Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
File: 0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer (raw, json)
Hash identifier: p9tMHPUkHdnbyvQzdFmFV0bu3n0xAh4PxTvpHFsEYtE=
Subject key identifier: 0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 672F8AFACA0E5FD70F92441EE68755B05A1E14ED
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
caRepository: rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 07:57:12 +0000
Certificate not after: Thu 03 Apr 2025 08:02:12 +0000
Subordinate resources: AS: 28634
IP: 177.105.128.0/20
IP: 179.96.128.0/19
IP: 189.90.96.0/20
IP: 201.62.64.0/19
IP: 2804:128::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:2f:8a:fa:ca:0e:5f:d7:0f:92:44:1e:e6:87:55:b0:5a:1e:14:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 07:57:12 2024 GMT
Not After : Apr 3 08:02:12 2025 GMT
Subject: CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:83:af:57:20:4d:79:03:da:69:0f:9e:1a:2c:
e9:0a:d3:e1:db:a7:93:f6:72:52:43:78:ad:0a:11:
3a:cd:b7:ce:7c:8a:89:dd:65:76:a5:05:15:e3:76:
0a:48:85:e9:ef:76:20:c3:76:39:b2:46:5b:63:e5:
ef:e1:09:30:cb:01:fd:21:ae:88:cc:7c:ee:cf:eb:
7a:a7:59:89:6b:3c:92:fe:24:30:e9:f4:63:9a:f8:
40:d4:18:2f:bb:ae:07:4f:fa:77:4d:12:f1:a6:a2:
80:57:7c:ed:4f:eb:ac:d3:04:15:dc:17:47:0f:13:
b7:77:36:fc:d8:df:40:28:18:c2:41:69:82:29:77:
e6:f3:b0:21:4c:5d:80:49:68:5c:5c:35:81:8f:11:
88:ee:bb:1a:ca:74:9e:44:f1:73:cd:e6:94:f4:39:
6e:da:4b:df:93:8d:de:0a:31:8a:31:83:4c:62:a1:
08:ae:72:52:cb:ec:a0:ad:fd:69:e3:43:6c:79:dc:
4d:f4:90:85:d9:04:cc:36:f8:bc:d3:0e:54:a6:9b:
97:ba:4c:57:8d:e2:c8:e5:e7:23:27:82:4b:e9:1f:
01:eb:b0:4c:b7:6a:e0:fd:bc:4f:f9:33:7f:c1:55:
50:a0:c7:f2:7f:db:e7:c3:e9:55:25:f7:06:f2:47:
b2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.105.128.0/20
179.96.128.0/19
189.90.96.0/20
201.62.64.0/19
IPv6:
2804:128::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28634
Signature Algorithm: sha256WithRSAEncryption
a8:ae:0e:43:e9:0a:ba:82:e8:d1:bc:40:2d:c8:1d:19:b0:c7:
93:9e:be:47:b1:27:e7:cc:98:0a:bc:ad:38:fa:b5:2b:2a:2e:
8f:93:57:04:0e:fa:40:ad:80:ce:72:fe:ab:8d:41:fa:ba:e9:
9a:be:02:ba:14:44:f2:c6:d9:62:7c:43:d8:b7:c0:ca:43:77:
99:86:55:e4:99:01:0e:1e:26:e3:c4:65:4b:26:92:40:91:5a:
e5:89:5a:38:66:80:79:37:9e:96:4f:ed:d0:f1:6e:65:d8:58:
b0:68:3d:cd:dd:c1:f0:e1:f3:82:78:c5:22:c7:55:16:30:b3:
da:c0:c8:29:a4:dc:ce:ec:e6:63:2d:52:3f:81:a0:0a:a0:10:
0d:a8:c4:06:cc:52:95:25:c1:ea:bd:42:82:a7:e7:ee:75:64:
ac:3b:73:cd:f6:cf:71:15:37:96:74:79:79:77:1a:e8:63:31:
71:f7:6d:be:78:97:ee:36:85:c3:5d:3f:28:2d:9c:3a:39:d5:
75:aa:b0:c6:39:98:0c:96:c0:96:09:56:45:3b:64:0f:be:67:
a6:5a:78:85:e8:15:b0:0f:2f:d0:74:bb:da:c0:99:e3:d1:ca:
46:b8:2d:6b:c3:78:c1:70:af:1f:79:8b:c0:bb:b6:01:10:59:
c4:0f:49:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:22:53 2025 by rpki-client