This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/13E6CB1B50CD4AB306D8CBDDC9DE780E353B5249.cer
File:                     13E6CB1B50CD4AB306D8CBDDC9DE780E353B5249.cer (raw, json)
Hash identifier:          Y+F490B4ndfjj1RFxsxN3EG4B1djGZaNi6ksaK8SIIw=
Subject key identifier:   13:E6:CB:1B:50:CD:4A:B3:06:D8:CB:DD:C9:DE:78:0E:35:3B:52:49
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       399914320B80ACBEDB8B48E409869B4CC07D9DC2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EyAvFPLTy92iCXVqMNEfY7SFr9izHi9zt19MG4Z1BYmp/0/13E6CB1B50CD4AB306D8CBDDC9DE780E353B5249.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EyAvFPLTy92iCXVqMNEfY7SFr9izHi9zt19MG4Z1BYmp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 14 Dec 2025 20:50:49 +0000
Certificate not after:    Sun 13 Dec 2026 20:55:49 +0000
Subordinate resources:    AS: 266345
                          IP: 170.239.16.0/22
                          IP: 2804:3664::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 08:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:99:14:32:0b:80:ac:be:db:8b:48:e4:09:86:9b:4c:c0:7d:9d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 14 20:50:49 2025 GMT
            Not After : Dec 13 20:55:49 2026 GMT
        Subject: CN=13E6CB1B50CD4AB306D8CBDDC9DE780E353B5249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:76:2c:86:a2:9a:83:63:e6:24:fc:ab:fa:29:
                    b1:3a:4f:e0:de:3f:1f:3e:f8:12:30:56:fc:3f:3e:
                    0f:b0:ae:de:2f:d4:82:9f:44:97:66:46:e8:b8:01:
                    cf:09:cd:d8:2a:e8:8c:f2:99:69:f3:4b:95:ea:f3:
                    7f:06:31:78:20:f6:df:39:8c:2d:f0:24:f8:a3:8e:
                    c2:3a:15:8d:e1:f0:a4:77:f8:d4:b3:0a:38:69:5d:
                    d0:ea:41:71:94:be:55:dd:91:c7:8e:36:46:3a:97:
                    6c:8a:75:75:c2:d7:55:d4:ef:57:89:54:d8:bd:b9:
                    e6:a0:bb:3a:f0:27:47:c3:9d:31:39:d3:ea:2b:96:
                    05:5d:2e:72:4a:6a:0b:32:90:66:50:30:5e:14:bd:
                    60:8c:b0:c4:52:38:2c:9a:f5:09:f1:9c:51:7a:e1:
                    59:91:f6:1d:4c:cb:36:7c:46:0e:a9:eb:31:c4:ad:
                    a0:68:dd:33:6f:13:5c:2f:28:4a:85:e6:45:f0:0d:
                    cc:a9:aa:a3:31:ca:7c:a9:6a:8a:f7:d6:c9:ff:29:
                    95:e4:e6:66:bf:31:b7:67:07:06:79:d2:97:b3:2e:
                    43:18:0e:7a:e5:79:42:45:ed:8a:86:07:1f:5a:9f:
                    c1:9b:11:df:1a:f8:c2:4d:15:bf:a6:f0:55:34:74:
                    25:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:E6:CB:1B:50:CD:4A:B3:06:D8:CB:DD:C9:DE:78:0E:35:3B:52:49
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EyAvFPLTy92iCXVqMNEfY7SFr9izHi9zt19MG4Z1BYmp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EyAvFPLTy92iCXVqMNEfY7SFr9izHi9zt19MG4Z1BYmp/0/13E6CB1B50CD4AB306D8CBDDC9DE780E353B5249.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.16.0/22
                IPv6:
                  2804:3664::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266345

    Signature Algorithm: sha256WithRSAEncryption
         90:17:16:03:91:4e:d3:ed:17:21:b2:85:24:c5:c5:2b:61:1e:
         ac:ee:cc:20:73:1e:92:f2:04:d5:8f:0f:b7:08:08:bf:76:01:
         4b:eb:5c:3c:e3:e7:0b:e0:ee:fa:ef:6d:6d:54:3c:ca:b6:bc:
         0a:99:6f:5b:df:61:62:66:56:f5:0d:7d:be:a9:37:04:4e:ec:
         4d:e1:c1:a7:56:27:7f:0f:f5:b5:ca:26:8f:dc:54:a3:ad:06:
         a0:b1:05:c6:34:e6:74:ef:64:f1:77:92:f6:f5:c2:3e:4a:02:
         1b:04:2a:8a:35:e2:03:9c:00:b3:33:76:6f:78:e6:f1:42:9e:
         23:bd:84:53:0e:6a:68:fb:b3:7a:78:5b:b3:3e:4b:55:20:9e:
         01:f8:25:1b:8c:c0:f7:73:ab:67:9f:87:16:b0:30:a4:5e:de:
         48:f3:cf:8c:a2:aa:18:74:a7:7c:86:db:79:9c:5b:12:66:69:
         6e:5e:16:3c:cb:89:dc:76:91:b8:4f:d4:1e:65:8d:01:b2:27:
         ac:8d:dd:2d:92:87:b8:2a:a2:3c:a9:a2:c9:49:e2:f9:b0:ae:
         76:ce:ac:4c:89:66:ea:17:30:d0:09:aa:d5:89:f6:5b:82:95:
         cc:48:dd:ae:3e:67:0d:70:15:c4:d0:b4:a8:78:41:04:03:ce:
         a3:0f:1f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----