Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer
File: 8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer (raw, json)
Hash identifier: r9GbelagVH9Ql+QZO0kKMXldyKFjX1Fr74sN3DgYmng=
Subject key identifier: 8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2A83CA8742E4FF23FEAAE028E0FAC58764A8A66D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft
caRepository: rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 22:44:23 +0000
Certificate not after: Wed 02 Apr 2025 22:49:23 +0000
Subordinate resources: AS: 28639
IP: 177.129.68.0/22
IP: 191.6.232.0/21
IP: 2804:dd0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:83:ca:87:42:e4:ff:23:fe:aa:e0:28:e0:fa:c5:87:64:a8:a6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 22:44:23 2024 GMT
Not After : Apr 2 22:49:23 2025 GMT
Subject: CN=8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:fd:24:e4:ff:84:4d:53:86:8a:ac:3f:2c:
57:67:45:3e:01:de:ab:5a:6e:63:b6:2f:e2:16:66:
cd:bb:ef:36:fa:76:f5:eb:9b:90:49:cd:bd:4b:e5:
7d:a6:fe:56:f3:87:c2:04:b8:c1:12:a5:5c:a4:29:
f7:6c:8f:43:5b:a7:d7:d8:24:04:c0:53:4d:7c:b1:
82:41:c9:cf:bc:70:6d:d1:54:30:ae:c7:b4:16:22:
de:65:94:3c:72:95:b5:47:98:c3:3c:c7:e4:53:81:
f6:56:6f:43:09:74:fe:19:f6:3b:d1:a5:32:36:e9:
72:32:48:3d:90:e5:f2:a3:4a:2f:f3:af:7c:17:f6:
4d:ff:48:13:45:28:1a:63:75:77:d1:d4:82:df:22:
dd:33:9b:08:40:0a:02:9c:56:18:f5:c9:6d:2f:54:
f2:20:b7:1e:e0:34:3c:87:e8:cd:3c:ae:24:fb:b8:
8e:e5:f2:da:eb:48:3d:a1:04:8c:e0:0f:61:38:58:
20:b1:c3:90:ea:f7:0a:e4:b1:95:cb:c6:eb:82:27:
d3:02:ee:57:56:3a:aa:e8:00:9b:f8:3b:c0:cc:44:
66:b1:b0:fb:bf:8c:21:3f:23:ba:d2:9c:ff:ae:91:
3c:09:6c:3f:f3:8f:8a:68:b4:79:19:1c:f3:95:ec:
61:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.129.68.0/22
191.6.232.0/21
IPv6:
2804:dd0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28639
Signature Algorithm: sha256WithRSAEncryption
8a:42:b7:bc:29:a7:bc:9d:83:5f:38:17:88:0b:96:75:25:70:
ac:4d:5c:75:4a:56:98:2e:31:cc:cd:14:e5:39:79:ac:8a:b3:
7f:d6:97:18:28:4f:f5:a4:ca:07:a7:92:6c:d7:b0:b5:43:1e:
af:45:66:cf:1a:04:6f:59:6d:a7:66:fb:43:25:b0:74:5b:d7:
51:20:04:41:4b:af:f1:ae:60:07:5f:7d:9a:ac:45:e0:70:99:
ae:47:ae:17:64:63:4c:8b:98:9c:ad:89:09:45:ee:d0:f4:b0:
0c:a7:c0:b5:e0:ef:b8:08:46:ee:90:ba:3a:24:8e:b4:6c:d1:
31:b8:5a:06:58:44:8b:4f:0f:2b:87:37:ee:ef:0b:48:12:f2:
43:04:bc:88:46:da:45:4b:50:c4:6d:80:16:97:ba:12:cd:53:
05:a9:33:bb:15:b5:f8:1a:e7:79:1d:3c:d0:22:a1:c7:3b:aa:
bb:6a:61:ae:9b:fd:c3:ee:ce:d4:a1:b8:8c:6f:2a:14:19:ed:
6c:1c:e7:11:f8:ff:8c:a4:6c:9b:f4:fd:af:93:04:cc:32:2e:
c2:78:8e:46:c1:61:11:ff:2f:c9:6e:3a:49:fe:65:ab:b4:09:
5a:eb:fc:e1:12:35:93:4a:ec:6c:b0:ea:7a:dc:d1:8c:f7:98:
27:ca:cc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:58:26 2025 by rpki-client