This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/14F1CE0C1643DCFD066F662CE9E3074379A6732B.cer
File:                     14F1CE0C1643DCFD066F662CE9E3074379A6732B.cer (raw, json)
Hash identifier:          L7wj+y6duZMku2s7ekcvWBawopiWyVYwIZYkSoAEYyg=
Subject key identifier:   14:F1:CE:0C:16:43:DC:FD:06:6F:66:2C:E9:E3:07:43:79:A6:73:2B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4CEA96D495DAF43B532009E28A658DBA652D209E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/14F1CE0C1643DCFD066F662CE9E3074379A6732B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Nov 2025 02:13:06 +0000
Certificate not after:    Tue 24 Nov 2026 02:18:06 +0000
Subordinate resources:    AS: 266332
                          IP: 170.238.188.0/22
                          IP: 2804:3630::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:52:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ea:96:d4:95:da:f4:3b:53:20:09:e2:8a:65:8d:ba:65:2d:20:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 25 02:13:06 2025 GMT
            Not After : Nov 24 02:18:06 2026 GMT
        Subject: CN=14F1CE0C1643DCFD066F662CE9E3074379A6732B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e1:dc:88:94:0b:f7:bb:52:5f:22:d0:f9:23:
                    c8:e4:17:e5:5f:2b:57:e1:58:12:a7:39:96:7f:26:
                    07:64:38:b3:62:f1:99:7d:c3:7c:00:76:65:82:0b:
                    f0:56:38:b5:d4:5e:1a:6a:22:39:3b:92:ba:3f:6b:
                    37:6f:9f:a1:4e:07:f5:32:f4:e3:d4:4a:32:25:e2:
                    8e:3d:9d:86:e9:74:03:dd:da:6b:28:7c:f4:66:1d:
                    45:e4:cc:d2:2d:5a:b3:bb:d5:40:5a:34:c4:5f:49:
                    53:4a:06:01:13:df:f5:38:fb:11:d1:b3:7b:86:17:
                    f8:a1:74:f9:91:07:4d:96:f2:80:87:d4:36:42:61:
                    e5:09:5b:9f:74:da:44:32:84:82:6e:7c:ad:15:9c:
                    27:dd:39:ef:42:90:0e:6b:87:fb:37:e3:3c:b4:3c:
                    17:4a:f3:5c:80:6c:bf:3e:d9:95:ab:70:05:01:13:
                    42:22:69:79:7b:e8:b8:f4:81:39:63:7c:e2:71:6a:
                    45:f6:51:de:85:ec:b8:bb:cd:3d:db:77:ab:ce:ad:
                    a6:53:4e:7b:fd:b4:1b:d9:08:b1:4d:ad:54:f8:a0:
                    84:0d:4c:0a:3c:bf:2b:12:98:d5:5a:f0:01:00:af:
                    53:fa:f3:f3:71:d6:7e:01:3a:90:c9:4a:14:7c:a3:
                    1b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:F1:CE:0C:16:43:DC:FD:06:6F:66:2C:E9:E3:07:43:79:A6:73:2B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/14F1CE0C1643DCFD066F662CE9E3074379A6732B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.188.0/22
                IPv6:
                  2804:3630::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266332

    Signature Algorithm: sha256WithRSAEncryption
         66:7c:70:69:43:da:37:eb:0f:93:53:7b:33:57:f6:e6:41:58:
         21:76:d4:30:1b:71:f1:6a:f0:31:30:d7:e5:08:73:a2:40:93:
         5e:27:90:73:c4:f6:e3:ef:e0:f7:72:4b:39:0f:99:c5:3c:f5:
         c0:18:dc:16:ba:7c:79:cb:e9:44:3b:34:39:2f:e3:0e:d6:be:
         51:d9:09:5e:c3:32:88:53:b4:e2:16:54:41:11:0c:3b:92:be:
         a7:83:8f:a6:83:f9:11:db:2f:18:cc:9c:48:d7:6f:0a:13:41:
         d0:73:bd:5a:80:2c:62:bf:70:77:52:4f:6d:6e:7a:e3:f3:75:
         83:66:aa:0b:ff:1e:be:97:a2:4b:91:91:a4:5e:3e:75:40:ca:
         77:e0:70:08:16:02:0a:a1:43:25:15:28:8a:2a:14:e7:ec:bf:
         c0:c4:1f:cb:55:26:d9:33:b7:5d:7c:99:ec:30:d5:3d:ef:76:
         6d:4a:ac:44:e0:57:9d:07:a4:1f:55:12:d5:1a:33:51:3d:b1:
         0f:2d:56:79:b3:08:24:39:6d:1c:23:e6:04:c0:60:e0:06:81:
         f5:01:a7:86:7e:8e:9c:a6:9b:e4:65:38:2a:a5:66:09:15:d1:
         75:86:35:52:3e:88:ab:57:bb:25:ee:b1:35:4e:32:0d:79:41:
         d0:d0:39:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----