Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer
File: 28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer (raw, json)
Hash identifier: UpvNPjfjMH1zaqo8dGVgCAYlQxifOkPsMg/dwaywwdQ=
Subject key identifier: 28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 200ADF7EE048E48D7F052097C714513E063269C8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
caRepository: rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 05 Sep 2024 15:40:56 +0000
Certificate not after: Thu 04 Sep 2025 15:45:56 +0000
Subordinate resources: AS: 267073
IP: 45.228.160.0/22
IP: 2804:47b8::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:0a:df:7e:e0:48:e4:8d:7f:05:20:97:c7:14:51:3e:06:32:69:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 5 15:40:56 2024 GMT
Not After : Sep 4 15:45:56 2025 GMT
Subject: CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:43:96:d8:8c:bc:06:fc:19:3e:df:ec:76:
97:4c:ab:07:d6:e5:aa:a2:e6:fd:64:d8:85:14:30:
dc:de:d2:7a:f6:66:4b:54:a3:e1:b4:35:51:27:1c:
e2:bd:8d:f4:8e:d8:b3:44:f5:2c:a4:ec:75:06:0e:
9f:de:67:c2:21:05:f0:63:bf:64:27:d5:4b:23:ea:
24:ac:23:05:5d:4f:cf:f6:ab:31:69:cf:ca:51:82:
a9:11:02:93:d9:a1:6c:10:19:d5:aa:22:2a:e0:af:
95:46:12:04:0b:11:49:12:7e:c3:cb:da:37:3b:b3:
4f:0a:7b:97:c8:19:08:80:82:c5:34:2c:0d:d9:28:
f5:db:9d:68:8a:28:9c:92:ac:78:aa:a2:ba:9b:9a:
6f:5f:2f:7e:52:91:5e:82:e5:14:02:a7:fd:60:72:
f7:0b:b2:f8:4b:a9:55:f3:61:88:a9:e7:26:c9:4e:
ab:08:ba:e0:b0:77:23:c6:24:d8:e9:ea:16:c3:b0:
06:53:27:eb:78:78:6d:96:67:e0:21:65:a7:5c:c1:
28:18:01:38:5e:09:57:a1:ca:3c:ac:20:92:43:2f:
83:f9:31:4a:c5:67:d2:06:e6:39:e6:b2:dc:8b:12:
dc:ca:f2:5b:10:42:df:66:c0:9d:1c:eb:5c:14:16:
0e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.160.0/22
IPv6:
2804:47b8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267073
Signature Algorithm: sha256WithRSAEncryption
c2:41:05:c0:ae:d0:d5:3c:14:cc:2e:8a:81:ec:40:8d:99:af:
fb:97:5d:20:de:7e:9a:bf:00:31:82:1f:81:e7:e5:59:5f:3c:
16:50:f6:55:5b:03:ea:a2:4b:54:80:ce:ea:68:65:e6:d6:b7:
0e:0b:00:cb:52:83:2a:b9:50:dd:56:f7:39:4f:44:12:a6:c0:
89:da:15:12:7c:c4:b4:f9:a5:fa:85:c6:d5:18:be:30:79:f3:
d6:8b:c0:87:48:4a:df:4d:d0:43:d5:19:af:44:90:2a:c4:db:
a5:e4:86:e3:40:3f:84:66:d5:1e:49:ac:cd:48:b2:d3:16:7d:
7c:bb:f2:48:60:16:2e:cb:96:00:d3:43:e1:9c:a6:ad:7d:42:
b2:4d:5f:9d:8c:c8:87:b1:55:23:c3:2f:c0:74:4d:44:c5:13:
5b:93:72:d1:04:41:6e:c4:8e:34:28:6e:cb:84:a3:01:11:36:
82:21:c5:d1:b1:65:39:4e:bb:9c:68:ae:ea:8c:2e:25:db:23:
16:64:e7:a5:da:ac:f5:ba:90:d4:2c:42:4b:ad:1f:7f:77:ae:
e1:57:0d:fc:19:26:7e:40:94:e1:e3:21:f2:61:f4:1c:68:ef:
ed:bb:b9:ed:24:b7:9f:d2:0c:e2:10:63:df:b3:1f:a7:1c:08:
9a:69:75:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:05:48 2025 by rpki-client