This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0E4505B615A77637C74454BD3C6435A5388878F0.cer
File:                     0E4505B615A77637C74454BD3C6435A5388878F0.cer (raw, json)
Hash identifier:          GxsYeLAUyddJx2tgjyoBT0OolWq3uzRpIv7NxUwV5RA=
Subject key identifier:   0E:45:05:B6:15:A7:76:37:C7:44:54:BD:3C:64:35:A5:38:88:78:F0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       67FCC276A56657E2302CEF0DCC7D14E1DE9F123E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/0E4505B615A77637C74454BD3C6435A5388878F0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 08 Nov 2025 14:07:06 +0000
Certificate not after:    Sat 07 Nov 2026 14:12:06 +0000
Subordinate resources:    AS: 266353
                          IP: 170.239.140.0/22
                          IP: 2804:3684::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:fc:c2:76:a5:66:57:e2:30:2c:ef:0d:cc:7d:14:e1:de:9f:12:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  8 14:07:06 2025 GMT
            Not After : Nov  7 14:12:06 2026 GMT
        Subject: CN=0E4505B615A77637C74454BD3C6435A5388878F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a7:4e:f0:82:e5:2e:c5:ee:61:08:86:49:1c:
                    7f:41:b8:18:1c:69:45:ab:24:41:4b:a6:71:09:8b:
                    7e:40:f4:ea:c7:c9:22:1f:e0:bd:78:7a:52:33:36:
                    97:db:55:46:82:0b:bc:58:fc:7f:09:e6:a6:12:6b:
                    89:51:64:f4:20:64:d0:b9:4d:17:43:0b:d2:40:41:
                    d4:e7:d8:c8:36:e9:64:76:27:45:3a:db:d1:c8:22:
                    94:2b:c5:0b:44:1a:cf:e8:c4:03:3a:5c:d2:eb:f3:
                    ca:d9:c0:eb:12:04:09:1e:32:54:c9:1d:b4:3a:1f:
                    02:72:fd:a3:ac:b6:62:b3:9e:9e:8d:3a:e2:e0:6c:
                    75:94:4e:52:7a:8d:38:4b:2a:8c:18:16:77:59:fc:
                    1d:09:6b:8a:b2:cf:ea:c2:32:4f:53:85:f8:36:30:
                    b6:28:38:a0:9e:48:3c:d2:05:ab:44:8e:d8:5c:6f:
                    d2:35:24:30:f9:f5:29:a5:e5:70:43:09:56:3b:c6:
                    41:80:4e:81:06:d5:80:4a:e5:29:35:35:6c:49:ca:
                    3e:20:50:d0:36:5d:f9:82:bb:09:0e:47:2f:9b:21:
                    d9:b6:29:87:34:97:25:5f:b7:15:cc:49:2e:45:68:
                    0d:86:03:52:7f:de:f2:52:8a:4c:d6:96:7c:5a:9f:
                    8b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:45:05:B6:15:A7:76:37:C7:44:54:BD:3C:64:35:A5:38:88:78:F0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/0E4505B615A77637C74454BD3C6435A5388878F0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.140.0/22
                IPv6:
                  2804:3684::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266353

    Signature Algorithm: sha256WithRSAEncryption
         c1:ef:ad:ab:12:27:58:3e:60:ae:dd:86:ed:69:49:78:5d:cf:
         63:d7:d3:21:51:f2:13:14:49:16:c0:c5:fd:f6:8d:47:82:2f:
         a0:62:e8:d8:d5:39:d3:e1:08:88:b5:b9:e3:0d:ae:c4:36:72:
         75:02:0b:07:b6:49:72:c9:76:47:f1:2d:c1:a7:fb:b1:46:2d:
         0c:23:9d:15:3d:14:2c:90:c0:3b:a8:13:af:b2:da:5a:41:d9:
         98:e4:09:28:bf:86:c7:99:f2:61:19:28:bb:63:9a:9f:ee:a0:
         c0:55:7c:60:ac:6b:47:a0:f8:71:1c:b2:ab:32:7c:0d:1c:18:
         06:68:63:81:29:87:4e:bc:a5:eb:7c:9c:1c:dc:18:68:5d:0d:
         34:b3:36:e2:fa:d3:35:95:fd:6a:38:bd:a9:46:3e:49:63:b3:
         a3:68:9c:32:2b:7e:af:30:b2:6f:05:03:d8:22:9c:9f:4c:c3:
         6d:e5:35:91:f1:9d:c4:79:9e:85:69:2a:b2:46:ef:5f:dd:f6:
         31:db:ee:2c:5d:17:8b:e2:cd:1a:62:b2:66:46:24:7f:4b:92:
         e5:6b:14:12:4a:b5:0e:cd:bd:13:81:b0:3d:fe:e9:50:f4:05:
         d5:c5:d8:42:32:c9:94:40:23:be:81:d7:68:aa:95:2d:a1:a6:
         fe:96:14:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----