Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/25F750CC8B097F02421DA84CAA0417DC66A794EE.cer
File: 25F750CC8B097F02421DA84CAA0417DC66A794EE.cer (raw, json)
Hash identifier: 0OeWrRDS8U6FkBxky0S/KFTH4HxhX+rPC57B86NiqW4=
Subject key identifier: 25:F7:50:CC:8B:09:7F:02:42:1D:A8:4C:AA:04:17:DC:66:A7:94:EE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1AF7AFC9088482F41D67CB8DBE853C75F2A2B1AE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1/25F750CC8B097F02421DA84CAA0417DC66A794EE.mft
caRepository: rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:27:31 +0000
Certificate not after: Wed 02 Apr 2025 18:32:31 +0000
Subordinate resources: AS: 52995
IP: 177.47.224.0/20
IP: 177.93.248.0/21
IP: 2804:4d8::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:f7:af:c9:08:84:82:f4:1d:67:cb:8d:be:85:3c:75:f2:a2:b1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:27:31 2024 GMT
Not After : Apr 2 18:32:31 2025 GMT
Subject: CN=25F750CC8B097F02421DA84CAA0417DC66A794EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d6:73:99:fe:93:d0:97:93:a5:76:74:16:9e:
99:30:0b:08:77:99:47:58:99:99:4c:38:94:de:d8:
26:5a:0d:a0:2b:74:08:86:bc:33:c8:48:94:9b:aa:
e4:93:04:bb:9e:33:10:d6:57:12:60:be:04:c0:b9:
07:85:db:b3:fe:8f:54:ff:8e:ca:c3:83:84:2c:ad:
23:a7:9b:b6:0a:0c:46:50:8d:8c:bc:9c:41:54:9f:
60:df:f9:ad:b8:03:7a:b9:39:7b:32:3f:8a:4b:df:
7b:3c:d5:a0:c4:8c:49:45:63:54:32:f9:54:02:c9:
b4:59:8f:9e:b6:d8:a5:0b:61:fb:86:af:66:ea:58:
93:5b:0b:70:99:84:6b:e4:00:4d:86:8f:9e:c0:38:
42:a7:22:7e:c3:5c:58:de:ae:5e:c7:3b:27:eb:0a:
af:6f:80:6c:96:e1:30:ea:a0:42:40:43:74:0d:89:
62:f3:8d:69:f7:39:63:70:3b:5e:cb:52:01:5a:2c:
56:82:10:3b:03:23:6b:05:22:ab:72:d3:f7:38:4e:
a2:e9:15:79:18:9d:bd:77:b3:c9:aa:01:6d:6c:c6:
f5:b7:58:b3:4c:b2:7c:db:16:30:bd:e7:22:c4:c0:
61:5f:00:a3:36:5e:e5:6c:26:e1:77:1a:63:93:9f:
56:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
25:F7:50:CC:8B:09:7F:02:42:1D:A8:4C:AA:04:17:DC:66:A7:94:EE
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1/25F750CC8B097F02421DA84CAA0417DC66A794EE.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.47.224.0/20
177.93.248.0/21
IPv6:
2804:4d8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52995
Signature Algorithm: sha256WithRSAEncryption
bb:52:96:69:47:8a:fb:dd:5e:51:a3:90:26:99:05:6b:54:7a:
9b:d6:68:5d:7f:5a:73:7e:9f:8a:cf:b9:2e:44:4f:e7:c1:f4:
c2:b1:fa:e1:ca:dc:5f:5b:63:c1:c0:b9:05:71:5c:b3:51:0c:
37:78:47:98:bc:4c:2b:4b:f2:ae:f2:e3:99:60:f2:bb:f6:38:
1a:52:11:bf:8b:6b:51:f9:fd:f4:e2:a0:bc:44:c2:2f:59:72:
d1:93:08:ef:38:14:69:04:55:08:02:e3:28:c1:52:e8:b6:cb:
27:82:d3:36:e6:c4:4e:67:56:b1:dc:29:a8:95:35:88:44:12:
05:e2:9d:73:a0:ce:0b:6f:62:c4:b8:7e:78:4c:1e:42:4d:a7:
a3:9e:f3:89:f7:1a:84:bc:44:06:d0:1d:f8:37:ca:58:ea:28:
ec:30:f7:55:de:84:1f:6e:61:c0:a5:19:a1:e4:53:f5:65:42:
66:13:02:3f:a4:73:80:e7:80:97:0e:4a:52:19:cb:5c:10:cf:
62:0b:68:94:e0:e2:98:56:31:66:2d:9b:d3:a8:1d:11:6d:65:
7e:41:f7:c5:06:ae:c8:3e:6c:6b:e9:17:93:e2:88:3e:2c:61:
0d:a0:9e:6f:3c:d2:1c:21:dc:48:15:08:64:95:67:ef:c7:cf:
f4:17:a9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:39:33 2025 by rpki-client