
Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer
File: CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer (raw, json)
Hash identifier: tNJgm6EbjI2Ay9sXQmTnBzoai2su/YQNCLZHySiyo40=
Subject key identifier: CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2A44C4DDE0FE83C4A0D9CF4B39A4AF3567CB8524
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft
caRepository: rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 11:33:35 +0000
Certificate not after: Thu 03 Apr 2025 11:38:35 +0000
Subordinate resources: AS: 266360
IP: 170.239.252.0/22
IP: 2804:36a0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:44:c4:dd:e0:fe:83:c4:a0:d9:cf:4b:39:a4:af:35:67:cb:85:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 11:33:35 2024 GMT
Not After : Apr 3 11:38:35 2025 GMT
Subject: CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:21:45:4a:39:e8:d0:c5:ef:83:7d:b0:d6:de:
d8:42:da:6f:f3:71:8a:a7:49:9f:9b:27:23:69:a7:
0a:a8:28:b3:b1:cf:f1:38:3d:3a:ff:61:95:c5:17:
f0:6a:53:03:de:0d:03:26:5e:e9:b5:b7:4f:db:d7:
b8:1c:4b:00:38:e1:4f:bb:17:16:6e:c8:3c:a2:f3:
4d:1f:76:cf:24:0f:4f:14:97:f6:13:c5:21:8c:19:
93:51:d3:89:59:df:80:13:e7:61:cf:b0:ed:a8:b3:
50:54:30:35:96:66:81:b8:3e:a9:47:67:d2:53:94:
63:b4:2f:6f:80:0a:0d:b3:1d:8c:51:42:ec:5c:c3:
70:0f:f2:35:a0:d6:9d:f0:d3:e6:75:54:94:f4:ae:
a3:f4:9d:3e:f4:8a:f5:da:91:6e:0a:74:23:12:55:
15:07:10:97:b3:4d:e6:4d:9f:52:0b:8e:34:b8:91:
b8:c7:49:d9:fe:e7:2e:a4:ac:60:ff:c8:18:f8:fa:
d5:80:a1:26:52:41:9c:1c:6d:ed:1a:ae:02:8b:bc:
ae:54:22:d7:76:72:01:57:ca:6e:5e:d8:4a:10:41:
9b:96:bc:be:5f:ad:6f:16:0c:06:41:ad:cf:57:4d:
28:8f:15:e8:30:5e:68:fc:c8:f3:56:66:48:9b:1e:
93:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.252.0/22
IPv6:
2804:36a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266360
Signature Algorithm: sha256WithRSAEncryption
cc:40:70:7d:2b:00:81:08:ff:d0:55:f2:2c:e1:5e:a0:d0:36:
7c:7e:a2:66:11:b9:ee:00:71:57:91:5b:e5:16:12:d0:02:e9:
1e:4f:2a:8b:92:9f:f7:76:55:05:61:e3:d1:6c:be:e3:19:de:
91:fe:a7:69:1c:31:af:31:26:bd:af:8c:a0:fa:c6:07:f7:bf:
d3:29:ab:bb:ad:81:71:03:be:d8:81:50:d1:fd:98:f9:f5:14:
66:6e:3b:4e:e6:2d:2a:16:ab:6e:d6:51:63:eb:4a:59:cd:a3:
6c:91:46:74:96:44:6d:61:ea:77:af:91:18:40:8d:2f:1f:fc:
0b:c4:e1:66:c4:3e:94:1e:52:d8:fe:d7:da:29:55:c8:62:ac:
df:f2:f8:30:b4:fd:5e:25:4c:46:ed:db:ec:88:9e:2c:27:45:
69:8d:f3:11:63:df:af:dd:81:37:53:34:f4:96:55:2d:ef:14:
3d:ac:d5:78:d5:7e:6c:de:fd:f2:46:f8:d0:62:c4:bd:a6:cc:
ed:8c:31:a6:ac:cc:15:37:99:4b:de:e2:b5:ba:37:77:20:2c:
a5:e0:62:04:62:ab:21:0b:bb:34:ca:68:c5:30:08:93:0f:c6:
f1:18:9f:17:e2:2b:c1:a4:43:d7:44:a9:cd:53:3d:68:a9:b7:
8c:d9:21:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:42:37 2025 by rpki-client