This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/173DC6B6A7756452FEE773D196BCB2CB549F2833.cer
File:                     173DC6B6A7756452FEE773D196BCB2CB549F2833.cer (raw, json)
Hash identifier:          lN5zkJxEO8IchcuiSMbGvXzV9qJwgh42vTBnuEEUtUk=
Subject key identifier:   17:3D:C6:B6:A7:75:64:52:FE:E7:73:D1:96:BC:B2:CB:54:9F:28:33
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1052B685980B9F2B2E2AE3F860F5EA9E9B230B09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/3/173DC6B6A7756452FEE773D196BCB2CB549F2833.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/3/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Jul 2024 14:11:12 +0000
Certificate not after:    Wed 23 Jul 2025 14:16:12 +0000
Subordinate resources:    AS: 262659
                          IP: 177.185.224.0/20
                          IP: 179.127.48.0/20
                          IP: 186.193.64.0/19
                          IP: 187.1.64.0/20
                          IP: 187.85.0.0/19
                          IP: 200.52.16.0/20
                          IP: 201.33.240.0/20
                          IP: 2804:58::/32
                          IP: 2804:e8::/32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:52:b6:85:98:0b:9f:2b:2e:2a:e3:f8:60:f5:ea:9e:9b:23:0b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 24 14:11:12 2024 GMT
            Not After : Jul 23 14:16:12 2025 GMT
        Subject: CN=173DC6B6A7756452FEE773D196BCB2CB549F2833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:97:7a:33:b0:94:07:11:fc:a2:6a:8a:92:ca:
                    90:a7:79:cf:b9:44:4f:34:b5:a2:76:80:3f:16:5b:
                    d9:5c:53:20:00:1c:30:94:7f:49:ad:30:54:31:30:
                    15:cf:20:15:5f:04:45:2a:fc:6e:aa:af:82:58:84:
                    24:78:72:d6:86:db:a3:5a:80:1e:89:42:d5:35:a0:
                    16:03:65:10:15:79:ae:25:90:e7:e1:8b:ca:68:4c:
                    8b:fd:80:77:35:c0:48:29:35:b7:ba:9c:69:fc:21:
                    82:b8:ff:57:c5:f3:ab:12:fa:bd:67:3f:ee:1a:33:
                    4e:8c:14:2f:b2:2d:d1:56:57:72:2c:0b:0e:cd:ed:
                    ae:b4:6a:d4:cf:e7:31:ef:02:2e:a5:69:0f:a1:5b:
                    99:9c:54:55:dc:1d:2a:d0:d0:b3:ac:02:c0:83:01:
                    35:85:c5:33:c7:8f:48:ac:75:61:73:93:d3:9b:79:
                    9c:35:3b:41:3d:62:bf:7e:c6:f8:bb:7b:78:47:86:
                    00:53:36:fa:83:0f:c1:73:40:eb:b7:fb:08:ce:5f:
                    ad:15:67:93:fd:60:df:5d:c2:32:20:83:ef:52:c4:
                    77:4b:15:ba:3c:e6:74:41:b2:60:76:11:ad:31:75:
                    f7:92:ce:68:1e:55:01:e6:ce:70:53:60:6f:96:7a:
                    da:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                17:3D:C6:B6:A7:75:64:52:FE:E7:73:D1:96:BC:B2:CB:54:9F:28:33
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/3/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/3/173DC6B6A7756452FEE773D196BCB2CB549F2833.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.224.0/20
                  179.127.48.0/20
                  186.193.64.0/19
                  187.1.64.0/20
                  187.85.0.0/19
                  200.52.16.0/20
                  201.33.240.0/20
                IPv6:
                  2804:58::/32
                  2804:e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262659

    Signature Algorithm: sha256WithRSAEncryption
         2b:e5:d3:00:fa:ee:d2:73:75:c4:d9:c4:fa:af:6b:cb:cf:1a:
         51:1f:15:3d:e3:79:50:67:c2:10:27:4c:62:9e:34:26:42:e3:
         dd:6e:85:84:09:ab:82:8d:37:3c:cc:b3:73:dc:52:aa:c6:0d:
         ee:bb:21:46:de:8e:db:60:4a:c0:5e:59:06:42:68:dc:ad:48:
         b3:2b:92:fc:15:c3:76:48:00:4a:de:99:b6:a0:00:73:d9:ca:
         b8:18:15:ae:52:0f:4d:a7:65:4d:d9:15:5d:fb:a8:47:01:7d:
         2c:6e:79:0c:0b:87:72:70:89:16:b1:53:24:61:2e:c9:95:39:
         5a:d4:0b:56:8d:3f:1a:41:15:cd:79:94:31:7c:a3:3f:6b:9b:
         69:1f:ba:e0:30:c4:dd:9b:40:ef:30:6f:10:59:87:2e:bc:37:
         74:7d:f4:e6:7c:28:41:fb:51:76:0f:92:80:3e:e9:91:89:f8:
         2a:d2:0b:a0:d2:ca:c3:89:07:26:6e:92:0a:40:db:6a:e0:bf:
         8a:31:66:90:47:8e:84:d8:bc:5a:8e:0b:7b:81:34:a1:3e:7e:
         47:3f:13:ea:3b:a6:8b:03:60:a0:4c:bc:f8:27:47:15:ac:39:
         51:31:27:b4:9f:0b:0a:5a:cc:13:92:df:d8:7c:35:7e:36:55:
         93:ed:f0:03
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 20 23:59:46 2025 by rpki-client