Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer
File: AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer (raw, json)
Hash identifier: AoMmXbCM3neUdDaWGwcgkOIu95O1FCwzrirHCRLlRps=
Subject key identifier: AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1CEE25EDA19F4093D1DC2DA48DEEC0CF0DB9C730
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft
caRepository: rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 20:48:30 +0000
Certificate not after: Thu 03 Apr 2025 20:53:30 +0000
Subordinate resources: AS: 267589
IP: 45.70.148.0/22
IP: 2804:43c8::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:ee:25:ed:a1:9f:40:93:d1:dc:2d:a4:8d:ee:c0:cf:0d:b9:c7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 20:48:30 2024 GMT
Not After : Apr 3 20:53:30 2025 GMT
Subject: CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:33:4a:36:45:91:f6:63:63:3e:72:cd:a1:a9:
da:55:9e:92:19:86:7b:3e:75:fa:2f:55:87:ca:f3:
26:31:73:9a:06:82:0b:95:e0:fa:1d:ef:0b:ba:4d:
ee:c7:b2:8d:53:75:d4:26:1e:30:3c:1e:c0:08:6b:
23:74:07:91:39:b8:03:fd:2b:e1:d6:8b:78:e4:21:
e3:75:f5:13:11:0d:52:05:2f:59:f9:29:fe:a1:1f:
73:6c:fb:bb:fb:f9:02:fc:93:ce:18:35:88:4e:18:
8b:9c:36:aa:7f:f7:e2:2b:fe:bf:85:36:7c:1d:a5:
bc:15:fe:7a:32:de:26:74:ba:9e:82:fd:de:59:4c:
0b:31:64:51:38:b7:02:f7:51:36:14:82:cc:cf:5e:
73:3e:97:28:34:8b:67:4c:a0:bb:9d:a7:fa:59:05:
c6:6a:48:26:77:61:40:ad:08:5f:bd:00:f3:46:c3:
67:e7:3c:59:bb:15:69:27:71:a5:50:5c:37:6c:5e:
2b:1a:65:57:2e:d5:a6:e4:d4:7f:70:ce:04:8a:b8:
9d:f4:e7:75:99:86:9e:84:d3:a8:38:37:70:36:42:
f4:ef:bd:99:76:c6:a9:17:d4:c8:eb:6c:e3:df:a1:
f6:26:60:f3:4a:b2:56:8e:57:bd:4c:6d:f6:7b:ea:
97:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.148.0/22
IPv6:
2804:43c8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267589
Signature Algorithm: sha256WithRSAEncryption
13:a5:ad:ff:3f:9b:26:ea:df:fe:22:8b:c7:31:c4:b1:47:f0:
b5:ad:69:52:42:1b:3a:7e:91:8c:d0:64:bd:4e:8a:c8:ab:15:
95:25:3b:a9:4b:bf:cd:db:67:aa:15:b2:ef:b9:04:f5:f7:f1:
3e:0e:eb:7d:52:3a:c4:1e:5b:94:e1:3b:b6:a8:5e:22:b9:ad:
68:ad:fd:04:9b:17:3a:c1:f4:5d:ac:8f:d7:46:c8:06:c8:e1:
b8:06:ac:c0:47:64:a4:cc:e4:76:b2:03:1a:17:5b:7b:2c:c4:
61:6a:bf:6d:f6:45:49:65:a8:a2:0d:21:c7:bc:93:2e:d9:2c:
9b:1a:26:e2:75:4d:ce:ca:77:9c:bf:ef:a6:b3:ce:72:d4:cb:
74:ff:89:c0:ed:c1:ee:09:a3:68:a2:34:7b:d0:92:39:ba:ba:
3a:81:2a:b0:c6:3c:53:88:54:f0:ad:f0:fe:5a:89:8a:82:7d:
8f:aa:9b:b4:95:c4:39:56:5b:d5:b8:8e:fc:0e:91:70:71:c6:
ac:8d:2d:cb:8a:96:b3:3b:de:f2:2b:4b:29:8e:6c:f5:4b:2d:
7d:ac:78:d6:00:c6:65:4e:81:86:fd:b9:74:a3:4e:b5:66:09:
6d:71:09:1c:a3:12:24:53:e5:7e:52:31:12:c6:53:29:a9:17:
9b:8b:14:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:06:42 2025 by rpki-client