91:0f:19:b1:7f:c3:1b:94:
70:2c:85:2d:36:f4:b4:60:28:e3:de:46:18:28:69:4e:8b:ec:
bd:40:29:8f:3c:70:5a:b7:e3:df:ac:d4:bc:b1:a5:83:87:b5:
49:c4:65:da:c8:8d:66:74:d0:d9:04:18:4a:f2:30:fc:46:77:
04:7e:85:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:20:03 2025 by rpki-client