
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer
File: 3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer (raw, json)
Hash identifier: zaoY7+LK+nj7miOejGVdDHY0/h1Ff7VsUE76j0OI3Kk=
Subject key identifier: 3D:5A:1B:2B:6D:E4:87:DB:B9:5C:EE:51:47:5E:26:56:F1:E9:BF:85
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 07583F34AA116E7FD6B0673C4ECBDCD5D470FE33
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.mft
caRepository: rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 02:31:32 +0000
Certificate not after: Thu 03 Apr 2025 02:36:32 +0000
Subordinate resources: AS: 267145
IP: 45.230.28.0/22
IP: 2804:48cc::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:58:3f:34:aa:11:6e:7f:d6:b0:67:3c:4e:cb:dc:d5:d4:70:fe:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 02:31:32 2024 GMT
Not After : Apr 3 02:36:32 2025 GMT
Subject: CN=3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:07:02:09:3e:d7:71:a2:03:66:87:6f:d6:ab:
54:96:e6:64:5d:82:ec:e6:1a:9d:21:9e:2e:a0:9d:
6c:68:13:05:c1:b3:70:80:a9:99:6b:54:34:8e:7b:
ab:77:93:6a:a7:2a:54:4a:45:f1:7e:c6:28:1c:ab:
f8:76:25:7f:fd:20:06:cb:40:7c:0d:43:44:0e:71:
d2:ee:94:46:bd:9c:d2:82:63:16:84:96:88:78:35:
af:77:ef:35:e5:5e:df:10:ec:ff:a4:23:8b:43:5d:
14:68:f1:e5:d9:0c:47:1c:9f:43:a6:62:b6:73:e9:
86:26:f0:4c:99:d6:b1:31:57:c8:59:ae:b7:0e:d5:
a6:a3:46:0f:c4:f3:e7:be:56:f5:ea:13:2e:9b:2c:
f8:19:b1:2c:9e:d4:c1:df:95:b6:b5:3b:b0:29:0a:
12:69:66:17:60:a6:3f:58:aa:e9:1a:22:46:42:08:
fa:37:15:f2:8c:34:3b:d0:7e:dd:67:b9:ab:bb:ff:
5d:1a:4a:b9:67:dc:b6:5a:69:6e:ff:1d:bc:00:86:
a2:da:b0:a8:d5:30:ce:df:88:98:c1:74:78:ce:ee:
44:cd:96:42:94:65:f6:30:25:2f:54:da:b0:a3:91:
c0:3a:76:1f:8e:fa:cc:8a:ab:bb:ea:2b:f9:4c:01:
a4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3D:5A:1B:2B:6D:E4:87:DB:B9:5C:EE:51:47:5E:26:56:F1:E9:BF:85
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.28.0/22
IPv6:
2804:48cc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267145
Signature Algorithm: sha256WithRSAEncryption
47:76:b7:25:0c:2a:28:e0:ef:6b:db:03:d0:89:d2:27:5b:cf:
44:75:86:08:b1:33:c2:23:59:06:66:a6:33:fc:ef:c4:e2:76:
7c:53:84:51:d7:0c:15:71:e8:39:3b:3a:23:7f:22:7e:f3:1b:
32:68:86:6b:84:5f:7c:c4:2d:56:6b:44:01:52:bd:f9:87:96:
c1:63:33:d3:87:69:7c:dc:f8:ea:56:11:ad:b1:c1:3f:43:9a:
c8:3d:c3:0b:bf:bf:b6:37:23:92:ba:42:cf:e4:7b:88:39:6b:
4c:30:e9:23:0d:80:2f:d4:7d:10:b5:9c:f8:df:38:14:25:f3:
9f:71:16:df:cb:08:6e:86:17:e9:e9:65:22:32:4a:20:4c:fc:
50:5c:0d:09:39:c3:01:60:3e:5e:44:c8:0e:6e:16:30:76:16:
dc:cf:e7:fb:b0:b2:a7:78:96:14:53:68:5d:41:ff:70:d0:e2:
1d:81:cf:28:aa:52:82:3e:89:46:a6:ee:38:d3:69:4b:30:6c:
2c:34:d7:d1:b9:ab:78:b4:6d:5b:35:c0:e6:29:0e:a4:22:b1:
5a:49:33:e0:9c:e5:de:c2:b5:c1:e5:27:2c:5b:f0:ce:c3:76:
50:a9:00:26:f0:97:37:03:9b:f9:79:f8:59:81:89:d0:ac:7a:
10:7c:44:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:08:56 2025 by rpki-client