Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.cer
File: DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.cer (raw, json)
Hash identifier: 7xJ9FCkHGLXjIjeEBisYOQceky8ennUolkEPia/Akcs=
Subject key identifier: DA:41:07:AF:1D:9F:F7:0E:9E:D7:B9:A2:E8:E3:58:08:BA:92:1C:85
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 39076B04818775FC4075F378D6EE1320D16D2E5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.mft
caRepository: rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 22:12:27 +0000
Certificate not after: Thu 03 Apr 2025 22:17:27 +0000
Subordinate resources: AS: 266073
IP: 45.4.148.0/22
IP: 2804:3a24::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:07:6b:04:81:87:75:fc:40:75:f3:78:d6:ee:13:20:d1:6d:2e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 22:12:27 2024 GMT
Not After : Apr 3 22:17:27 2025 GMT
Subject: CN=DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:de:f8:05:04:b8:f0:ab:fb:d9:e7:04:c5:18:
fa:dd:7a:ee:28:3b:ee:80:a9:84:46:c3:d7:fd:9d:
e8:08:1d:74:f1:12:64:6b:4b:54:bd:69:13:0f:93:
bd:66:af:c6:42:a6:42:dd:aa:ff:d2:3d:9a:53:56:
bc:ad:97:d2:34:75:f8:cf:43:35:51:02:07:18:3d:
5a:d0:84:4b:2c:66:e6:a4:dc:5a:69:ce:6a:8d:3f:
04:3c:57:1a:c1:ac:bd:4b:c0:60:67:67:b6:65:15:
4a:00:f1:f8:bc:6d:9e:9a:6a:36:b7:ce:87:79:17:
a7:79:45:04:86:4f:15:82:88:d3:c6:64:c7:b8:05:
83:f2:a9:67:f6:30:d1:ee:1c:bc:39:69:2b:38:0e:
78:d2:8d:f5:b6:c8:3b:65:75:04:38:fa:a2:2b:d2:
9b:2d:a9:b2:85:74:70:72:bd:35:65:a2:ce:de:38:
d8:95:bb:55:72:a2:67:f9:0e:6c:8c:47:0b:8b:86:
50:f6:49:d7:7c:36:15:dc:b2:95:d0:d9:6f:d6:ab:
2b:a2:37:37:bf:8d:c8:45:a0:01:3a:e0:7c:ee:c2:
00:21:a7:af:63:36:68:e4:f5:72:14:fc:73:24:32:
9b:8c:37:95:10:5c:87:11:94:60:89:4c:10:78:f4:
40:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DA:41:07:AF:1D:9F:F7:0E:9E:D7:B9:A2:E8:E3:58:08:BA:92:1C:85
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.148.0/22
IPv6:
2804:3a24::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266073
Signature Algorithm: sha256WithRSAEncryption
4d:bd:dd:b2:4a:b1:df:89:ac:ca:d8:77:bc:bb:4c:20:22:69:
8f:e0:52:89:df:93:cb:4a:af:bb:62:4a:87:94:47:71:75:62:
5f:a9:3e:a2:b8:25:88:d7:aa:cc:e0:aa:d6:5f:be:e3:fd:1c:
6d:90:b9:8a:7d:c9:f9:67:bc:8f:2b:d7:58:b9:1f:62:d5:ec:
b8:b6:27:ba:89:04:cc:fd:5e:88:bf:67:be:f6:c9:91:1e:75:
ea:38:94:02:dc:72:45:84:14:13:59:5f:94:a8:07:7e:35:6b:
2a:1d:a9:5a:c0:2f:c2:4c:a6:11:97:24:ac:37:3d:8b:f3:48:
fa:1c:1e:ae:7f:f4:b0:b5:4f:eb:53:2e:4b:17:16:ad:01:9b:
e4:ce:8d:d0:dc:f4:08:0e:31:84:cd:57:31:db:81:e2:d9:c6:
bf:2b:44:44:4d:03:e2:92:89:ad:43:5b:ef:f5:fc:e2:a6:62:
5c:20:f3:26:72:cc:40:66:9b:d7:13:0a:d7:a0:ad:7c:77:16:
70:8f:9d:ae:05:d8:5d:34:2b:37:61:bd:09:2c:31:f8:a8:02:
c7:97:cf:66:ac:73:e6:cd:57:98:94:15:f4:dc:6d:88:43:81:
0d:27:44:c4:f1:14:b0:75:36:16:83:86:b8:13:6b:fa:24:f2:
6a:f0:e5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:58:51 2025 by rpki-client