Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.cer
File: BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.cer (raw, json)
Hash identifier: eliYtZAbFV2xJu4/I35eQv/pKcONpX+tzoXcRgitMLs=
Subject key identifier: BF:D5:65:12:C8:58:0D:0E:6D:2F:D0:5F:5D:13:C3:71:4B:45:AA:EA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 0DA0BFABB9BBEBFABC06A04C6A712CDDEC2CF679
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.mft
caRepository: rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:33:35 +0000
Certificate not after: Wed 02 Apr 2025 18:38:35 +0000
Subordinate resources: AS: 267470
IP: 192.141.72.0/22
IP: 2804:41fc::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:a0:bf:ab:b9:bb:eb:fa:bc:06:a0:4c:6a:71:2c:dd:ec:2c:f6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:33:35 2024 GMT
Not After : Apr 2 18:38:35 2025 GMT
Subject: CN=BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:b4:78:b9:d6:3a:9d:9f:cf:94:2f:fc:a7:
3c:9d:9a:bb:1a:b1:3a:51:4d:e2:c9:df:3c:f8:c4:
3c:90:e6:92:4f:78:41:a6:76:e9:4a:46:3b:ab:2a:
b2:9e:60:d6:52:d1:76:8c:c1:03:89:15:01:00:da:
fd:92:0e:96:3f:75:29:fc:ae:bc:3c:b4:28:30:2d:
9f:21:e0:96:a3:76:df:5b:9a:d4:6c:3c:c0:af:6d:
f1:15:99:a3:96:b9:05:80:cb:02:7a:84:f3:3b:b9:
f0:ca:67:af:5a:19:53:9b:6e:76:ea:66:f9:7d:89:
ae:81:5d:83:5a:d1:9f:81:7a:16:7f:21:52:51:55:
d0:2c:3f:0f:d8:a8:85:57:a1:01:33:66:58:27:f6:
8e:28:8c:83:97:ee:e9:17:0c:fa:e9:c6:33:3f:9e:
4f:49:94:00:e2:dd:36:a8:50:55:b0:ba:65:86:23:
a5:d5:16:65:ea:0c:30:47:c4:56:6d:f7:77:35:83:
2b:c8:e7:e6:8b:83:73:99:e9:df:4a:7a:3f:d7:35:
50:b5:ca:06:79:73:33:b9:18:af:72:4d:1b:5f:c1:
f3:d0:19:c9:3c:89:fb:b5:ee:37:5f:0b:a2:e7:1a:
69:74:e1:4f:2b:02:45:d0:e5:f5:44:91:64:67:ac:
24:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BF:D5:65:12:C8:58:0D:0E:6D:2F:D0:5F:5D:13:C3:71:4B:45:AA:EA
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.72.0/22
IPv6:
2804:41fc::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267470
Signature Algorithm: sha256WithRSAEncryption
d5:c1:83:37:0b:17:0c:2e:9f:60:d7:18:42:3b:fc:13:b4:ed:
0d:ed:be:77:39:bd:b7:ce:b9:e2:ba:62:71:58:99:50:e4:b2:
6b:c6:fb:4f:08:8b:cb:20:a0:36:6d:d1:ab:39:89:99:50:66:
c7:a3:f6:eb:fd:3c:22:34:5f:f3:7c:a9:8f:a0:ae:12:19:e4:
ce:6d:81:8a:da:e2:6f:3c:df:10:57:4c:d5:7b:0e:e1:d0:1b:
76:15:6f:e3:3d:02:99:55:e1:ab:ee:2f:28:a4:c3:46:9e:e5:
d6:5b:d6:a2:8b:cf:e9:4f:d3:3f:36:a9:54:2a:41:2d:8a:83:
e6:88:82:80:73:72:6d:4c:d5:5f:da:e2:9a:63:d6:d2:ae:f3:
be:0c:eb:76:41:cb:9a:3b:fa:fd:25:d2:d6:20:ca:ab:28:bc:
1f:70:3e:de:5d:99:ad:05:a3:1d:72:94:68:f9:9d:9f:3f:1c:
cd:c6:dd:02:eb:85:b8:c4:e2:a2:37:67:38:cf:b7:b2:a8:70:
f7:e1:8b:ff:d3:3b:4b:e2:1b:04:04:bb:b2:40:8c:8c:dd:cc:
6b:08:a9:84:10:14:48:b0:3b:d7:2b:62:5d:7b:d3:5f:0e:3a:
9b:4b:06:6e:f4:6d:50:97:19:ca:61:ab:dd:1a:3c:3d:f4:39:
a1:3e:e3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:37:35 2025 by rpki-client