This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BF4DD44E9347663B901DD354E386EDBA5217DCA8.cer
File:                     BF4DD44E9347663B901DD354E386EDBA5217DCA8.cer (raw, json)
Hash identifier:          cV+z76Msg4lPn9QYQ4k0kK1cukQ4lpo5kqm85w60TLA=
Subject key identifier:   BF:4D:D4:4E:93:47:66:3B:90:1D:D3:54:E3:86:ED:BA:52:17:DC:A8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0E974586C4C144185084E0674B23418A94E763A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/BF4DD44E9347663B901DD354E386EDBA5217DCA8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Jan 2024 20:35:02 +0000
Certificate not after:    Tue 21 Jan 2025 20:40:02 +0000
Subordinate resources:    AS: 262760
                          IP: 179.106.32.0/20
                          IP: 186.225.16.0/20
                          IP: 2804:414::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:97:45:86:c4:c1:44:18:50:84:e0:67:4b:23:41:8a:94:e7:63:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 23 20:35:02 2024 GMT
            Not After : Jan 21 20:40:02 2025 GMT
        Subject: CN=BF4DD44E9347663B901DD354E386EDBA5217DCA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:28:45:a0:6e:0e:a1:e8:74:e1:69:ba:c3:9d:
                    fa:d6:8b:ed:1d:00:72:09:86:6e:4e:f8:e0:e6:19:
                    7a:91:11:ba:44:8b:ae:b4:b1:a3:a3:39:b2:07:74:
                    29:aa:b0:dc:0e:d4:97:c5:75:a7:19:d7:9c:29:1d:
                    ec:56:2e:5a:60:70:ee:3c:d6:93:19:8e:ee:56:d4:
                    9f:0c:81:77:31:63:28:ed:ba:68:68:a6:08:60:fd:
                    fe:a1:b6:48:66:28:3e:f8:a8:76:fa:32:a1:a6:95:
                    2e:6f:bc:72:8c:6e:01:87:5a:4d:a4:6d:1f:90:c3:
                    9b:f5:28:d0:03:cf:33:aa:8a:25:b2:2f:c8:18:b4:
                    f4:ad:c8:c4:8c:e0:a7:09:4a:2f:34:50:b5:36:59:
                    35:3e:c2:63:e3:04:c4:1f:d5:39:4c:ca:65:0b:65:
                    db:1f:87:43:60:9d:a6:49:a2:de:2f:2f:fd:3a:ad:
                    1f:1d:5f:68:b6:0e:2f:83:15:f0:71:0e:f1:60:52:
                    f4:42:7c:c1:1d:f6:50:f8:53:9f:db:02:53:98:2b:
                    fe:97:b2:45:ff:a9:75:7c:13:1f:f0:50:79:d4:ec:
                    70:c6:00:3a:b9:e2:10:b1:ea:09:de:a5:aa:70:5e:
                    51:0c:f9:ce:c3:79:f7:48:71:a6:52:d6:27:74:9b:
                    be:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:4D:D4:4E:93:47:66:3B:90:1D:D3:54:E3:86:ED:BA:52:17:DC:A8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/BF4DD44E9347663B901DD354E386EDBA5217DCA8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.32.0/20
                  186.225.16.0/20
                IPv6:
                  2804:414::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262760

    Signature Algorithm: sha256WithRSAEncryption
         5e:e4:02:e4:8c:88:e7:87:a4:bf:5e:2d:c0:cc:5b:1e:b4:43:
         04:be:c6:91:40:42:23:4e:96:a3:83:26:f4:d1:3c:0e:80:18:
         e7:dd:9a:ee:f6:8d:69:69:41:78:5d:ad:0c:29:18:87:45:6c:
         02:74:1c:43:6b:6f:92:5c:0c:a7:56:3e:e8:bb:b8:c1:bc:ff:
         ef:d3:62:ca:5c:7b:7b:cd:c7:aa:27:04:a1:67:67:a3:e2:d4:
         83:71:f3:7e:7d:a9:93:09:d5:bc:a8:03:9c:8a:6b:e9:c4:73:
         a9:33:06:88:fa:c3:bb:58:23:a8:cd:40:6b:93:9d:c4:2b:5e:
         91:e4:58:bb:77:cb:1b:b2:cd:f0:0c:22:5b:9c:45:a3:4c:11:
         9a:6a:10:fe:83:e1:9a:71:f9:61:52:1c:6d:5d:1f:8e:57:0b:
         74:02:a5:90:d1:93:33:6c:65:07:cf:89:fb:9b:17:63:b0:ab:
         17:40:e0:9c:5d:53:4e:45:f9:8f:3b:36:28:be:c4:39:cb:13:
         ef:7b:28:c7:33:4f:97:04:ca:2c:86:40:cf:86:d0:11:57:bc:
         78:af:3c:d3:15:20:49:5b:a7:82:ba:3a:ba:14:e5:a8:7a:2a:
         16:e5:7a:2b:e0:c8:2a:3f:21:82:c5:bc:08:a4:80:e4:cf:b7:
         bc:ee:80:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----