Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
File: D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer (raw, json)
Hash identifier: OG+XqD2Hj27jIwQfHwXC1S0ytFEiJHSrwbsJja6Gl4I=
Subject key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 4C947C717F29A5432703351D4D28333C80117142
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
caRepository: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 07 Jan 2025 07:08:00 +0000
Certificate not after: Tue 06 Jan 2026 07:13:00 +0000
Subordinate resources: AS: 52573
IP: 45.6.228.0/22
IP: 45.65.168.0/22
IP: 131.0.12.0/22
IP: 138.118.68.0/22
IP: 143.255.148.0/22
IP: 168.90.20.0/22
IP: 170.247.68.0/22
IP: 170.254.8.0/22
IP: 177.86.72.0/22
IP: 177.86.168.0/21
IP: 177.92.176.0/21
IP: 177.125.108.0/22
IP: 179.42.96.0/22
IP: 191.242.32.0/22
IP: 2804:ce4::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:94:7c:71:7f:29:a5:43:27:03:35:1d:4d:28:33:3c:80:11:71:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Jan 7 07:08:00 2025 GMT
Not After : Jan 6 07:13:00 2026 GMT
Subject: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:ad:73:63:0f:57:91:cb:eb:ae:20:cf:38:
06:55:a3:df:6e:11:62:f1:d7:0e:82:84:79:43:54:
65:d5:fc:9c:2f:eb:a6:88:e7:af:19:44:98:7a:36:
5d:12:9a:23:89:0e:28:17:54:2e:6b:df:d3:56:bc:
2c:d7:9d:26:78:4e:c8:83:9a:47:c8:d1:c3:20:fe:
44:39:39:9b:ee:c9:a2:44:fb:85:77:56:64:4b:95:
23:7a:16:10:34:44:03:a2:4d:f7:7f:79:7c:bc:8e:
6f:b5:d5:d3:ce:c6:ea:db:d5:e4:90:10:99:a8:35:
84:69:27:21:08:bd:19:c1:d8:5a:57:8d:9d:58:c7:
89:e4:e0:25:74:e3:8c:eb:60:d9:d7:f6:ee:15:e2:
34:10:48:e2:65:58:a4:5d:c2:e3:c4:f8:ec:6a:51:
da:5c:f6:78:c1:0d:bc:26:0f:48:cc:b2:c7:e8:24:
f2:47:da:b0:e8:af:bb:b0:2e:34:e1:f7:9e:d1:87:
21:3d:4c:a9:75:c5:27:73:ed:3e:38:f7:3b:68:c3:
5b:a4:54:24:ec:60:6e:32:a2:bf:b7:64:5d:c1:72:
7c:cd:10:a9:a7:bb:52:ce:9b:25:17:06:0f:bc:ed:
84:b4:5c:9a:f5:2f:98:89:3b:71:da:fa:ce:a7:70:
01:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.228.0/22
45.65.168.0/22
131.0.12.0/22
138.118.68.0/22
143.255.148.0/22
168.90.20.0/22
170.247.68.0/22
170.254.8.0/22
177.86.72.0/22
177.86.168.0/21
177.92.176.0/21
177.125.108.0/22
179.42.96.0/22
191.242.32.0/22
IPv6:
2804:ce4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52573
Signature Algorithm: sha256WithRSAEncryption
9b:0b:ee:27:5e:22:01:e7:fa:60:2e:69:d4:a9:13:c6:25:12:
e8:2f:e3:26:2e:f0:eb:96:60:ed:ff:de:18:10:0d:a2:c2:d6:
6e:44:32:a3:d2:9b:3d:aa:cf:af:8e:77:b4:14:ae:0a:ac:70:
f3:01:b3:0b:cf:0b:05:49:94:a0:41:88:9e:d8:e0:54:92:da:
25:8f:b7:87:0a:79:46:ad:cf:5c:91:de:b8:f4:f8:c5:50:ae:
6c:5e:f0:cd:ee:4a:30:06:e8:29:65:a6:3b:7d:bc:51:ae:bc:
2f:ae:f1:0a:96:bd:d1:17:fd:01:5a:a2:0d:8c:20:cf:bd:d6:
9c:40:c2:5f:23:b2:4f:f3:f2:49:c3:dc:b7:4c:51:99:68:35:
81:9a:00:bc:8a:49:55:05:f6:16:22:09:4d:a2:92:7d:d6:fe:
44:e1:94:3d:ba:47:91:77:bc:ba:51:5b:ad:e4:1c:4f:35:df:
3c:e7:88:45:5a:d7:2f:49:1b:3f:73:31:da:46:b6:83:89:cf:
d3:d3:06:8f:75:7f:cd:c2:1b:e2:c1:e3:72:2b:94:e2:b8:46:
3f:c9:a7:dd:4d:0b:54:98:cb:60:bb:80:39:28:39:ae:ab:9e:
5e:9d:b7:2d:b3:a4:48:be:6a:8f:37:ab:89:83:8f:15:d1:a8:
e9:bb:f1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:12:26 2025 by rpki-client