
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.cer
File: A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.cer (raw, json)
Hash identifier: Gp8aKD2yhqDvoEMpg6TlFJA+UVpLRr14NNyzeIvzYw0=
Subject key identifier: A8:83:9D:63:C3:E1:12:D0:B8:3C:BB:01:0A:DD:E5:B4:C3:3B:0C:4C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4D9B377C286F3A73F30A79FAD7065C2A77C39809
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.mft
caRepository: rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 17:46:24 +0000
Certificate not after: Thu 03 Apr 2025 17:51:24 +0000
Subordinate resources: AS: 265890
IP: 131.196.4.0/22
IP: 2804:3f64::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:9b:37:7c:28:6f:3a:73:f3:0a:79:fa:d7:06:5c:2a:77:c3:98:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 17:46:24 2024 GMT
Not After : Apr 3 17:51:24 2025 GMT
Subject: CN=A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3d:5b:ee:cb:d5:8f:de:d4:fd:40:d8:0e:69:
8a:5b:15:6b:30:58:0e:18:52:2a:6f:bd:f4:c3:b7:
38:ec:9e:8e:ab:80:f5:42:f5:90:52:08:af:90:9b:
9b:56:76:38:ca:1d:f6:cd:09:96:bf:02:c5:3f:71:
c9:37:44:4c:04:20:42:ae:a1:8f:08:32:b1:21:5b:
8c:06:a5:db:ec:ee:bc:b8:62:db:29:40:86:55:b7:
23:3f:f0:e9:7d:6d:9c:8f:89:d3:76:68:05:af:95:
ff:b0:dd:ad:a6:c4:62:71:eb:a9:0f:8f:4d:4c:9d:
57:a9:0f:14:10:71:08:6a:59:bb:95:2a:d6:a1:ac:
d3:e4:af:d6:b0:05:ef:5d:9c:6e:a0:69:cd:8f:0a:
69:6b:7f:f4:6e:69:ce:6b:06:52:0b:83:06:2e:7b:
29:aa:8f:e0:46:99:80:88:83:ba:5b:70:d6:3a:69:
33:0e:4a:ee:f3:4d:fe:a2:56:98:75:4b:ac:c6:c8:
e3:8f:41:47:f0:55:a8:37:37:17:67:83:5b:b0:f9:
2f:1d:f2:f4:a5:9a:f1:93:c9:cd:85:2b:b7:9d:eb:
37:5a:35:86:9b:a4:a1:a7:3c:78:1d:9c:bb:cf:9e:
f9:69:03:1c:88:3d:d4:42:90:b2:b1:ad:54:5a:78:
91:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A8:83:9D:63:C3:E1:12:D0:B8:3C:BB:01:0A:DD:E5:B4:C3:3B:0C:4C
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.4.0/22
IPv6:
2804:3f64::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265890
Signature Algorithm: sha256WithRSAEncryption
48:ab:0a:66:9e:e5:8a:60:2d:5c:1e:ef:b6:a3:6b:22:6c:a9:
81:e3:e3:95:fc:18:bd:f9:b2:03:70:f9:bd:26:1e:3d:9c:8c:
21:0e:69:ca:6c:8a:22:a3:11:79:a0:28:a3:89:cc:53:d6:e4:
6b:b6:32:11:ec:80:8d:c0:33:89:e2:5e:4e:07:e8:52:28:87:
c7:52:bc:fd:1e:f3:e7:6f:99:28:e0:7f:f2:e4:78:83:1e:52:
f2:69:1a:ad:2c:7a:82:88:fa:69:78:4e:cf:95:53:f2:11:42:
03:ec:a5:a2:66:b2:f5:81:bd:36:35:af:57:40:d1:8a:14:82:
7e:f5:fa:f1:fc:86:1f:7a:40:c2:8c:73:a6:5f:20:3c:d2:f2:
0d:d4:cc:12:e9:17:70:84:b2:12:3e:f3:c2:1c:63:d7:2a:f4:
ce:e9:d7:c9:01:75:fe:99:0e:9b:7b:68:8a:1c:97:f1:e0:16:
4e:63:5e:c6:ed:eb:92:ba:8c:6a:65:55:43:af:70:2b:9a:98:
b8:5d:a5:48:dc:8d:d0:71:f4:58:40:23:3e:5a:b0:9b:7e:2a:
88:1a:b4:ae:67:f0:fe:e6:a6:36:2b:fa:91:8c:16:83:33:e0:
9d:0e:8a:90:9f:07:57:4b:84:f9:89:28:e4:f8:74:d1:a5:e8:
4a:25:bc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:02:46 2025 by rpki-client