Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.cer
File: 99D9815999A6E537F44A7D30D9A17CE7453F2F16.cer (raw, json)
Hash identifier: Fzp4fjjwvmQtfhEi8VdTUC+HxqjVAxcey2mj8MoiQWo=
Subject key identifier: 99:D9:81:59:99:A6:E5:37:F4:4A:7D:30:D9:A1:7C:E7:45:3F:2F:16
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 64A70131AD345E5320A43C5C257066309269001A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.mft
caRepository: rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 23:31:40 +0000
Certificate not after: Wed 02 Apr 2025 23:36:40 +0000
Subordinate resources: AS: 269120
IP: 45.179.4.0/22
IP: 2804:5fbc::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:a7:01:31:ad:34:5e:53:20:a4:3c:5c:25:70:66:30:92:69:00:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 23:31:40 2024 GMT
Not After : Apr 2 23:36:40 2025 GMT
Subject: CN=99D9815999A6E537F44A7D30D9A17CE7453F2F16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e0:e4:8e:fa:3a:2b:53:e7:3d:1c:41:66:c5:
00:1f:b6:a2:82:c1:04:6c:2d:6f:35:b8:e7:ad:5e:
5b:2f:f3:5e:d1:ee:8a:a7:e2:9c:b3:1c:38:0b:e7:
e7:52:e0:e4:72:ee:33:4a:cd:45:46:b0:29:b5:79:
4e:6d:14:e0:7e:d7:77:8f:e1:03:3a:66:f8:2c:ab:
7f:14:77:9a:f1:69:a0:7d:28:87:36:7a:9b:fc:d7:
55:15:ac:5b:e0:e3:f8:52:ce:ed:ee:f8:5d:0d:f0:
6b:58:2b:b9:90:9c:ba:db:dd:27:32:90:31:c6:e1:
92:6b:35:20:b1:a0:68:15:eb:01:3b:ad:fb:e5:55:
ea:40:80:4d:e6:89:2b:e7:00:86:29:3e:99:70:e6:
f2:a1:68:4b:55:28:d1:b3:a8:4a:dc:e5:01:aa:bc:
e5:75:9e:5e:15:6d:76:a0:72:29:e4:44:9c:6b:34:
c2:89:93:9d:82:d2:51:eb:51:c0:a6:b0:96:be:8e:
fe:e5:0b:0a:34:b0:6d:44:ce:74:c6:4e:0f:9d:f2:
2e:ce:61:1a:36:f2:6b:5f:27:f4:c6:85:1e:d5:fc:
a0:36:03:10:37:8e:d9:a6:e9:44:1d:cb:5e:d9:e5:
47:09:9e:33:6d:bf:c9:ac:f6:e5:cb:2f:43:16:ea:
05:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
99:D9:81:59:99:A6:E5:37:F4:4A:7D:30:D9:A1:7C:E7:45:3F:2F:16
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.179.4.0/22
IPv6:
2804:5fbc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
269120
Signature Algorithm: sha256WithRSAEncryption
49:69:34:97:c0:75:1c:3a:33:39:fa:f0:2e:8c:6f:6d:03:f6:
d6:86:a6:9c:64:54:98:b5:24:f7:62:2b:71:4a:50:28:44:dc:
27:2f:52:42:5e:f3:51:ab:e4:cd:2d:a6:2a:0b:b8:17:76:15:
8d:e4:da:7c:ab:2d:92:1e:75:7b:04:dc:bf:7e:e0:3e:6f:00:
95:36:94:13:94:e0:74:31:f5:a5:d8:ab:11:90:6d:e0:d0:62:
34:91:95:58:c7:37:fd:6b:95:09:1b:31:48:d3:2b:7d:8b:6a:
c2:c7:a6:36:88:4b:28:5f:71:22:d8:95:f6:91:57:88:c1:69:
3e:df:5e:f4:6d:70:7b:5b:8a:40:50:7e:7a:e6:f0:19:6a:f0:
a4:61:a5:cf:21:6c:05:90:a9:d1:8d:87:97:33:20:49:95:b2:
aa:76:71:e3:b1:fa:77:2e:2a:b4:72:cc:b9:eb:da:04:73:6e:
30:f5:5b:30:35:8e:3e:cb:b4:25:4b:7c:fa:6b:71:db:49:c0:
6f:c8:f5:75:20:0a:ba:03:38:e7:82:ad:dd:1a:f9:fe:2a:98:
53:87:80:38:17:4e:20:fd:90:a4:f8:19:2f:94:83:7c:d1:30:
c5:12:fd:d6:cb:4a:c9:35:c1:45:72:90:2a:f2:6a:7b:d0:e9:
67:45:d3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:00:32 2025 by rpki-client