This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/194C6BCBEB71571D67E92F3EBF24D2D6C94B3853.cer
File:                     194C6BCBEB71571D67E92F3EBF24D2D6C94B3853.cer (raw, json)
Hash identifier:          5LkLAZ7I4XcjBbtTHBJPlSSDiZSv7WN7Q6MVZ2U+I+U=
Subject key identifier:   19:4C:6B:CB:EB:71:57:1D:67:E9:2F:3E:BF:24:D2:D6:C9:4B:38:53
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0245C1A128ABC79B8BD1870900DFD91117863964
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/194C6BCBEB71571D67E92F3EBF24D2D6C94B3853.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Nov 2025 17:54:58 +0000
Certificate not after:    Tue 24 Nov 2026 17:59:58 +0000
Subordinate resources:    AS: 266418
                          IP: 170.81.164.0/22
                          IP: 2804:377c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:45:c1:a1:28:ab:c7:9b:8b:d1:87:09:00:df:d9:11:17:86:39:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 25 17:54:58 2025 GMT
            Not After : Nov 24 17:59:58 2026 GMT
        Subject: CN=194C6BCBEB71571D67E92F3EBF24D2D6C94B3853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:1f:64:56:12:95:11:8e:88:e0:29:0f:e4:
                    a5:80:bc:08:3b:a0:26:3a:ed:03:e5:94:c2:51:46:
                    ef:36:82:68:18:ef:de:82:c0:98:86:2f:4c:ec:ad:
                    f5:1c:39:33:5c:8b:df:9b:b5:f8:c5:cb:12:e6:1b:
                    45:27:12:89:2e:ad:17:74:1d:ea:ae:14:bd:79:a2:
                    ce:3c:92:9c:88:62:7c:81:a0:4c:5b:22:19:57:39:
                    e5:be:58:3a:7c:c6:4f:dc:1a:9e:5a:de:77:58:47:
                    05:c4:41:8d:82:88:42:05:be:bf:2b:d2:33:75:06:
                    3e:0a:87:cd:0f:f9:02:7b:b4:fe:41:d1:20:80:e6:
                    af:cd:f4:39:84:23:a8:b5:a6:f9:ad:d5:c2:25:42:
                    3f:15:b2:b0:ad:4d:d8:35:8d:3f:30:5e:68:94:59:
                    8a:bf:c3:28:25:55:2c:7d:02:70:b2:c0:e6:d9:15:
                    01:81:8d:c6:c7:4b:a9:f5:42:1c:35:ce:d3:34:e5:
                    ac:7e:2a:4b:a5:04:d3:df:cc:a3:61:ca:93:c7:60:
                    3e:65:6f:31:05:e8:bb:ee:b3:0a:2d:4c:eb:1a:aa:
                    08:dc:a5:80:80:d8:ee:2e:06:9d:6c:0c:f5:b2:8b:
                    7d:ad:ed:67:d3:dd:ae:be:7c:a1:1b:91:5a:64:4d:
                    a3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:4C:6B:CB:EB:71:57:1D:67:E9:2F:3E:BF:24:D2:D6:C9:4B:38:53
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2rRoWJwNQ526ciBqTAhCpgznHWwxFRixx1BJ5pn45kRb/0/194C6BCBEB71571D67E92F3EBF24D2D6C94B3853.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.164.0/22
                IPv6:
                  2804:377c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266418

    Signature Algorithm: sha256WithRSAEncryption
         54:5e:dd:cd:8f:c3:c0:42:27:2f:06:40:41:6d:62:c1:20:1b:
         00:80:72:16:d5:18:25:d0:7d:c0:d6:4c:44:6f:b1:72:39:28:
         64:26:e2:c9:57:82:71:08:c9:2e:68:e6:d9:42:89:c6:8c:a0:
         64:bd:c3:4e:12:a8:06:b2:a5:8b:7d:a1:0f:45:e9:e7:6c:3e:
         35:93:cd:d5:22:12:86:0f:d6:23:d3:6b:4a:8d:cd:46:0d:3b:
         c4:73:42:45:7e:82:ab:c3:53:f4:5b:39:11:05:d5:78:74:50:
         02:46:a5:3e:f1:9b:32:44:98:6d:0d:2e:2f:8c:97:2b:ef:9a:
         74:b9:8b:01:f2:45:a7:15:2c:34:a0:d6:01:79:47:ba:37:ce:
         1a:f9:bf:62:cd:87:b3:d8:e1:ff:1a:f9:19:81:c3:dc:3f:8b:
         bc:38:49:2c:52:17:73:5a:e9:91:36:3f:d7:1b:ee:00:87:22:
         4c:ae:dd:45:18:35:36:d7:cb:38:e2:3f:75:32:78:4d:86:5b:
         03:3d:aa:b2:41:ee:e0:ab:a9:fb:79:ed:de:f8:8a:b1:40:6c:
         17:c4:ee:da:d7:37:5a:b8:ae:65:5d:d3:03:25:b4:93:23:c1:
         7e:9c:7e:e6:b0:16:cb:c2:e6:ba:47:4a:03:42:67:f6:35:60:
         4c:1d:5b:f1
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUAkXBoSirx5uL0YcJAN/ZEReGOWQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTExMjUxNzU0NThaFw0yNjExMjQxNzU5NThaMDMxMTAvBgNV
BAMTKDE5NEM2QkNCRUI3MTU3MUQ2N0U5MkYzRUJGMjREMkQ2Qzk0QjM4NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGLB9kVhKVEY6I4CkP5KWAvAg7
oCY67QPllMJRRu82gmgY796CwJiGL0zsrfUcOTNci9+btfjFyxLmG0UnEokurRd0
HequFL15os48kpyIYnyBoExbIhlXOeW+WDp8xk/cGp5a3ndYRwXEQY2CiEIFvr8r
0jN1Bj4Kh80P+QJ7tP5B0SCA5q/N9DmEI6i1pvmt1cIlQj8VsrCtTdg1jT8wXmiU
WYq/wyglVSx9AnCywObZFQGBjcbHS6n1Qhw1ztM05ax+KkulBNPfzKNhypPHYD5l
bzEF6LvuswotTOsaqgjcpYCA2O4uBp1sDPWyi32t7WfT3a6+fKEbkVpkTaO1AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQZTGvL63FXHWfp
Lz6/JNLWyUs4UzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMnJS
b1dKd05RNTI2Y2lCcVRBaENwZ3puSFd3eEZSaXh4MUJKNXBuNDVrUmIvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJy
Um9XSndOUTUyNmNpQnFUQWhDcGd6bkhXd3hGUml4eDFCSjVwbjQ1a1JiLzAvMTk0
QzZCQ0JFQjcxNTcxRDY3RTkyRjNFQkYyNEQyRDZDOTRCMzg1My5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqlGkMA0EAgACMAcDBQAoBDd8MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQQsjANBgkqhkiG9w0BAQsFAAOCAQEAVF7dzY/DwEInLwZA
QW1iwSAbAIByFtUYJdB9wNZMRG+xcjkoZCbiyVeCcQjJLmjm2UKJxoygZL3DThKo
BrKli32hD0Xp52w+NZPN1SIShg/WI9NrSo3NRg07xHNCRX6Cq8NT9Fs5EQXVeHRQ
AkalPvGbMkSYbQ0uL4yXK++adLmLAfJFpxUsNKDWAXlHujfOGvm/Ys2Hs9jh/xr5
GYHD3D+LvDhJLFIXc1rpkTY/1xvuAIciTK7dRRg1NtfLOOI/dTJ4TYZbAz2qskHu
4Kup+3nt3viKsUBsF8Tu2tc3WriuZV3TAyW0kyPBfpx+5rAWy8LmukdKA0Jn9jVg
TB1b8Q==
-----END CERTIFICATE-----