This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DA5E0DC881841E0A8C7E487104C44F1836C14BC5.cer
File:                     DA5E0DC881841E0A8C7E487104C44F1836C14BC5.cer (raw, json)
Hash identifier:          pYIhiW/2Mtrp363al7Wkzbrvsssnjl+yvDNFwCXNOi0=
Subject key identifier:   DA:5E:0D:C8:81:84:1E:0A:8C:7E:48:71:04:C4:4F:18:36:C1:4B:C5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4A6E8FA55BE8649EEA5FBB035ABBBF39C5A5D700
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/DA5E0DC881841E0A8C7E487104C44F1836C14BC5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Mar 2023 18:04:09 +0000
Certificate not after:    Wed 06 Mar 2024 18:09:09 +0000
Subordinate resources:    AS: 266526
                          IP: 45.65.236.0/22
                          IP: 2804:3d5c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:6e:8f:a5:5b:e8:64:9e:ea:5f:bb:03:5a:bb:bf:39:c5:a5:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  8 18:04:09 2023 GMT
            Not After : Mar  6 18:09:09 2024 GMT
        Subject: CN=DA5E0DC881841E0A8C7E487104C44F1836C14BC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6c:96:8d:d2:b6:b3:73:fb:eb:56:e3:df:60:
                    68:01:32:01:b8:b4:b8:cc:9f:8c:34:f8:0f:e0:f9:
                    b6:bc:a9:46:7c:8e:68:f3:aa:88:51:0f:15:bb:4c:
                    92:c8:30:3f:ea:9c:5b:d3:3a:dd:6b:96:4e:41:cc:
                    a3:64:36:b6:b0:3e:44:86:f0:15:45:32:45:83:7a:
                    9e:bb:f0:7f:cd:fe:12:b8:83:be:8a:a4:c6:a6:0f:
                    98:73:76:64:17:5b:7e:c4:e2:35:d1:9d:05:01:0c:
                    36:2b:c4:93:a5:70:26:89:c2:8f:0d:e2:e7:4e:d0:
                    e0:49:c0:12:6c:c7:20:da:44:d4:9d:13:8b:8f:cb:
                    c7:e2:a1:88:38:73:43:a6:af:ed:b7:be:fb:41:d3:
                    8f:9c:dc:b8:29:9d:62:76:16:16:c7:1b:fa:e1:8a:
                    4d:77:f5:f3:0d:08:9d:c2:f6:fe:ea:8b:eb:ce:03:
                    fb:08:be:6a:aa:c7:23:87:d8:2d:d0:95:1b:61:90:
                    46:0f:47:38:33:7e:fc:d5:43:6e:6d:ed:42:a6:d2:
                    c2:2f:44:e6:ad:8a:7d:38:a6:5d:5e:79:df:bc:49:
                    27:7f:5a:79:d2:cc:c0:6d:22:b1:c9:4b:25:37:2a:
                    41:36:07:8a:87:f2:1e:65:47:ac:a7:2c:d2:25:bb:
                    87:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DA:5E:0D:C8:81:84:1E:0A:8C:7E:48:71:04:C4:4F:18:36:C1:4B:C5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/0/DA5E0DC881841E0A8C7E487104C44F1836C14BC5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.236.0/22
                IPv6:
                  2804:3d5c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266526

    Signature Algorithm: sha256WithRSAEncryption
         95:29:e8:23:05:42:c3:9d:c6:4e:e8:d4:a3:bd:83:da:ec:b1:
         e9:df:6a:d7:b3:15:f2:d7:c8:20:51:6f:c2:4a:92:2f:d0:fc:
         5d:11:24:e4:4b:d8:ed:ec:7d:8d:2a:fc:82:ae:9f:f5:68:5b:
         33:6f:32:a8:5b:73:c1:c2:ed:99:a5:36:db:d3:57:29:fd:0a:
         7d:7a:fa:c4:3c:df:42:ee:91:b4:b0:4d:1a:d8:0c:1a:72:8b:
         c3:22:6e:2a:0d:0d:50:48:d4:9a:34:32:33:7a:65:d2:32:78:
         c2:90:fd:e5:fa:2e:68:c0:ce:06:bf:28:86:dd:e3:06:99:d4:
         67:9d:89:05:00:c2:97:ab:43:67:8c:17:aa:20:21:48:03:24:
         3d:cc:30:4d:d5:52:4f:ac:a0:df:94:be:28:0b:4b:22:32:de:
         b1:bd:da:0e:62:e7:c6:42:e8:28:a5:87:07:e1:c9:33:87:9e:
         76:3d:fc:8b:b8:c2:8a:aa:65:4a:7a:17:52:1c:88:be:df:07:
         b7:5d:cb:cc:50:d7:9d:d7:37:7f:47:aa:fd:4e:e6:32:5e:86:
         67:63:0d:96:c4:d4:a4:e6:a2:9b:aa:f4:7f:ba:43:e5:6f:89:
         df:28:7f:1a:21:61:69:ea:a3:c0:34:ee:6e:04:06:cb:ba:aa:
         f9:02:c7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 20:51:06 2025 by rpki-client