This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/117FE11C850C7E24891E2E0472FE91D658CB0C2A.cer
File:                     117FE11C850C7E24891E2E0472FE91D658CB0C2A.cer (raw, json)
Hash identifier:          Tgp56Jk6kc9QfPfrLX0+phIPZViWtnFc9MkSQyewfRI=
Subject key identifier:   11:7F:E1:1C:85:0C:7E:24:89:1E:2E:04:72:FE:91:D6:58:CB:0C:2A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       67F5158DB3124C7ADEA2879EC0BF9A218E460B5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/117FE11C850C7E24891E2E0472FE91D658CB0C2A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 May 2023 14:28:18 +0000
Certificate not after:    Wed 29 May 2024 14:33:18 +0000
Subordinate resources:    AS: 269007
                          IP: 45.176.152.0/22
                          IP: 2804:5e08::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f5:15:8d:b3:12:4c:7a:de:a2:87:9e:c0:bf:9a:21:8e:46:0b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 31 14:28:18 2023 GMT
            Not After : May 29 14:33:18 2024 GMT
        Subject: CN=117FE11C850C7E24891E2E0472FE91D658CB0C2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5b:6d:2a:5e:aa:36:12:b4:3f:08:a2:a8:df:
                    61:ca:2f:8c:36:d2:9a:81:7a:f6:83:80:4b:f9:c4:
                    3b:d4:8d:c5:63:13:e0:04:58:2a:85:dd:c1:d8:1a:
                    42:df:60:cc:26:53:36:39:ed:40:94:e2:06:79:c0:
                    0f:5b:58:92:83:8b:a8:b5:da:7f:f6:bf:ce:98:7b:
                    47:32:41:de:49:6d:74:12:61:7c:61:f7:b8:e7:c7:
                    b3:dd:b2:cf:fb:1a:3e:37:2b:aa:0e:f5:c9:12:7a:
                    d9:c9:06:ae:39:e8:71:99:07:59:e2:6a:e1:f9:34:
                    dc:e4:89:d6:68:c7:c2:81:b3:2c:a5:0c:87:dc:14:
                    94:42:bb:be:b2:94:6d:45:33:86:10:3b:d4:05:5e:
                    04:8a:f2:cf:26:9e:bc:f6:95:8b:00:b9:b9:7d:fe:
                    39:7e:eb:fe:3c:ea:dc:10:67:e4:bd:3a:ce:ef:13:
                    67:25:f5:7e:69:8f:b4:79:be:1a:70:a5:67:87:e9:
                    cf:90:3e:23:74:72:b4:eb:cc:92:6e:6e:bf:55:92:
                    78:64:a3:7e:f7:f5:07:71:83:60:c8:68:78:b6:0e:
                    68:14:6c:df:3d:38:4d:07:a9:73:3b:b0:66:1c:3e:
                    ff:58:45:dc:86:74:b5:0e:21:08:c1:b7:8b:b5:5f:
                    70:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:7F:E1:1C:85:0C:7E:24:89:1E:2E:04:72:FE:91:D6:58:CB:0C:2A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/117FE11C850C7E24891E2E0472FE91D658CB0C2A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.152.0/22
                IPv6:
                  2804:5e08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269007

    Signature Algorithm: sha256WithRSAEncryption
         a3:88:66:a1:d0:53:7b:c2:69:f7:87:1d:fa:5f:f5:1d:c8:e8:
         e0:09:0e:63:88:fd:b4:ee:69:79:c5:2e:3b:a2:23:c6:2f:54:
         fc:ef:2c:42:95:20:58:e0:e2:1f:0c:e3:5d:db:40:ff:d5:af:
         23:72:63:7a:20:04:01:ef:f7:27:04:4f:a3:76:f2:a5:2b:00:
         64:76:00:bb:68:2b:66:7f:3f:9e:5c:e5:1f:8f:49:73:cd:db:
         c3:dc:b8:41:27:44:9c:9c:83:68:b0:96:5a:fa:a7:34:9e:c3:
         2b:22:fb:a4:ff:c1:f7:37:4a:71:e1:2a:81:fe:72:4c:81:e1:
         c7:05:9c:31:ff:ad:ec:7f:f8:73:db:04:07:2d:43:07:f8:f6:
         3e:be:b0:3b:9f:69:14:bb:22:91:e7:b3:70:b5:f3:e8:81:d3:
         17:49:97:25:32:08:93:7d:0e:50:43:be:d5:12:6d:00:75:22:
         a3:90:e7:1e:ff:f1:d0:6c:38:26:76:7a:25:14:54:38:d8:a9:
         f9:3a:a0:45:5b:06:3b:0c:b8:6a:3e:94:df:af:a3:2e:ba:77:
         86:d2:0c:42:6d:2c:eb:82:08:1f:92:ea:c3:d0:b5:a2:e3:79:
         6b:b1:6e:9e:42:c9:07:6b:73:2c:9c:d2:24:e8:95:db:dc:0f:
         aa:84:21:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----