Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.cer
File: D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.cer (raw, json)
Hash identifier: PYLTzBGbIXnIbjZqZFTHgwE9bAb81ws3ZcxHw9HferI=
Subject key identifier: D4:03:E4:39:9F:D7:16:8A:8D:C0:FD:3F:3E:F6:D5:61:5F:6B:FD:4D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 68B8A35C40972D9F568A3114EE52356F2E67976E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/A6tSeXMHFwgbhNFiMbHGkCYbdqxMkRuW79AzgTiQQ52r/1/D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.mft
caRepository: rsync://rpki-repo.registro.br/repo/A6tSeXMHFwgbhNFiMbHGkCYbdqxMkRuW79AzgTiQQ52r/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 17:53:55 +0000
Certificate not after: Thu 03 Apr 2025 17:58:55 +0000
Subordinate resources: AS: 264406
IP: 131.221.84.0/22
IP: 143.202.40.0/22
IP: 2804:1e08::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:b8:a3:5c:40:97:2d:9f:56:8a:31:14:ee:52:35:6f:2e:67:97:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 17:53:55 2024 GMT
Not After : Apr 3 17:58:55 2025 GMT
Subject: CN=D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:78:eb:a7:7b:da:e4:cb:13:92:33:5b:f9:91:
82:5b:b3:2f:c7:91:7d:68:1f:8d:83:6c:e0:0f:e1:
bf:15:b7:7b:e4:b8:85:0a:b5:22:a7:89:ca:80:69:
57:ba:e4:59:d7:f5:fc:b7:ff:ff:14:58:d7:20:cc:
b0:8d:36:15:01:7f:29:13:55:f6:09:d9:3d:02:2d:
93:c4:b3:e3:79:de:e1:81:27:57:5a:44:e9:b8:fb:
e1:9f:a7:de:7a:3c:01:ef:ac:0b:a1:be:65:55:c6:
49:77:50:c2:3c:5c:13:36:3d:6c:8a:a1:92:58:4d:
61:66:36:b2:95:6d:99:c7:fa:73:68:0a:4d:9a:ea:
e5:5f:07:63:06:38:49:b1:d2:93:e4:12:63:5d:24:
5d:01:49:fe:15:e9:d8:2c:a9:5a:d3:e6:7b:15:e9:
32:97:7d:4b:b3:08:9d:c3:d3:43:1a:73:86:dc:85:
f3:24:35:9c:d6:83:8e:f6:db:76:60:f3:cf:1c:58:
a4:6a:8f:08:70:b0:43:13:ff:89:19:c3:20:94:e7:
f3:a7:85:a2:a2:6c:b2:bc:c8:9d:25:0f:b8:08:6e:
02:d1:c6:b9:d2:76:76:e5:ae:f0:b4:aa:d7:de:25:
35:e3:d4:5b:74:83:0d:f7:60:1c:eb:2c:90:94:cb:
01:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D4:03:E4:39:9F:D7:16:8A:8D:C0:FD:3F:3E:F6:D5:61:5F:6B:FD:4D
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/A6tSeXMHFwgbhNFiMbHGkCYbdqxMkRuW79AzgTiQQ52r/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A6tSeXMHFwgbhNFiMbHGkCYbdqxMkRuW79AzgTiQQ52r/1/D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.84.0/22
143.202.40.0/22
IPv6:
2804:1e08::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264406
Signature Algorithm: sha256WithRSAEncryption
46:90:46:15:1a:db:e5:35:c7:91:3d:b5:35:f5:fb:be:e9:96:
29:77:97:4d:be:19:96:4f:43:92:fb:b4:cf:14:c6:1d:64:59:
5a:30:d5:17:5b:c4:5f:bb:e5:b8:d5:a0:ab:77:e3:9e:8b:d4:
11:b9:22:90:43:6a:25:0d:70:3c:af:4c:ee:ef:49:86:43:69:
39:7b:d1:4d:3a:b9:75:21:92:05:cf:4b:02:68:fd:8d:ee:a9:
35:2c:f6:79:4e:ed:ca:aa:97:d2:d6:f3:22:b5:35:fc:fa:94:
2e:ff:a1:fe:e8:90:4a:fe:cd:05:b8:62:0c:9d:a6:fe:e5:48:
2e:ac:8b:25:46:61:a5:a6:32:c4:41:f1:86:29:4c:07:d3:8b:
be:4c:ea:ba:f1:2c:6a:ac:f5:fe:71:db:55:0c:1d:c6:3a:e8:
c6:ce:69:00:b8:a2:a8:73:99:ce:7f:c8:68:3e:29:7f:43:49:
35:22:1d:26:b2:d8:a4:9e:ac:57:9b:37:ae:6b:31:b3:10:1c:
c6:72:f4:ca:d4:c0:45:a4:c3:26:79:f3:8a:44:b9:bf:2b:7b:
c7:5d:68:de:a4:d8:42:99:6f:12:a9:e5:37:c5:02:36:d9:e1:
46:ad:3c:c3:ef:5e:e7:b2:7c:ec:30:2a:57:74:f2:2c:56:b1:
3c:9f:dc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:47:35 2025 by rpki-client