Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2DC4E7742BEC43606E6290264F426EB1E94AB03B.cer
File: 2DC4E7742BEC43606E6290264F426EB1E94AB03B.cer (raw, json)
Hash identifier: x6+ZDF9YjnqOOl0AKFyDvGdKMb+vN4OyyaANRBh9KQA=
Subject key identifier: 2D:C4:E7:74:2B:EC:43:60:6E:62:90:26:4F:42:6E:B1:E9:4A:B0:3B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer: /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial: 614FBDA5CE9F592147F0C21CF21F94854F62A180
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest: rsync://rpki-repo.registro.br/repo/2hix8FdCsfzzH3Rgc7aoN4eFLWTFBEqpnqc8PNquGWj4/0/2DC4E7742BEC43606E6290264F426EB1E94AB03B.mft
caRepository: rsync://rpki-repo.registro.br/repo/2hix8FdCsfzzH3Rgc7aoN4eFLWTFBEqpnqc8PNquGWj4/0/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Tue 14 Nov 2023 10:50:52 +0000
Certificate not after: Tue 12 Nov 2024 10:55:52 +0000
Subordinate resources: AS: 262833
IP: 177.8.64.0/22
IP: 177.8.71.0 -- 177.8.79.255
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:4f:bd:a5:ce:9f:59:21:47:f0:c2:1c:f2:1f:94:85:4f:62:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Validity
Not Before: Nov 14 10:50:52 2023 GMT
Not After : Nov 12 10:55:52 2024 GMT
Subject: CN=2DC4E7742BEC43606E6290264F426EB1E94AB03B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:8b:6d:a7:22:d0:98:de:60:b9:9d:5e:62:
cd:51:e3:be:28:57:86:04:83:39:52:e3:4a:5b:1e:
97:17:62:ca:96:48:5c:54:cb:fd:24:d6:da:a5:ac:
19:4c:8a:52:2d:f9:63:40:e2:ed:a6:96:24:08:4a:
94:9a:e0:29:f7:6a:0e:1f:8f:8f:1a:e9:13:2d:be:
f3:be:73:eb:aa:1c:fc:5a:44:34:b1:06:74:fd:ad:
dd:d9:80:30:52:02:80:7f:66:79:58:8e:d5:cc:de:
07:20:02:c2:dd:2f:73:5a:76:11:8d:9b:42:85:52:
e3:c3:b0:4c:37:67:d5:91:1b:21:3d:4b:23:15:2c:
79:46:bb:62:0d:2c:66:3c:88:54:9f:8f:47:92:01:
3f:8a:be:fb:e3:c8:a9:99:d8:bc:e0:21:09:1d:9e:
f4:98:72:59:a5:40:db:b9:f4:18:9c:09:88:50:e0:
28:89:58:d7:3e:d5:d8:d7:8e:71:af:f7:15:5e:45:
c7:58:cb:8d:2e:e1:7c:61:0b:79:c2:89:08:3c:37:
f9:54:b1:4a:30:5f:0f:e7:78:13:70:20:1b:4e:95:
88:f7:0a:fa:0c:da:9c:de:6e:8b:6d:86:06:91:f2:
11:f1:59:4e:bf:9b:ca:eb:9e:88:f8:df:7c:da:f0:
29:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2D:C4:E7:74:2B:EC:43:60:6E:62:90:26:4F:42:6E:B1:E9:4A:B0:3B
X509v3 Authority Key Identifier:
keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/2hix8FdCsfzzH3Rgc7aoN4eFLWTFBEqpnqc8PNquGWj4/0/
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2hix8FdCsfzzH3Rgc7aoN4eFLWTFBEqpnqc8PNquGWj4/0/2DC4E7742BEC43606E6290264F426EB1E94AB03B.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.8.64.0/22
177.8.71.0-177.8.79.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262833
Signature Algorithm: sha256WithRSAEncryption
3a:60:f9:b6:4d:32:3f:df:30:77:4c:45:21:12:88:41:12:ca:
b5:25:fd:9c:b1:17:8f:57:27:a0:92:b9:70:f6:a3:53:62:09:
37:6e:03:68:e8:cb:c8:84:e2:4a:b0:35:26:32:26:f0:3c:eb:
0b:91:a3:10:50:3b:59:2d:b7:ec:a3:36:c6:23:1f:ca:d6:63:
cf:11:9f:fa:0f:f2:a6:95:46:55:cc:51:98:00:c0:bf:93:d4:
94:2d:84:56:aa:f2:e7:7d:af:09:ab:21:64:ca:e6:16:10:5e:
41:dd:8c:60:e3:4a:d3:45:c1:fc:ab:e4:c3:0f:fa:4c:f5:0b:
fd:32:b6:7d:b9:cf:77:d1:0c:5f:30:b0:cd:50:4a:2e:1b:c0:
73:49:13:86:3d:8c:27:0a:e7:a2:dd:55:c2:0f:be:55:97:a7:
01:5f:4a:10:8e:29:e8:da:b5:34:c4:64:63:7d:96:d2:ca:96:
ee:5f:a6:34:92:ec:c0:b8:52:24:2e:19:f9:39:55:ab:22:56:
7f:5f:29:bf:03:a5:08:2c:8e:21:e8:e9:a4:f0:94:45:ed:4d:
96:c7:09:69:02:c5:7b:d6:c8:b9:b6:d8:4b:54:89:3e:08:86:
fd:89:e5:e8:ff:0d:d6:8c:a5:44:79:88:d8:f8:1e:e8:aa:63:
8a:11:4c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:36:02 2023 by rpki-client on console.sobornost.net