Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer
File: 4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer (raw, json)
Hash identifier: fNIXL9E+pq93BeMDJ4GdbUB8KxchWN0gwDbHXKFfQOQ=
Subject key identifier: 4D:CB:5A:BC:62:FB:BC:89:0F:DA:F0:5E:0D:86:D7:99:9A:6E:AD:B2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 32B2736CFB04C5F4DF661FD77E60B85BAC050DE3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft
caRepository: rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 17 Dec 2024 18:03:39 +0000
Certificate not after: Tue 16 Dec 2025 18:08:39 +0000
Subordinate resources: AS: 273485
IP: 2804:8f58::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:b2:73:6c:fb:04:c5:f4:df:66:1f:d7:7e:60:b8:5b:ac:05:0d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Dec 17 18:03:39 2024 GMT
Not After : Dec 16 18:08:39 2025 GMT
Subject: CN=4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:25:94:9f:74:cd:99:8c:7c:7d:bd:2f:f9:6b:
85:52:c0:14:ce:fc:06:9e:02:a4:3b:f1:ff:bc:36:
8e:de:5d:89:53:f6:71:fe:7e:99:52:49:13:5d:4f:
3e:0a:dc:ec:eb:7e:0c:9c:bd:3d:4f:14:ea:95:8b:
79:28:73:24:2c:0a:80:f3:33:50:c0:13:cb:80:02:
2a:cb:f5:6c:38:4e:3b:a8:7e:4a:79:18:de:eb:b2:
86:68:af:83:3f:c3:e0:d9:88:9a:ff:e6:58:50:34:
f1:e2:9f:fb:22:7c:4b:7d:e9:7c:b1:d5:57:71:6d:
10:fb:c6:d0:d2:ff:0a:04:9d:4f:7a:95:f6:b0:62:
41:f5:0b:1d:b5:b5:fb:a5:c5:23:af:b0:b3:b2:08:
b3:19:4c:9b:2c:dc:c1:25:90:25:ca:7c:f0:77:27:
69:ca:df:23:76:3d:59:92:26:e7:60:23:68:26:7d:
63:e5:c1:54:de:7c:c3:b7:84:61:64:f4:65:8c:ef:
24:8a:60:10:f4:c0:ef:38:65:72:89:59:5d:1f:96:
e1:eb:5a:01:ac:04:f0:7e:45:a4:c8:56:b6:fd:41:
0a:36:b0:42:b4:03:12:3c:28:69:f6:12:11:54:b4:
e0:de:66:f7:4c:60:0d:de:36:f3:2e:ac:c5:5f:db:
d9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
4D:CB:5A:BC:62:FB:BC:89:0F:DA:F0:5E:0D:86:D7:99:9A:6E:AD:B2
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8f58::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273485
Signature Algorithm: sha256WithRSAEncryption
72:30:ee:b1:8a:d2:aa:e5:20:39:5e:1a:1d:da:f4:8b:10:f8:
53:76:ab:50:a6:89:03:92:28:b6:6c:3e:33:0c:fe:d9:24:fb:
bb:71:f5:b3:80:17:e3:e0:1d:2f:35:1a:64:6a:35:c4:8a:18:
e8:a4:aa:b4:00:81:e8:cf:9b:8e:8f:34:fc:72:43:09:cb:e7:
30:7c:22:f7:88:2a:1d:08:31:51:f5:33:e9:e4:30:d2:4c:32:
91:7b:6d:83:db:1f:97:ab:15:10:b1:4b:ef:91:3b:4b:c9:92:
76:24:c9:12:ce:17:3d:73:2e:f9:ab:f3:6f:91:75:99:1c:89:
b1:59:b9:18:84:07:ee:ef:0b:0a:de:62:d1:d5:7e:84:7c:34:
a3:8e:7b:f5:27:9a:19:dd:31:a9:0b:a8:d2:aa:a7:b8:b0:1a:
b2:b7:ec:c4:6d:a1:b6:82:18:fc:a6:d4:c2:34:60:e5:b4:05:
08:27:15:03:4b:bf:3c:cb:23:de:a1:46:fa:21:ca:e9:f7:80:
75:8e:25:8c:36:a9:b7:d7:09:61:f6:31:67:7e:0d:bd:28:50:
c7:80:39:b6:1a:75:d5:aa:61:9a:4a:4b:0a:26:ec:15:f9:60:
e2:7a:13:a9:16:2c:5f:15:b8:91:63:05:cb:1f:b9:5a:85:14:
93:5f:d5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:57:30 2025 by rpki-client