Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
File: 1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer (raw, json)
Hash identifier: IBkYQNgqINYS6bk4ejvKkX9KvueLCVppAHza1AKR9l4=
Subject key identifier: 1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3BCD4846420055886B43BC705014FE5E4262BF6E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.mft
caRepository: rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 09 Jan 2025 16:32:00 +0000
Certificate not after: Thu 08 Jan 2026 16:37:00 +0000
Subordinate resources: AS: 266514
IP: 45.186.40.0/22
IP: 170.244.232.0/22
IP: 2804:38f4::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:cd:48:46:42:00:55:88:6b:43:bc:70:50:14:fe:5e:42:62:bf:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 9 16:32:00 2025 GMT
Not After : Jan 8 16:37:00 2026 GMT
Subject: CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fa:8d:ef:c9:d9:84:fd:bb:c6:fe:60:f7:54:
6b:7d:e4:58:6d:7d:03:f8:f0:cc:9c:12:1a:f3:40:
e0:a0:d2:99:40:e9:2a:8e:1b:f5:6e:4d:22:5f:d6:
da:58:9b:52:f6:86:18:56:02:d5:70:96:f2:80:7d:
65:7a:df:5a:38:f8:7a:06:f2:c1:8d:ee:e8:45:4a:
a7:85:7b:e2:f8:8a:13:4c:50:32:3a:d0:07:89:b7:
fb:f8:0c:7d:84:cb:a4:77:fd:a5:85:97:eb:cc:48:
28:30:83:62:6f:05:5d:a2:63:42:aa:47:13:95:67:
f3:81:e4:37:d9:81:4d:55:c9:ed:ce:43:17:cf:ae:
13:33:24:db:e9:da:86:f8:42:04:8b:0f:56:c8:0a:
1b:58:c3:25:c8:1d:e0:e6:a8:55:c2:9d:8f:7c:d6:
59:61:06:b0:d3:80:7e:48:cb:04:52:9b:c4:dd:cd:
5f:b3:8e:7a:2a:2c:cc:3c:82:ad:b4:6c:ec:2f:ff:
2e:2e:c8:69:27:79:e5:67:86:1c:dd:22:8c:fb:00:
01:70:20:02:fd:2b:41:97:84:6c:1b:64:ba:b8:a0:
05:da:51:07:ff:8a:d0:85:61:6b:e2:08:33:f1:49:
7a:85:75:45:9c:5d:fe:aa:c8:ab:9c:2d:f3:82:38:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.40.0/22
170.244.232.0/22
IPv6:
2804:38f4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266514
Signature Algorithm: sha256WithRSAEncryption
cf:74:be:02:f6:19:3d:12:d4:8c:71:e8:49:53:1c:6a:78:34:
9c:3e:b7:b6:4b:a4:aa:83:aa:e9:e6:22:df:5a:89:15:69:87:
a2:4a:d9:fb:c7:0d:93:8e:b3:0a:ee:15:d7:08:50:92:5d:4d:
40:fa:01:d5:2e:36:72:48:35:c4:2f:06:66:2e:89:22:95:61:
da:ca:89:3f:dd:b1:c9:80:23:a3:46:e5:d0:4a:4b:43:1d:5d:
cb:10:a4:72:1d:3b:2b:7b:5b:2e:ea:b3:0a:bd:b3:df:9f:b8:
00:a2:d8:c6:72:2f:eb:37:e3:df:84:85:1a:84:da:24:4c:4f:
d7:8c:d6:34:18:df:fb:3a:26:7e:2c:e9:19:52:5e:cf:98:b2:
7c:d2:2f:f2:8a:65:fe:91:93:58:d7:7f:9f:8d:e5:28:b7:1d:
9e:84:b6:94:15:a1:99:5d:46:0e:02:d7:d6:20:41:65:57:47:
4c:dc:66:55:61:ff:4a:72:d4:e6:1f:01:c7:64:37:99:4d:bb:
bd:55:dd:7a:f6:3b:38:82:ad:43:1a:0b:53:6c:c0:61:92:8c:
b8:13:0c:8a:ee:5d:dd:db:8c:6a:ea:df:92:c3:c2:cc:c1:5a:
d0:0b:82:dc:ad:51:34:1b:69:5b:de:db:0e:ad:e4:dc:ef:09:
95:03:ea:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:21 2025 by rpki-client