Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer
File: 7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer (raw, json)
Hash identifier: WIjfV1fyEdbraZknO3gStZjz0cCPVse6lRloxYp2Jbo=
Subject key identifier: 71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 12144F4B92C6C348450BF0DB311DA0AEA72C900D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft
caRepository: rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 00:15:23 +0000
Certificate not after: Thu 03 Apr 2025 00:20:23 +0000
Subordinate resources: AS: 264182
IP: 138.97.104.0/22
IP: 2804:23c8::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:14:4f:4b:92:c6:c3:48:45:0b:f0:db:31:1d:a0:ae:a7:2c:90:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 00:15:23 2024 GMT
Not After : Apr 3 00:20:23 2025 GMT
Subject: CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:65:10:2f:da:ce:e5:42:52:b9:41:86:ec:
42:3b:e3:9f:87:52:c9:aa:f3:f9:66:de:8c:30:66:
2f:c5:00:a3:f3:d7:aa:07:8b:b2:cf:05:92:b3:3d:
87:45:50:ff:3c:96:c1:ed:1b:7d:59:8e:3e:03:76:
9d:4a:7a:cd:2e:9d:69:ee:06:1b:b6:3b:aa:7c:8f:
5e:77:f3:f9:b0:1e:56:af:ea:0a:f2:cb:91:ce:ad:
09:e3:68:0f:b4:d7:d6:e7:18:84:22:6f:4d:14:2d:
c0:f1:de:61:e7:a3:99:e1:57:7f:98:8f:4e:65:bd:
47:cb:24:94:a3:36:31:3a:a2:75:0c:07:6d:60:cc:
85:a0:6d:66:b4:5d:a2:5b:84:2b:9c:96:70:e8:41:
f9:b6:e6:20:57:48:39:0d:ca:98:be:df:37:0e:87:
08:de:81:20:da:bf:32:0b:20:c2:20:6e:1a:b9:b6:
52:96:d2:ef:d8:a0:78:26:74:33:8e:83:ee:3a:0e:
56:1d:4e:40:8b:e4:91:3c:8b:0e:53:01:26:d0:ca:
25:9c:ae:d2:ef:53:52:ff:7d:3f:33:58:0a:ba:9a:
25:f8:55:63:5e:29:ff:85:96:38:6d:80:2a:96:b8:
81:4a:b9:a9:7f:56:c7:93:3b:6e:7b:f1:d4:66:94:
25:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.104.0/22
IPv6:
2804:23c8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264182
Signature Algorithm: sha256WithRSAEncryption
21:a1:b9:78:a7:98:68:35:fe:94:59:31:dc:56:a3:7e:4d:f2:
2b:6f:1c:98:67:91:07:1b:62:78:52:01:18:51:96:da:5b:0a:
da:77:be:39:dd:33:80:1a:4e:81:7a:ef:05:7d:cb:d0:15:8e:
dd:53:5f:da:13:58:ed:52:f4:93:88:5f:2c:75:fb:78:e4:5d:
6c:32:62:e8:45:06:49:e8:a4:07:aa:05:c9:35:ba:8c:50:bc:
0f:0c:c2:80:72:be:d4:89:fa:64:70:cd:fd:a4:43:f6:4c:29:
e5:a4:5f:1b:c0:0d:3d:21:a1:31:af:aa:01:25:1c:0a:96:ac:
36:af:bd:7c:55:68:d4:a3:84:fc:00:54:01:d2:45:64:ee:4b:
7b:f6:c2:8d:59:94:d1:17:5b:38:4f:93:64:b2:58:75:af:7f:
18:6a:33:ee:54:7a:fd:44:82:1b:db:74:5f:3f:77:e1:34:f7:
70:f6:75:f8:14:cb:cb:77:c4:60:2c:23:85:d0:45:9a:a0:bf:
16:1c:71:a9:da:66:43:82:fc:0d:a3:45:a7:a1:79:d4:45:73:
15:87:47:ae:8e:09:92:8f:b8:48:46:e6:06:50:49:39:92:73:
a6:c2:3f:53:40:90:6f:52:87:bb:48:ac:d1:06:ce:a1:6c:59:
06:48:60:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:06:09 2025 by rpki-client