This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/13123FFD48CC363E7FDE5D171F9FFC145A5D4B63.cer
File:                     13123FFD48CC363E7FDE5D171F9FFC145A5D4B63.cer (raw, json)
Hash identifier:          KB8pqAsTgPlsheAF8mkdFkR2Nhn4ZI9GT343vCmCamE=
Subject key identifier:   13:12:3F:FD:48:CC:36:3E:7F:DE:5D:17:1F:9F:FC:14:5A:5D:4B:63
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5C01459BFF4007F584F51DE9DA71046AA777E05B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/13123FFD48CC363E7FDE5D171F9FFC145A5D4B63.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Nov 2025 17:01:18 +0000
Certificate not after:    Tue 17 Nov 2026 17:06:18 +0000
Subordinate resources:    AS: 266440
                          IP: 170.82.20.0/22
                          IP: 2804:37dc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:01:45:9b:ff:40:07:f5:84:f5:1d:e9:da:71:04:6a:a7:77:e0:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 18 17:01:18 2025 GMT
            Not After : Nov 17 17:06:18 2026 GMT
        Subject: CN=13123FFD48CC363E7FDE5D171F9FFC145A5D4B63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a1:bc:64:21:ea:39:7d:2e:ed:08:7e:12:69:
                    7a:93:70:bb:c0:73:cd:95:20:7e:da:83:86:99:2b:
                    c9:f1:dc:08:00:90:5d:ec:bb:87:6d:d4:37:b3:a4:
                    7d:9d:a1:25:83:d2:c1:0c:42:e7:52:6b:cb:7c:cd:
                    1b:9e:0f:6b:16:cd:07:0a:51:95:28:6b:69:ad:9b:
                    84:5d:58:a2:a0:62:60:4a:25:4b:0d:26:2f:2e:ff:
                    28:7b:2d:db:7c:95:ca:30:bc:b3:9d:a6:6f:b8:88:
                    e0:d1:c5:42:e6:bc:bf:1d:9f:36:79:04:89:13:9d:
                    81:25:bb:ba:68:f7:1e:02:83:e3:ff:17:89:c5:b6:
                    e0:d2:72:98:1e:a3:2a:42:82:f9:4a:cf:26:04:d9:
                    99:bc:6f:5b:51:bf:e4:ea:f2:44:f2:e4:52:5c:c8:
                    d4:e1:12:42:0b:64:12:b1:19:6a:d5:8d:a3:80:9d:
                    d7:e5:d7:15:0e:8f:18:77:60:1d:0a:ee:5f:77:16:
                    22:bc:33:6c:7e:6b:82:9a:13:6d:29:ef:6f:43:02:
                    b5:0e:00:8d:91:05:e4:f3:2d:0f:4d:96:ab:23:b9:
                    8e:a9:e0:3e:55:27:29:b7:21:27:4c:4f:45:a9:e9:
                    89:e2:ff:23:e8:4a:9a:3f:b1:13:a6:00:e6:c4:59:
                    68:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:12:3F:FD:48:CC:36:3E:7F:DE:5D:17:1F:9F:FC:14:5A:5D:4B:63
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/13123FFD48CC363E7FDE5D171F9FFC145A5D4B63.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.20.0/22
                IPv6:
                  2804:37dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266440

    Signature Algorithm: sha256WithRSAEncryption
         c2:e3:35:bb:45:0e:f1:5e:4d:e7:73:4c:3c:49:71:fe:b2:6f:
         a2:0c:3b:5b:0c:de:0a:e0:2e:5f:35:64:11:85:63:30:61:c1:
         26:e3:18:be:34:c5:c0:70:ff:50:ba:2f:6d:25:f6:6c:ca:74:
         cb:bd:35:06:6e:b6:b4:3a:2d:2b:5a:d3:db:f6:26:e8:2b:e4:
         85:2b:bf:4b:64:1b:d9:b4:dd:88:40:eb:19:69:b2:1e:83:4c:
         8e:41:58:da:cb:66:89:ad:81:a5:e9:6f:cd:14:29:af:3d:88:
         68:66:68:ac:4f:f7:aa:c2:ed:c2:a9:a7:3a:9a:74:26:ec:68:
         4a:6c:14:95:00:2e:36:bc:80:c9:10:65:a4:a8:d4:a8:70:45:
         d3:bf:78:7c:46:cc:2a:2d:cd:f5:53:7d:25:29:ce:97:14:d9:
         95:f6:24:6c:b9:5e:d7:d3:f5:68:a5:c6:c1:91:fb:24:a9:64:
         05:fe:18:fa:28:90:3f:6d:f3:f2:8a:d2:64:42:15:06:5a:95:
         b6:92:00:1f:97:5d:fe:27:0f:5d:44:01:0c:d0:68:d4:aa:cb:
         bd:f4:a3:a5:b3:be:9a:23:e6:c9:8b:5c:3c:9f:1a:c5:2b:1a:
         49:5d:c6:f6:e1:09:80:71:4e:a2:89:a0:df:df:dd:e0:0c:e0:
         a0:28:3e:9a
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUXAFFm/9AB/WE9R3p2nEEaqd34FswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTExMTgxNzAxMThaFw0yNjExMTcxNzA2MThaMDMxMTAvBgNV
BAMTKDEzMTIzRkZENDhDQzM2M0U3RkRFNUQxNzFGOUZGQzE0NUE1RDRCNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+obxkIeo5fS7tCH4SaXqTcLvA
c82VIH7ag4aZK8nx3AgAkF3su4dt1DezpH2doSWD0sEMQudSa8t8zRueD2sWzQcK
UZUoa2mtm4RdWKKgYmBKJUsNJi8u/yh7Ldt8lcowvLOdpm+4iODRxULmvL8dnzZ5
BIkTnYElu7po9x4Cg+P/F4nFtuDScpgeoypCgvlKzyYE2Zm8b1tRv+Tq8kTy5FJc
yNThEkILZBKxGWrVjaOAndfl1xUOjxh3YB0K7l93FiK8M2x+a4KaE20p729DArUO
AI2RBeTzLQ9NlqsjuY6p4D5VJym3ISdMT0Wp6Yni/yPoSpo/sROmAObEWWjdAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQTEj/9SMw2Pn/e
XRcfn/wUWl1LYzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSG9X
VGJVR1BYS1hzN1FQQ2FEY1ZYQ1hYcGhzdlRmc1pDbXBSaXVxWk1rWTQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hv
V1RiVUdQWEtYczdRUENhRGNWWENYWHBoc3ZUZnNaQ21wUml1cVpNa1k0LzAvMTMx
MjNGRkQ0OENDMzYzRTdGREU1RDE3MUY5RkZDMTQ1QTVENEI2My5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqlIUMA0EAgACMAcDBQAoBDfcMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQQyDANBgkqhkiG9w0BAQsFAAOCAQEAwuM1u0UO8V5N53NM
PElx/rJvogw7WwzeCuAuXzVkEYVjMGHBJuMYvjTFwHD/ULovbSX2bMp0y701Bm62
tDotK1rT2/Ym6CvkhSu/S2Qb2bTdiEDrGWmyHoNMjkFY2stmia2BpelvzRQprz2I
aGZorE/3qsLtwqmnOpp0JuxoSmwUlQAuNryAyRBlpKjUqHBF0794fEbMKi3N9VN9
JSnOlxTZlfYkbLle19P1aKXGwZH7JKlkBf4Y+iiQP23z8orSZEIVBlqVtpIAH5dd
/icPXUQBDNBo1KrLvfSjpbO+miPmyYtcPJ8axSsaSV3G9uEJgHFOoomg39/d4Azg
oCg+mg==
-----END CERTIFICATE-----