This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/216646117CCCEA6B81BAE631DCE88B228D51A1CF.cer
File:                     216646117CCCEA6B81BAE631DCE88B228D51A1CF.cer (raw, json)
Hash identifier:          8iH6A1QtY+FDnJSO19WirrnChrKeuo8ECn5ZpqnEXUQ=
Subject key identifier:   21:66:46:11:7C:CC:EA:6B:81:BA:E6:31:DC:E8:8B:22:8D:51:A1:CF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       42F64199E2C227AC4BE272C014AAA787CC90FDBC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/216646117CCCEA6B81BAE631DCE88B228D51A1CF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Nov 2025 18:19:15 +0000
Certificate not after:    Thu 05 Nov 2026 18:24:15 +0000
Subordinate resources:    AS: 269092
                          IP: 45.179.168.0/22
                          IP: 2804:5f54::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f6:41:99:e2:c2:27:ac:4b:e2:72:c0:14:aa:a7:87:cc:90:fd:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  6 18:19:15 2025 GMT
            Not After : Nov  5 18:24:15 2026 GMT
        Subject: CN=216646117CCCEA6B81BAE631DCE88B228D51A1CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:00:35:6a:a5:4f:9c:26:5d:3a:db:c6:83:46:
                    84:a1:cd:af:e7:bb:58:a1:7c:61:bf:a9:f1:3b:d2:
                    0a:85:1f:c6:76:ee:45:70:2c:0a:dc:39:ff:ae:1e:
                    a0:dd:69:38:d7:3f:65:2f:06:16:45:a1:10:c8:ee:
                    6a:ec:f8:47:e1:66:ff:3b:3b:d8:de:93:63:3e:c7:
                    75:1a:a9:94:b4:aa:bf:9d:6d:88:2d:ec:08:49:f3:
                    23:37:8e:ef:11:0e:1f:35:79:16:cd:4e:22:70:9e:
                    a9:73:5a:99:35:90:d8:9e:0d:5e:fa:bc:00:7a:c7:
                    e1:b2:4d:f6:d2:de:7e:bc:c5:da:6c:f3:82:14:c4:
                    9c:46:3c:6b:fd:ad:1b:1f:da:3d:0c:d8:09:15:74:
                    c1:2a:a8:0b:20:02:b9:64:ed:56:6f:95:f7:fb:fb:
                    97:09:1d:07:00:3e:28:6d:3f:cf:69:46:d2:d9:22:
                    46:dd:51:ac:c9:db:55:d4:5f:66:40:b8:ae:a9:31:
                    15:d7:e9:3f:7a:0e:9d:1d:dd:d5:02:b7:52:7e:c2:
                    d4:b4:06:af:63:2c:51:f9:3b:94:c3:8d:9b:37:f2:
                    40:c3:51:e4:85:96:b1:72:ab:98:91:bd:42:8e:96:
                    5a:aa:41:de:6f:dd:17:e1:f0:4d:c7:90:dc:c9:e4:
                    a5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:66:46:11:7C:CC:EA:6B:81:BA:E6:31:DC:E8:8B:22:8D:51:A1:CF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/216646117CCCEA6B81BAE631DCE88B228D51A1CF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.168.0/22
                IPv6:
                  2804:5f54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269092

    Signature Algorithm: sha256WithRSAEncryption
         37:ed:c0:d3:6f:ca:11:be:ea:12:b9:25:8b:39:8c:22:0f:69:
         29:76:f3:21:67:24:84:54:60:8b:d4:68:25:99:c5:d4:c6:ab:
         5c:e6:ef:ba:72:41:77:5b:49:d3:dd:0a:1b:b4:a5:b4:1a:97:
         38:1b:ce:a5:75:6a:bc:68:fd:51:6c:9b:98:fc:ad:48:e3:fe:
         2f:89:11:c6:6c:fa:46:61:98:6f:6e:b3:7d:a6:16:d3:7e:8d:
         f8:76:1b:08:e6:32:d0:ec:2c:77:6a:6e:a9:5f:a3:0c:68:b5:
         d3:0f:62:a0:ad:03:91:2e:d6:6e:e0:4e:aa:3a:6d:a4:e5:7a:
         5b:e6:d7:84:d8:e3:68:a4:7e:0f:ea:3e:98:c9:f5:e4:18:5c:
         04:86:1f:ce:33:6f:c5:94:06:fe:5c:97:63:e1:a8:7d:5a:c9:
         3e:2f:b3:e1:05:b9:ee:36:61:d6:46:66:67:4b:2e:eb:68:13:
         b8:2e:49:6a:e0:d7:60:cb:e9:d5:8b:ea:b4:4d:5b:18:a1:96:
         bd:f8:33:0c:a0:49:03:61:5a:c0:fc:d7:7e:cd:79:e9:30:23:
         0a:48:29:8a:b0:64:02:bc:4e:3a:af:09:ff:3c:aa:ef:c1:56:
         11:f8:72:22:25:bb:ab:1a:9c:db:2d:71:a9:41:5e:56:ab:98:
         60:ff:7e:6d
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUQvZBmeLCJ6xL4nLAFKqnh8yQ/bwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTExMDYxODE5MTVaFw0yNjExMDUxODI0MTVaMDMxMTAvBgNV
BAMTKDIxNjY0NjExN0NDQ0VBNkI4MUJBRTYzMURDRTg4QjIyOEQ1MUExQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTADVqpU+cJl0628aDRoShza/n
u1ihfGG/qfE70gqFH8Z27kVwLArcOf+uHqDdaTjXP2UvBhZFoRDI7mrs+EfhZv87
O9jek2M+x3UaqZS0qr+dbYgt7AhJ8yM3ju8RDh81eRbNTiJwnqlzWpk1kNieDV76
vAB6x+GyTfbS3n68xdps84IUxJxGPGv9rRsf2j0M2AkVdMEqqAsgArlk7VZvlff7
+5cJHQcAPihtP89pRtLZIkbdUazJ21XUX2ZAuK6pMRXX6T96Dp0d3dUCt1J+wtS0
Bq9jLFH5O5TDjZs38kDDUeSFlrFyq5iRvUKOllqqQd5v3Rfh8E3HkNzJ5KUbAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQhZkYRfMzqa4G6
5jHc6IsijVGhzzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM21X
dzFYcjZ1d0xjeHk4VFZjejJXaUZzRkhXa1FHZmNvRHk0d2diOFBRNmEvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNt
V3cxWHI2dXdMY3h5OFRWY3oyV2lGc0ZIV2tRR2Zjb0R5NHdnYjhQUTZhLzAvMjE2
NjQ2MTE3Q0NDRUE2QjgxQkFFNjMxRENFODhCMjI4RDUxQTFDRi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbOoMA0EAgACMAcDBQAoBF9UMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQbJDANBgkqhkiG9w0BAQsFAAOCAQEAN+3A02/KEb7qErkl
izmMIg9pKXbzIWckhFRgi9RoJZnF1MarXObvunJBd1tJ090KG7SltBqXOBvOpXVq
vGj9UWybmPytSOP+L4kRxmz6RmGYb26zfaYW036N+HYbCOYy0Owsd2puqV+jDGi1
0w9ioK0DkS7WbuBOqjptpOV6W+bXhNjjaKR+D+o+mMn15BhcBIYfzjNvxZQG/lyX
Y+GofVrJPi+z4QW57jZh1kZmZ0su62gTuC5JauDXYMvp1YvqtE1bGKGWvfgzDKBJ
A2FawPzXfs156TAjCkgpirBkArxOOq8J/zyq78FWEfhyIiW7qxqc2y1xqUFeVquY
YP9+bQ==
-----END CERTIFICATE-----