Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer
File: ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.cer (raw, json)
Hash identifier: vwsXYGVRVVcq7ALmFXiYYutMvTYB8/J1cZmMN9In2A8=
Subject key identifier: EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 1753DB77AE1F5B416F3F0334B79082443CCFF40F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.mft
caRepository: rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 14:22:11 +0000
Certificate not after: Thu 03 Apr 2025 14:27:11 +0000
Subordinate resources: AS: 269597
IP: 45.71.208.0/22
IP: 45.181.36.0/22
IP: 45.189.176.0/22
IP: 2804:6700::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:53:db:77:ae:1f:5b:41:6f:3f:03:34:b7:90:82:44:3c:cf:f4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 14:22:11 2024 GMT
Not After : Apr 3 14:27:11 2025 GMT
Subject: CN=ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f5:66:57:41:1a:00:cc:5b:9e:9d:94:70:46:
0c:72:41:ac:23:8d:4f:0c:2a:f2:95:db:13:b9:21:
d6:f3:9c:9b:1b:4b:87:89:53:bf:09:f3:15:59:00:
16:ce:85:a2:84:e3:81:09:e6:a2:7e:fa:70:c5:4b:
4f:a3:80:5c:9e:4e:50:59:65:50:9d:41:ee:e5:39:
ae:12:d2:92:77:5e:ab:c2:83:29:ad:10:76:cd:77:
a2:c0:de:2b:58:76:91:4c:25:7f:ef:96:1d:05:0f:
b7:7a:87:5f:9b:f7:2c:3c:af:f5:b3:12:fe:fd:a1:
cf:f0:57:b8:8d:47:79:e4:54:0b:1d:0c:02:18:19:
29:54:79:5a:a8:06:04:34:ad:78:c2:dd:77:06:bc:
b5:50:11:17:57:95:2f:52:05:61:79:bb:6a:61:c3:
ee:55:ef:81:20:e5:86:a3:2a:0c:da:7e:e7:b3:21:
47:81:5a:0f:63:76:a8:80:57:f6:83:60:3f:bc:58:
f7:48:ab:65:dd:c3:97:36:8d:ee:81:3f:2b:cc:5d:
fc:07:64:c7:9c:e5:4e:6a:b3:0f:5c:06:c9:89:1f:
68:b2:fe:64:33:66:d8:5d:5b:88:c5:a9:f6:e2:93:
24:d9:f4:78:af:44:6c:c4:7c:96:a5:3a:c5:54:fc:
91:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EC:D0:DB:C5:E6:36:A2:1B:4C:E0:F5:BA:5C:D7:18:92:C3:1B:B6:A8
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/1/ECD0DBC5E636A21B4CE0F5BA5CD71892C31BB6A8.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.208.0/22
45.181.36.0/22
45.189.176.0/22
IPv6:
2804:6700::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
269597
Signature Algorithm: sha256WithRSAEncryption
70:9e:c8:23:87:d9:49:ce:cc:ca:b8:52:1f:e5:48:79:8a:93:
ce:f6:05:8c:40:3c:53:70:16:86:84:0f:f6:c5:a8:b9:41:5d:
98:d3:44:7f:4b:60:5b:1e:c7:44:66:95:97:ac:d1:62:61:31:
31:56:63:8c:b6:f6:3b:31:5b:54:ae:16:92:d7:4f:d8:c4:06:
ff:5c:4a:e0:da:98:bf:7c:49:ca:6b:7c:ea:4b:d0:cf:4e:b3:
48:5f:5b:9e:28:22:34:81:9a:6f:cc:01:82:1c:30:5b:4d:dd:
d9:67:65:b4:4e:04:45:d0:ce:d3:ca:97:d1:38:b8:e4:5a:80:
79:16:6a:2e:46:5b:d8:21:10:5c:fd:e3:b8:44:49:02:dd:e1:
e9:30:14:72:68:34:da:dc:c3:01:4e:df:6a:03:cf:5d:06:df:
3a:32:16:fd:08:c5:53:a1:90:ed:e8:d7:13:41:36:8f:90:c6:
bb:a0:50:03:5d:5d:1f:f2:f2:eb:ab:a7:e4:39:fc:e1:81:88:
2a:07:f3:26:d2:ab:a6:9a:fb:c1:a9:b7:13:f2:92:18:d6:0c:
24:de:0b:11:35:9e:52:a0:c1:bd:2a:0b:2e:2c:4d:79:d1:bc:
b7:d6:08:a0:07:ae:23:77:06:43:06:fb:f3:e3:e5:47:b0:d6:
93:c0:b2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:30:10 2025 by rpki-client