Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer
File: FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer (raw, json)
Hash identifier: Y3QB6b7O+cZvmvm3jEbcbdQDCCPIY1ElAriN0djVmUA=
Subject key identifier: FD:3C:84:64:3C:F0:CF:DE:C3:F3:2D:E5:AE:63:E8:8B:CF:A9:F7:C9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 2AB1C66F6980C6A19FBDB8F1CD090967E0168406
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft
caRepository: rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Thu 04 Apr 2024 13:45:26 +0000
Certificate not after: Thu 03 Apr 2025 13:50:26 +0000
Subordinate resources: AS: 270277
IP: 200.124.164.0/22
IP: 2804:698c::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:b1:c6:6f:69:80:c6:a1:9f:bd:b8:f1:cd:09:09:67:e0:16:84:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 4 13:45:26 2024 GMT
Not After : Apr 3 13:50:26 2025 GMT
Subject: CN=FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:11:70:02:cf:52:ae:4f:ca:90:24:e9:57:
1b:98:95:bf:fa:69:da:e9:06:6e:8d:45:b5:18:f7:
e5:ab:17:c4:d8:8c:92:a4:5a:7c:5f:e1:07:bb:79:
c3:57:51:b5:ac:e9:06:1b:03:1d:34:0f:bc:27:03:
6d:02:7a:76:a9:46:cb:cb:1e:fd:3a:8d:90:51:3e:
3d:70:cf:08:73:04:04:11:63:36:98:1e:81:89:a4:
f8:38:df:23:20:c3:c2:0e:78:6e:13:76:b7:74:24:
c7:37:ec:35:97:c8:8e:96:55:17:4f:ff:20:0d:5c:
7b:15:68:fc:75:17:2c:71:e7:77:21:0c:83:c3:84:
0b:4b:6a:8c:be:7c:62:a2:39:fc:b3:76:e5:b5:b7:
31:9d:a8:ce:30:df:48:0d:32:03:28:42:f6:75:2d:
54:59:c0:20:66:bd:6a:b8:a7:1f:30:9b:b4:47:6c:
b5:c6:ef:91:0b:f6:2b:18:67:98:a3:28:d0:7a:06:
06:72:2f:79:05:4e:65:59:f4:5f:28:95:7b:12:09:
56:7b:44:8c:c8:0f:5c:e3:25:42:b8:47:0c:28:e7:
5e:37:c7:4f:7f:42:46:51:11:83:f8:5a:ed:62:9d:
51:81:95:56:5c:0b:1e:83:33:8d:60:a4:1d:65:1e:
98:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FD:3C:84:64:3C:F0:CF:DE:C3:F3:2D:E5:AE:63:E8:8B:CF:A9:F7:C9
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.124.164.0/22
IPv6:
2804:698c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270277
Signature Algorithm: sha256WithRSAEncryption
d5:04:16:33:d0:0c:84:2c:4f:91:b6:13:c7:af:d5:9c:f2:bb:
c8:85:c2:02:90:95:35:5b:f3:61:f1:d6:c9:93:ff:eb:0a:bc:
0f:3c:37:ff:06:c1:be:2c:9a:83:45:fb:32:cf:f9:22:6f:7f:
69:b1:cd:0b:97:cb:c6:aa:d5:33:f8:9e:50:3d:d3:46:5b:8a:
3b:bf:63:9c:6b:e6:79:d9:ee:3a:c8:1d:58:cd:9c:96:56:dd:
f7:36:c2:c4:5b:7c:63:17:73:9f:d2:07:c4:16:ae:70:16:f0:
7c:18:4b:a9:06:b6:f2:96:bf:b0:fa:01:8c:70:ac:6f:55:43:
ea:19:86:e1:7d:22:f6:bd:76:17:23:dc:ed:25:ba:9d:49:07:
98:62:75:01:75:83:78:9a:47:61:6e:48:aa:e4:e5:93:62:3e:
07:fe:1b:60:c0:eb:29:eb:1f:b9:25:50:f5:d0:b6:c8:06:fe:
9a:e7:88:78:07:74:bb:2d:58:85:c7:52:1b:ee:2f:b7:c2:2c:
68:53:35:9a:25:3e:cd:37:51:ce:a1:43:a4:18:67:8f:24:e3:
d6:5c:67:44:8f:9e:a2:65:92:91:84:2a:37:ac:2d:c7:ad:e5:
e0:ed:c5:fb:62:78:55:a3:a8:94:7f:6a:83:6e:ad:16:a3:60:
1a:55:fa:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:47:45 2025 by rpki-client