Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.cer
File: 73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.cer (raw, json)
Hash identifier: E17WhYd67kHqdCNmQFfaoeFnuLqapPqTDc6LV/1HWc8=
Subject key identifier: 73:BA:17:30:0B:8B:33:6E:71:62:A6:CD:35:AB:67:EC:BE:2D:0D:C4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3BD2C6ECC84747266093EBCE8B81CEFF99581E33
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.mft
caRepository: rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 29 Nov 2024 19:19:58 +0000
Certificate not after: Fri 28 Nov 2025 19:24:58 +0000
Subordinate resources: AS: 28153
IP: 164.163.140.0/22
IP: 170.233.60.0/22
IP: 186.193.208.0/20
IP: 187.60.144.0/20
IP: 201.148.252.0/22
IP: 2804:1a14::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:d2:c6:ec:c8:47:47:26:60:93:eb:ce:8b:81:ce:ff:99:58:1e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Nov 29 19:19:58 2024 GMT
Not After : Nov 28 19:24:58 2025 GMT
Subject: CN=73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:40:67:54:23:a5:15:63:45:b2:33:29:69:d2:
c3:d2:ec:00:31:b1:7d:cf:e7:d7:3d:3c:ec:f8:d6:
09:1a:3c:17:f6:1f:1f:47:48:4f:41:77:13:a9:a8:
d6:c4:c3:b1:4e:db:57:0e:a1:50:d6:95:19:b3:e4:
47:0d:7d:97:d8:b6:65:4e:0c:32:89:46:92:f2:6b:
d3:3f:04:40:ef:2d:65:6e:27:e8:3c:df:df:91:22:
5c:e2:dc:4c:fe:15:61:23:67:d3:c1:65:9f:2d:ea:
a2:28:69:d3:6c:d2:31:76:fd:19:eb:fe:7b:b5:cd:
39:ce:99:8a:18:8c:93:81:ee:b0:25:d5:3d:e1:b5:
31:37:d1:c8:ee:e1:da:68:77:ee:a3:af:7e:74:cf:
48:a5:20:82:09:af:db:96:bb:38:ed:24:04:e8:4a:
93:1f:4a:e1:ae:97:2f:f5:95:88:b0:61:7a:a1:e4:
b4:29:14:c5:b3:84:62:21:53:1c:7e:e7:1a:b7:08:
d6:9c:94:5b:06:69:8c:f2:68:3f:23:9f:47:62:44:
ac:7f:42:1b:43:a7:52:b4:cb:6b:e5:bf:60:2c:93:
74:34:96:df:c1:12:d2:2e:12:0d:4f:12:9f:63:cb:
1e:fb:b0:4b:66:e3:c3:22:53:1b:91:a2:3e:99:7e:
bc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
73:BA:17:30:0B:8B:33:6E:71:62:A6:CD:35:AB:67:EC:BE:2D:0D:C4
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.163.140.0/22
170.233.60.0/22
186.193.208.0/20
187.60.144.0/20
201.148.252.0/22
IPv6:
2804:1a14::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28153
Signature Algorithm: sha256WithRSAEncryption
1c:a5:23:af:85:ea:2e:7b:71:a5:e7:95:d2:b9:ea:d2:b3:d0:
0d:ed:92:f9:7c:fc:6c:aa:b6:13:04:01:f8:b1:d0:75:d5:32:
5a:4b:4e:d4:67:b4:da:ee:cc:94:d5:05:95:0c:ab:2d:ce:e5:
a2:5a:59:fd:93:56:43:fc:bc:d5:c2:5a:92:01:e8:13:80:2b:
6f:87:1f:5d:ad:51:c8:9a:df:67:f4:05:fe:d4:04:dd:ca:ce:
aa:cf:5d:89:b0:65:d4:2f:ff:9a:7d:f0:b0:2e:09:5c:4b:9a:
4d:1b:f1:cf:46:10:a2:b6:72:5d:e2:33:2b:de:59:0b:56:76:
46:6a:9a:ba:0b:57:05:bf:70:23:1d:87:42:2a:dd:2a:0c:ee:
53:00:dc:7b:e2:50:ed:19:5d:6b:4a:41:b6:e3:79:8a:f5:39:
a4:ee:48:1b:7a:82:5d:dc:c1:da:40:a1:0d:28:22:6d:aa:53:
53:f9:87:34:00:eb:68:da:df:89:2f:8e:b6:67:f1:42:aa:50:
db:53:81:e4:c8:54:af:ec:fe:88:7e:7b:f0:fd:d2:06:e2:5b:
84:3a:5e:a8:e6:af:9a:18:a4:a0:de:c6:70:df:c8:5d:28:f3:
e0:6a:4d:9f:64:8e:e4:ff:f4:a9:bf:8e:6d:ca:f9:4e:76:25:
df:96:da:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:51:03 2025 by rpki-client