This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
File:                     1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer (raw, json)
Hash identifier:          GWUEHfVA4/X/nW1zel8I2kj9X29sOu1Vm5Bkavx/TZ0=
Subject key identifier:   1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       68AE9B807174F9ABEEEE45D87465587240364CD0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Dec 2025 08:58:30 +0000
Certificate not after:    Fri 11 Dec 2026 09:03:30 +0000
Subordinate resources:    AS: 266514
                          IP: 45.186.40.0/22
                          IP: 170.244.232.0/22
                          IP: 2804:38f4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Dec 2025 20:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ae:9b:80:71:74:f9:ab:ee:ee:45:d8:74:65:58:72:40:36:4c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 12 08:58:30 2025 GMT
            Not After : Dec 11 09:03:30 2026 GMT
        Subject: CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fa:8d:ef:c9:d9:84:fd:bb:c6:fe:60:f7:54:
                    6b:7d:e4:58:6d:7d:03:f8:f0:cc:9c:12:1a:f3:40:
                    e0:a0:d2:99:40:e9:2a:8e:1b:f5:6e:4d:22:5f:d6:
                    da:58:9b:52:f6:86:18:56:02:d5:70:96:f2:80:7d:
                    65:7a:df:5a:38:f8:7a:06:f2:c1:8d:ee:e8:45:4a:
                    a7:85:7b:e2:f8:8a:13:4c:50:32:3a:d0:07:89:b7:
                    fb:f8:0c:7d:84:cb:a4:77:fd:a5:85:97:eb:cc:48:
                    28:30:83:62:6f:05:5d:a2:63:42:aa:47:13:95:67:
                    f3:81:e4:37:d9:81:4d:55:c9:ed:ce:43:17:cf:ae:
                    13:33:24:db:e9:da:86:f8:42:04:8b:0f:56:c8:0a:
                    1b:58:c3:25:c8:1d:e0:e6:a8:55:c2:9d:8f:7c:d6:
                    59:61:06:b0:d3:80:7e:48:cb:04:52:9b:c4:dd:cd:
                    5f:b3:8e:7a:2a:2c:cc:3c:82:ad:b4:6c:ec:2f:ff:
                    2e:2e:c8:69:27:79:e5:67:86:1c:dd:22:8c:fb:00:
                    01:70:20:02:fd:2b:41:97:84:6c:1b:64:ba:b8:a0:
                    05:da:51:07:ff:8a:d0:85:61:6b:e2:08:33:f1:49:
                    7a:85:75:45:9c:5d:fe:aa:c8:ab:9c:2d:f3:82:38:
                    b4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.40.0/22
                  170.244.232.0/22
                IPv6:
                  2804:38f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266514

    Signature Algorithm: sha256WithRSAEncryption
         3a:8f:fc:b1:9a:80:5b:7d:d3:96:da:e1:02:53:6c:8e:82:49:
         7e:cf:30:84:e5:bf:05:2e:37:a8:00:0c:5d:ab:39:1f:6a:8f:
         3c:34:12:91:e9:78:33:9b:14:04:05:bb:4d:97:69:44:2d:66:
         01:dc:43:eb:02:c3:a2:bc:25:21:4d:7f:cf:e7:a5:62:71:7d:
         62:3a:3a:9d:58:54:20:ba:b0:19:2b:f0:09:78:b2:66:7d:3e:
         54:0d:b0:15:b8:95:c1:e1:c7:27:dd:6b:e8:ce:a6:b1:5b:75:
         f6:5b:22:7e:02:67:49:3f:8c:b5:19:bb:66:87:18:66:09:05:
         d1:01:30:20:f4:ad:ce:f5:a5:e2:f4:64:e3:f6:82:87:d3:c5:
         40:b2:e8:d2:54:5a:49:ef:16:11:a6:85:8b:2e:16:18:d1:0f:
         5b:62:96:1b:df:f8:ec:dc:f6:47:9c:73:90:b1:2f:d8:8a:6b:
         32:f3:7a:25:6a:6c:b7:02:ef:73:5d:f6:42:f4:e8:9c:37:bd:
         fc:0a:60:5c:76:f8:5b:21:94:b1:3b:88:73:74:82:62:e0:3d:
         49:c2:c6:cc:4b:95:20:98:c3:cf:df:9d:9e:84:d3:ef:c5:1b:
         99:2b:e8:fe:7a:48:11:e5:cd:84:04:45:ef:c9:30:d5:54:66:
         78:ba:8b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 18:30:10 2025 by rpki-client