Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0D87E481DDE13C2B08241FF1415855CEAAAD5A90.cer
File: 0D87E481DDE13C2B08241FF1415855CEAAAD5A90.cer (raw, json)
Hash identifier: 3hDwqScRhpks7JRoY4sXFE5+k5QsmjZjnnys4efypfk=
Subject key identifier: 0D:87:E4:81:DD:E1:3C:2B:08:24:1F:F1:41:58:55:CE:AA:AD:5A:90
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1187AA4970DF5953A947C8FF4EA0737A02BA3C27
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2/0D87E481DDE13C2B08241FF1415855CEAAAD5A90.mft
caRepository: rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 07:43:05 +0000
Certificate not after: Thu 03 Apr 2025 07:48:05 +0000
Subordinate resources: AS: 271592
IP: 190.9.120.0/22
IP: 2804:7df0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:87:aa:49:70:df:59:53:a9:47:c8:ff:4e:a0:73:7a:02:ba:3c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 07:43:05 2024 GMT
Not After : Apr 3 07:48:05 2025 GMT
Subject: CN=0D87E481DDE13C2B08241FF1415855CEAAAD5A90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:12:c9:74:85:ba:a0:bd:c7:f0:e3:db:cb:ca:
c4:8e:ed:dc:60:b6:d9:cf:1c:7c:ce:a6:e5:3c:79:
ad:9d:cb:36:3b:62:b1:13:5d:1d:cb:e6:e6:51:e4:
b1:12:95:55:e5:d6:9a:b2:cd:75:73:cf:c6:07:67:
69:db:a5:f1:be:1d:78:93:30:03:2a:54:7d:ad:47:
68:0b:0d:83:2f:f6:c6:0a:d3:62:d8:e7:2a:f6:02:
0b:30:2e:d1:91:6d:2c:63:52:a8:4b:0a:be:b4:6f:
9d:3b:e2:10:97:5b:a0:ae:9f:32:f9:ad:cf:96:bb:
84:a7:a6:87:2b:18:a5:1b:58:d9:22:47:9c:bf:63:
0d:31:3b:6b:af:e5:fd:f4:c4:dd:f3:c7:f9:68:28:
6c:90:57:e9:bb:52:84:95:ee:aa:a0:84:f2:fa:b3:
0e:37:23:75:39:36:ce:36:40:fa:e4:86:ff:ce:a7:
9f:3d:5a:40:36:f9:3e:2b:b6:7b:8d:ce:fb:8f:26:
5b:8d:e0:e0:96:74:0b:b8:c1:fb:98:d3:8d:c0:aa:
e3:d5:61:5a:04:9c:cf:d1:ce:4a:d4:e1:37:e6:d6:
2a:d8:bb:6f:d7:8c:11:f4:53:25:4c:7b:8d:cf:0d:
53:13:5d:d2:0e:53:8d:2f:9c:2d:5b:3c:bb:47:3d:
67:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0D:87:E4:81:DD:E1:3C:2B:08:24:1F:F1:41:58:55:CE:AA:AD:5A:90
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2/0D87E481DDE13C2B08241FF1415855CEAAAD5A90.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.9.120.0/22
IPv6:
2804:7df0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271592
Signature Algorithm: sha256WithRSAEncryption
a7:d0:a0:0e:a5:14:12:74:3a:61:58:54:5d:4f:f4:2b:f1:30:
3f:7c:8a:f8:32:32:be:87:e6:a5:78:af:9f:57:f4:8f:6e:4b:
b9:aa:76:26:7f:9f:7d:40:9e:06:57:6a:de:1c:0e:9b:cd:95:
0c:8c:6c:ea:d5:18:e6:51:bb:cc:fe:c3:c1:9b:a0:81:e4:b8:
2d:c6:4a:14:cf:2c:dd:30:71:78:cf:0b:36:6e:19:92:7b:a8:
28:bf:1c:b3:2e:95:74:6c:21:48:3f:63:be:18:86:7b:65:69:
b4:5e:08:6f:ef:8e:fb:f9:4b:d0:80:af:81:d3:2a:2f:18:13:
eb:f3:5e:1c:dd:52:88:75:d8:7a:01:01:8b:10:8b:4a:af:b2:
b0:8d:2b:3f:43:93:b4:51:5d:f8:63:f9:bc:11:37:d7:ee:7e:
2f:4c:85:d1:39:62:81:6c:33:de:59:58:bb:99:c5:98:bf:e4:
7d:d6:70:72:09:95:42:23:6a:33:7d:20:e4:e7:55:10:cf:26:
52:51:93:04:ac:5a:51:44:f5:72:7b:c1:28:fd:54:b9:e3:f8:
4f:16:bd:0f:4b:cb:f2:88:cb:7f:85:79:3d:dc:e9:e1:65:51:
ad:24:66:d5:8c:16:7b:c3:2a:1c:12:c4:b2:a8:36:a3:c8:72:
4e:91:26:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:28:03 2025 by rpki-client