Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FC1D0FFDFCEE4AA7A972BDC76D34C1E6632E7ADA.cer
File: FC1D0FFDFCEE4AA7A972BDC76D34C1E6632E7ADA.cer (raw, json)
Hash identifier: /AdcUjPydNsY7QbZdGex48YX8ZYmWM6saGZkwArJrMc=
Subject key identifier: FC:1D:0F:FD:FC:EE:4A:A7:A9:72:BD:C7:6D:34:C1:E6:63:2E:7A:DA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5490F07AF2B86DC49A10E55829E900F45CA4944D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/FC1D0FFDFCEE4AA7A972BDC76D34C1E6632E7ADA.mft
caRepository: rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 24 Dec 2024 18:50:09 +0000
Certificate not after: Tue 23 Dec 2025 18:55:09 +0000
Subordinate resources: AS: 264259
IP: 138.118.40.0/22
IP: 2804:2514::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:90:f0:7a:f2:b8:6d:c4:9a:10:e5:58:29:e9:00:f4:5c:a4:94:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 24 18:50:09 2024 GMT
Not After : Dec 23 18:55:09 2025 GMT
Subject: CN=FC1D0FFDFCEE4AA7A972BDC76D34C1E6632E7ADA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2a:ea:3e:17:99:2d:6d:45:c9:e1:aa:fe:f3:
07:ef:97:7e:57:56:ee:4d:ed:9e:8c:f8:93:5d:89:
ab:37:4c:cb:a0:f2:5f:2f:de:fc:7f:31:15:49:40:
00:a7:0a:f1:f5:4a:e0:2b:6a:9c:c5:67:de:85:b4:
25:83:a5:56:4b:da:00:a3:a5:ce:93:6b:4d:c9:72:
80:f3:55:98:cd:3e:c6:fd:e6:65:00:ec:79:13:18:
3d:49:bc:0f:7b:20:50:68:ae:28:92:20:7a:07:fc:
6b:12:3d:40:b2:5b:50:79:72:1d:d0:02:18:61:87:
7c:58:10:66:70:92:49:c7:d4:47:49:7b:dd:29:5f:
76:6d:5f:fa:18:64:82:1a:cc:e0:97:a6:b6:16:b0:
80:98:44:1b:08:41:6b:08:25:b2:42:e8:30:f0:a0:
fd:8e:4a:2d:71:0b:6f:3f:10:9e:9d:61:a9:6a:df:
c2:e2:be:7a:f2:f0:9e:80:a5:2b:47:17:56:45:d9:
37:cb:50:d7:47:51:f2:71:61:a3:a7:1f:f4:c2:12:
53:cf:35:4b:f8:8f:a8:37:29:4e:f9:51:2e:df:d1:
49:30:93:7c:bd:d4:02:66:66:54:8e:3c:49:21:eb:
d2:3a:f2:45:97:d2:df:30:a4:c2:98:52:6d:9e:07:
cd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FC:1D:0F:FD:FC:EE:4A:A7:A9:72:BD:C7:6D:34:C1:E6:63:2E:7A:DA
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/FC1D0FFDFCEE4AA7A972BDC76D34C1E6632E7ADA.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.40.0/22
IPv6:
2804:2514::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264259
Signature Algorithm: sha256WithRSAEncryption
b4:6b:9e:60:eb:97:50:b9:db:dc:e8:5d:71:1e:8b:67:f6:cd:
9f:4e:b6:ac:3e:9f:ad:d4:eb:fa:5b:50:fa:d2:ee:ae:c2:84:
26:24:3e:ef:dd:af:28:5c:e3:ff:26:10:78:45:a0:20:04:52:
62:12:3e:5c:19:9c:59:e2:6e:6a:5e:74:bf:86:ec:c0:0a:e0:
a1:30:52:ef:48:84:88:0c:44:96:72:9f:d3:be:d5:76:15:ab:
dd:2b:44:b5:3f:b4:74:58:02:11:39:19:94:90:95:ec:b8:cd:
d3:41:54:de:d7:84:f8:27:0d:c2:34:47:a0:a4:ad:98:72:7f:
96:71:31:9e:13:89:ec:6d:03:76:cc:e3:52:b8:a2:d2:41:73:
74:1f:c5:e8:75:7b:1f:94:93:1c:65:f1:8f:68:6a:50:ce:c3:
d2:66:3c:b8:13:88:a5:a5:e1:52:dd:74:87:7a:42:16:8b:43:
be:d9:ac:b6:af:c8:79:9f:90:26:1c:2e:b5:61:da:1d:47:ef:
b8:62:b7:5b:d7:4c:41:88:21:ea:e0:8a:3f:84:46:b0:18:9a:
57:00:a7:f9:5a:8a:8b:1a:35:b3:0d:63:ae:b6:22:10:bf:44:
87:3a:0e:2e:17:63:5d:e8:2a:29:bf:9a:52:66:a1:42:71:8c:
aa:40:07:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:33:35 2025 by rpki-client