This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3690C017C55EF304799A683B88DDE0C92B085DBC.cer
File:                     3690C017C55EF304799A683B88DDE0C92B085DBC.cer (raw, json)
Hash identifier:          R5Oe2/eyZb95GQGBPBde0Oz7N/oykB8ufLD20tKH950=
Subject key identifier:   36:90:C0:17:C5:5E:F3:04:79:9A:68:3B:88:DD:E0:C9:2B:08:5D:BC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3AAA209741487ADBF73A8E0BE0F1C88815F26B8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/3690C017C55EF304799A683B88DDE0C92B085DBC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 08 Oct 2024 19:54:07 +0000
Certificate not after:    Tue 07 Oct 2025 19:59:07 +0000
Subordinate resources:    AS: 267216
                          IP: 45.231.172.0/22
                          IP: 2804:4a10::/32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:aa:20:97:41:48:7a:db:f7:3a:8e:0b:e0:f1:c8:88:15:f2:6b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  8 19:54:07 2024 GMT
            Not After : Oct  7 19:59:07 2025 GMT
        Subject: CN=3690C017C55EF304799A683B88DDE0C92B085DBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:f6:dd:83:1f:0a:0d:5c:b8:99:0f:05:55:
                    d8:2a:f9:86:31:41:3b:a9:06:a9:1b:3f:7d:69:50:
                    43:8d:ee:db:93:17:72:64:03:6c:a9:5f:aa:9d:49:
                    ea:4d:e9:88:d5:62:71:a1:8a:84:a3:89:6e:fd:63:
                    4b:1e:d0:02:cf:2a:51:7b:2a:aa:f9:4e:d3:eb:13:
                    95:35:f3:4a:07:6c:03:e9:b5:45:e3:30:89:f1:7d:
                    9d:8e:7a:ee:2f:ba:88:ed:21:3e:36:8d:e0:19:0b:
                    67:63:7d:bc:b3:8f:45:42:cc:5b:80:5e:8b:6e:15:
                    45:d6:f3:81:16:c3:c5:ba:6a:89:f9:52:a3:9c:d1:
                    34:79:71:11:73:73:0d:b2:42:f0:c2:3a:d0:3b:a8:
                    5c:ae:47:92:86:86:19:6e:e7:6f:5d:9c:d7:18:8b:
                    66:05:f6:ff:31:1d:b6:06:fe:62:89:80:e1:4e:73:
                    c7:14:15:fe:e4:3b:0b:1c:f3:4e:41:10:99:6e:9a:
                    27:f4:9e:d2:cd:46:75:49:0a:87:c0:f6:b9:0d:a2:
                    58:98:ff:17:01:85:9f:82:5d:8d:bd:b3:95:d4:01:
                    ed:35:f7:dc:1a:3c:ee:34:31:7c:34:76:bb:4b:b7:
                    cf:e0:e8:ca:71:dc:28:d4:d6:5d:d7:27:c3:d0:e5:
                    5c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                36:90:C0:17:C5:5E:F3:04:79:9A:68:3B:88:DD:E0:C9:2B:08:5D:BC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/3690C017C55EF304799A683B88DDE0C92B085DBC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.172.0/22
                IPv6:
                  2804:4a10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267216

    Signature Algorithm: sha256WithRSAEncryption
         c1:d2:63:ed:4d:16:11:f7:43:b4:81:13:b2:0f:7f:f3:d7:92:
         8b:34:30:96:70:65:27:62:ca:95:ee:16:03:4c:0d:59:e9:50:
         fd:5e:bf:f7:fe:7c:68:85:4c:0d:a0:c5:6f:5d:fe:f1:5f:8a:
         1a:0a:18:98:c3:b3:19:bb:b9:ec:b6:ef:ab:b9:84:41:97:23:
         b8:38:ea:dc:07:17:d8:e8:d7:ac:03:1a:1d:02:fa:5c:a0:e0:
         8a:1b:a5:4c:b0:f8:42:a9:6d:b1:1a:0b:1f:88:6c:fe:e8:10:
         76:43:4a:7b:8b:df:6c:9c:c6:17:a1:36:86:0d:bd:3a:f8:57:
         c2:5e:4d:87:7e:34:91:ed:99:22:c0:d2:00:3a:bb:ad:83:06:
         28:90:5b:41:fe:ac:b1:17:03:46:a4:35:ad:dd:d7:ab:3c:af:
         84:84:5c:18:76:de:02:f5:90:76:8e:a2:8d:5b:30:9a:ef:ec:
         62:dd:9a:fd:70:a9:5b:bc:17:a4:61:8a:7e:27:0a:1a:2a:4b:
         13:eb:bd:05:1e:3a:e4:a1:7e:1b:7a:85:c3:70:49:e9:d0:2c:
         af:37:64:c7:d7:fd:18:40:51:4a:0a:ef:08:94:3e:18:43:22:
         39:1c:3a:80:56:7e:fd:71:21:48:4a:0f:02:ac:e8:19:0e:14:
         6a:62:d8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----