Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
File: FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer (raw, json)
Hash identifier: qeF6hxPbswmzY49SdyBjlppVw/V9f8Pp6x2sU9xutS8=
Subject key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 3FD389C8C8581F65B91993C7A545073F645D7874
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
caRepository: rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Wed 03 Apr 2024 18:25:22 +0000
Certificate not after: Wed 02 Apr 2025 18:30:22 +0000
Subordinate resources: AS: 268144
AS: 268568
IP: 45.163.144.0/22
IP: 45.168.200.0/22
IP: 2804:532c::/32
IP: 2804:58b0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:d3:89:c8:c8:58:1f:65:b9:19:93:c7:a5:45:07:3f:64:5d:78:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Apr 3 18:25:22 2024 GMT
Not After : Apr 2 18:30:22 2025 GMT
Subject: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:01:c8:cb:d4:fe:ba:e9:17:b0:91:09:16:3e:
ef:d4:44:c0:8d:6d:9a:ca:75:eb:4d:b6:5a:07:67:
b8:66:ef:78:d9:d7:38:a0:95:6a:29:cf:9b:cc:54:
94:4c:77:e9:54:37:71:57:42:69:47:13:56:43:d1:
fe:b1:f8:d6:66:bc:51:32:cf:d0:d9:3c:a9:0d:cf:
b6:47:50:07:2f:36:f6:d7:eb:62:80:f2:2a:e6:38:
37:49:3d:b2:a3:e5:27:62:5e:1c:07:47:57:5a:3e:
dc:e1:78:c3:0f:1f:9b:8f:13:76:a5:13:61:78:fb:
84:df:52:18:93:3b:97:b1:45:1e:f1:24:61:ea:fb:
85:b6:50:d7:1a:de:0c:03:30:c8:05:2c:62:79:d4:
f5:1c:13:c9:e3:62:42:04:c2:3d:c1:ed:7e:28:cb:
f9:96:6d:d7:79:ad:21:f1:da:4d:2a:8c:b5:88:60:
2a:de:73:84:f5:84:d9:2c:df:3f:e1:48:fe:f0:cd:
79:b8:ec:2f:7f:7e:c6:69:9f:bf:81:12:a5:95:28:
18:c5:7f:90:d2:f4:40:88:87:cc:a9:89:05:c6:1b:
13:c0:a5:b7:31:1a:22:eb:23:64:81:18:49:19:6d:
8f:52:e7:d8:e7:9b:b6:03:71:e9:13:23:27:5a:de:
18:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.163.144.0/22
45.168.200.0/22
IPv6:
2804:532c::/32
2804:58b0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
268144
268568
Signature Algorithm: sha256WithRSAEncryption
53:6f:32:ef:8e:35:f9:cd:24:6a:47:72:c1:da:5c:99:c4:91:
e3:61:9f:20:78:fc:8a:8e:3b:46:0e:be:8e:a2:2a:df:96:87:
6b:e6:34:39:71:2a:81:ee:dd:55:fa:3e:47:9e:2a:bc:ae:d8:
98:dd:54:83:13:bc:a2:c7:62:83:fa:1b:10:4f:4a:44:db:12:
62:0d:5a:71:2f:6b:3c:57:7d:0a:e6:0f:00:6f:52:fa:1c:28:
d8:e3:73:0e:15:f1:3c:e1:a4:86:4b:f3:f2:43:ed:0a:e4:5d:
b0:d4:93:27:c9:c3:c1:d3:62:7c:e7:25:9a:a6:bb:d9:39:77:
14:da:3b:c9:20:76:4b:f8:20:6e:c5:b4:a4:c5:5a:f0:ff:99:
f5:70:c6:69:c9:30:46:bc:d0:5d:ca:fc:33:a1:f2:a1:33:07:
a7:90:5e:ce:3a:5a:ee:63:73:28:02:6a:e7:0c:92:fb:86:06:
d0:58:69:19:37:53:c0:1c:56:2c:17:a8:80:be:03:a4:34:b8:
29:d9:ca:23:70:d9:77:79:c5:74:c8:59:df:7a:ef:1c:1f:30:
fc:b0:5e:e5:3d:86:a8:49:9a:e2:d1:24:bd:1e:04:f7:f6:a5:
5b:53:bc:d5:bc:af:c9:59:56:34:0b:e8:07:e8:19:b2:bf:28:
ff:c0:73:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:15:44 2025 by rpki-client