Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.cer
File: 14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.cer (raw, json)
Hash identifier: F8Z4WWIQGIzCmwTBHqX8cMBeMqbbiBDPAFvM7i4bPg0=
Subject key identifier: 14:DA:F3:CA:35:6C:52:B0:3F:2B:DD:7F:43:D3:D5:BC:B2:4D:25:C1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 5955ED54F644802A86413C814C482F56B051083B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.mft
caRepository: rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 26 Apr 2024 14:39:19 +0000
Certificate not after: Fri 25 Apr 2025 14:44:19 +0000
Subordinate resources: AS: 263483
IP: 191.242.224.0/22
IP: 2804:128c::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:55:ed:54:f6:44:80:2a:86:41:3c:81:4c:48:2f:56:b0:51:08:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 26 14:39:19 2024 GMT
Not After : Apr 25 14:44:19 2025 GMT
Subject: CN=14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f3:95:59:6b:2e:f3:05:89:b0:81:b5:89:12:
46:bf:12:d3:c9:31:6e:82:d5:9a:5b:c0:a4:b8:3d:
aa:5c:f8:95:6c:4c:db:e3:6a:ef:eb:5f:da:a3:9a:
e8:01:31:87:87:e8:ca:30:fa:12:1a:33:09:2c:f5:
dd:3b:43:79:52:08:76:dd:47:15:f0:19:15:fb:30:
bc:4e:c7:a2:13:8c:15:3a:8a:f1:d3:68:d5:16:dc:
4b:04:60:22:c6:b1:04:00:86:44:cb:8f:62:b2:9a:
38:47:bd:b7:3b:cc:ea:5a:7a:f8:c2:e9:a7:e1:0c:
b9:1a:14:70:da:14:f1:34:d4:c5:f1:4e:df:50:c1:
db:08:b7:cc:2b:cb:27:2b:be:d8:59:da:d1:02:c6:
94:97:f3:bb:fe:bf:bc:87:0a:66:dd:7c:0e:8d:80:
61:64:5c:8e:e2:c8:f9:93:e9:c2:07:68:4a:62:fe:
ad:2f:47:d0:ac:50:8f:7b:92:88:b1:26:dc:dc:5a:
3d:40:e5:d5:13:57:6b:aa:dd:50:c5:bf:30:65:b0:
cc:9b:4a:ae:04:2e:38:0e:ae:87:3c:e1:62:72:48:
0b:0d:0d:84:0a:05:d6:c7:34:bb:23:ec:7a:75:f7:
1e:db:f0:38:c6:52:a0:fe:7e:2b:4c:b1:c7:61:dc:
8e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
14:DA:F3:CA:35:6C:52:B0:3F:2B:DD:7F:43:D3:D5:BC:B2:4D:25:C1
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.242.224.0/22
IPv6:
2804:128c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263483
Signature Algorithm: sha256WithRSAEncryption
61:61:cf:b2:6b:84:3a:13:74:94:9f:2e:a7:4e:ca:59:5a:76:
20:e5:fc:70:4d:b3:14:b7:0b:3e:f7:0a:76:0b:ca:a4:ee:68:
e8:67:1a:8f:74:85:1c:3f:58:57:e1:3f:6c:97:66:73:d5:50:
0b:c8:70:95:da:d1:7a:fa:e2:3f:2c:6f:b8:b3:06:cf:2b:69:
44:4b:de:86:69:ee:83:7a:52:e4:dd:cd:a6:02:6b:0c:a8:f3:
e5:4f:99:db:c1:bf:f3:7b:ca:58:4f:4d:37:e1:c9:70:9a:0c:
69:e9:6a:75:d3:12:a1:95:0a:fc:65:64:3d:26:c4:e5:e5:a5:
c6:79:6f:9a:01:57:a9:c3:96:5b:02:2e:49:91:af:b8:59:83:
26:cd:a8:25:fa:69:48:ba:d0:55:af:4d:c3:c1:86:87:10:b2:
dc:0f:b7:41:e3:6c:49:c0:a2:b7:31:dc:16:e3:29:8b:02:d3:
4d:1b:c8:2d:b3:48:d9:d1:e4:ac:04:c1:9f:8a:5f:92:fd:a3:
03:71:3f:2f:6c:d9:0d:1c:2e:ec:87:77:28:d3:14:92:31:e3:
42:29:c2:a4:11:18:78:ae:18:38:87:92:37:2e:1e:a3:01:fc:
2c:b7:6d:2f:c8:05:64:83:65:9a:a6:9c:93:70:20:46:47:34:
cb:b6:24:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:26:46 2025 by rpki-client