Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.cer
File: 9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.cer (raw, json)
Hash identifier: MNmjHQo8mhzNI/eMiQSvfyRo7rU9IVvA5H4VVbYclks=
Subject key identifier: 99:27:C1:4E:A3:5B:CE:9F:2B:73:6A:DD:CC:0D:E0:B1:A0:7C:9E:17
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 391F28425505AF7ADF551BD8CDAE287A85AAA5AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.mft
caRepository: rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 12:49:28 +0000
Certificate not after: Thu 03 Apr 2025 12:54:28 +0000
Subordinate resources: AS: 264150
IP: 138.99.12.0/22
IP: 170.247.104.0/22
IP: 2804:233c::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:1f:28:42:55:05:af:7a:df:55:1b:d8:cd:ae:28:7a:85:aa:a5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 12:49:28 2024 GMT
Not After : Apr 3 12:54:28 2025 GMT
Subject: CN=9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a3:ab:e5:5d:f0:25:1b:eb:7e:44:39:08:95:
ae:c5:98:73:a5:33:76:14:7d:c0:b8:cc:9e:12:17:
0f:40:73:fd:ed:82:da:1f:61:9b:d2:46:49:6a:fa:
a6:88:14:36:41:e2:0a:0c:d9:a8:3f:d9:12:bd:d6:
19:99:f5:04:9d:e0:20:e3:17:08:62:17:74:71:5b:
36:9d:65:5e:2c:70:11:04:66:aa:40:df:6d:0f:ca:
8b:a9:3a:ae:16:92:c7:37:9e:bd:06:28:c4:6e:b1:
3d:2d:d9:23:cf:e9:fc:61:01:d7:b6:bd:33:f7:53:
dd:e2:e8:e6:7d:1e:2b:d7:ca:f5:da:84:f4:92:3f:
96:2a:1c:a0:0a:ef:ef:b5:f4:c5:5a:e7:2d:ba:61:
aa:31:9e:47:d3:d0:6d:61:08:f5:a0:ce:c4:2d:fa:
e9:42:dc:90:25:7e:8c:c6:19:c6:8d:a1:64:77:82:
80:3b:f2:51:70:f1:b4:d3:d0:a5:0b:93:67:5b:90:
94:15:ca:8b:29:6a:ad:bd:30:77:73:bc:a8:74:ec:
27:63:98:d6:8a:5c:f0:f5:79:7a:43:ae:48:a2:6d:
75:8a:ee:64:23:69:70:78:3d:83:a6:d7:85:30:b9:
86:3a:af:7a:5d:13:d5:5e:f0:b2:b3:c4:52:51:06:
12:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
99:27:C1:4E:A3:5B:CE:9F:2B:73:6A:DD:CC:0D:E0:B1:A0:7C:9E:17
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.12.0/22
170.247.104.0/22
IPv6:
2804:233c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264150
Signature Algorithm: sha256WithRSAEncryption
19:ff:01:ce:8b:0e:c7:af:6f:e9:46:a6:63:91:42:a5:64:e4:
56:bb:d4:08:be:bf:11:fc:87:db:b5:62:5b:5d:dc:df:22:55:
b2:47:27:b3:a5:76:2c:be:f0:17:c6:34:9b:e8:0c:17:57:29:
8d:76:95:f3:82:e1:26:3f:d1:99:92:6b:49:99:b2:a1:f1:b7:
92:90:22:28:9f:2b:b1:69:8b:41:f1:05:ea:a1:8d:64:ff:fb:
f1:61:e5:f2:e1:9f:ba:66:3a:5f:be:36:08:d0:f1:9a:d4:3e:
11:12:5a:3a:35:0a:6f:13:d2:10:4e:7c:2d:c4:ba:49:4b:81:
ef:79:68:51:ba:d2:de:21:56:15:86:44:35:47:55:d6:7e:1a:
37:67:c0:21:69:ac:a1:ed:cc:6c:56:f2:47:82:74:cc:93:8a:
91:4e:ee:f4:03:c3:56:f2:9c:9a:27:17:9b:a6:5e:90:2e:aa:
c1:20:ef:f7:9c:b6:84:30:71:9e:79:85:cb:68:7a:34:b3:2a:
33:5b:04:70:02:de:c4:8a:b6:49:48:3b:62:64:31:d7:3a:11:
cb:f4:c6:fb:96:1d:86:80:15:45:52:f6:61:ec:bd:75:d4:22:
84:55:3c:89:03:34:c8:0a:6a:dc:31:d0:1e:85:7f:a2:08:36:
6b:58:40:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:37:05 2025 by rpki-client