Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer
File: 954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer (raw, json)
Hash identifier: gUGHcAEQWd7VTVEmrcWecEOUEdCfQhs/rSvFaSwBv6I=
Subject key identifier: 95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4DA67A85127E8DA86E474A9CE8BE5FABF5852345
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft
caRepository: rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 05 Apr 2024 00:16:50 +0000
Certificate not after: Fri 04 Apr 2025 00:21:50 +0000
Subordinate resources: AS: 270282
IP: 201.71.4.0/22
IP: 2804:69a4::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:a6:7a:85:12:7e:8d:a8:6e:47:4a:9c:e8:be:5f:ab:f5:85:23:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 5 00:16:50 2024 GMT
Not After : Apr 4 00:21:50 2025 GMT
Subject: CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5f:08:b0:87:9a:9f:1b:7b:e8:6c:2c:5d:40:
70:4b:86:23:16:62:92:67:4f:18:ce:12:4d:83:c0:
66:41:9c:42:c4:1f:6e:01:09:ba:05:11:66:9b:fc:
cb:15:4e:93:30:a0:73:b6:97:8b:b8:f5:93:17:a1:
97:7d:13:68:88:28:36:ec:fa:b5:1f:19:5d:f6:3e:
69:6f:af:9c:f4:17:c1:02:be:12:03:47:ea:e6:c3:
a0:50:59:57:bf:6e:c7:48:5b:5d:dc:a1:42:e1:67:
3b:cf:b5:90:73:02:a6:4b:8f:89:5a:03:bb:6c:85:
e4:08:47:da:05:bb:85:1b:3b:a9:40:0e:bf:1e:7c:
4c:18:03:fa:1d:35:27:e2:d1:e7:2f:88:37:35:01:
93:f4:c8:95:dd:6b:8b:4e:47:f5:a6:f0:bd:39:ca:
a6:57:16:80:53:ae:10:e7:21:82:20:65:85:08:e5:
8a:57:8a:a9:b5:27:58:ab:93:b9:4b:95:6a:fa:62:
51:cc:5a:59:f3:4e:45:1f:36:a7:1d:02:48:a7:3d:
dd:f1:53:ee:f6:f2:8c:71:83:a1:3b:92:d2:6f:c8:
4c:c6:d0:93:17:c5:c1:fa:a3:01:f4:bb:35:5a:f7:
a9:21:f8:f4:bd:f9:b7:06:8c:92:3b:be:7a:1c:26:
d4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.71.4.0/22
IPv6:
2804:69a4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270282
Signature Algorithm: sha256WithRSAEncryption
8b:8f:05:f6:87:54:d6:5a:d2:8a:6f:de:39:5b:09:d2:a7:00:
22:16:79:1c:68:56:95:08:1c:85:f0:a5:2d:18:b4:14:cb:61:
a4:92:c1:63:bb:e0:68:3d:bb:46:9c:85:79:f9:6a:47:4d:0c:
05:57:8f:5c:ce:6c:10:33:eb:5f:af:ec:02:6f:e6:20:d9:2c:
00:8f:16:ee:28:c9:05:26:b4:99:13:c2:32:ca:9c:34:69:1e:
a9:14:0e:dd:0d:50:4c:02:38:5d:72:ec:29:65:85:d5:0e:11:
65:22:40:7b:39:31:50:25:4d:62:29:6d:23:fa:cd:74:01:4b:
05:de:41:0d:ed:a9:fc:17:95:cf:a9:5a:27:e9:d8:30:85:db:
9e:17:e8:d2:e7:01:5b:71:87:84:4f:db:4b:34:ed:d1:bf:61:
3a:b3:84:36:e5:1e:69:4f:0a:ff:f6:55:ee:50:b2:c3:3e:31:
48:ed:5f:8f:70:e4:9d:44:87:03:c4:a5:d2:36:a0:fc:a8:e2:
59:6f:c4:8b:ed:66:1d:f7:0a:74:d2:38:5b:08:e4:49:3d:24:
de:02:30:1b:41:51:b0:4f:91:15:39:1f:13:aa:94:75:8b:96:
4c:38:5f:91:c0:10:db:1e:e5:d3:c8:91:43:96:36:b6:c9:84:
13:94:72:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:38:54 2025 by rpki-client