This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.cer
File:                     2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.cer (raw, json)
Hash identifier:          8Jm4PLLXVUgIDI78tBBFJ1G13lOFuqN/Fi/7grgwEUU=
Subject key identifier:   22:64:D1:7A:1D:E6:58:F2:5F:A0:EB:77:73:DA:7F:6B:41:E5:2F:D0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       21361BEF804B2CDDC81B3F9E68CE66341B57E08A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 23 Nov 2025 09:26:11 +0000
Certificate not after:    Sun 22 Nov 2026 09:31:11 +0000
Subordinate resources:    AS: 266055
                          IP: 45.4.44.0/22
                          IP: 2804:39dc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 10:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:36:1b:ef:80:4b:2c:dd:c8:1b:3f:9e:68:ce:66:34:1b:57:e0:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 23 09:26:11 2025 GMT
            Not After : Nov 22 09:31:11 2026 GMT
        Subject: CN=2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c3:13:bb:c1:47:c8:cd:5a:4a:6a:e0:de:e6:
                    ca:9e:bd:04:71:11:ea:d9:73:ac:2b:7a:9a:95:bd:
                    b5:69:3a:de:3a:b7:60:d5:e6:1a:b1:19:f5:a4:b1:
                    70:f5:a2:a3:eb:23:a3:fd:c0:a7:00:bc:fe:8c:57:
                    c6:d0:93:fc:a2:0c:25:08:6c:c7:d7:ce:0b:79:67:
                    7b:77:9e:3f:e1:ae:2e:9d:24:8b:4e:62:de:22:a9:
                    90:2f:d7:6d:1d:7c:e0:33:6a:7f:22:a5:48:f2:1e:
                    35:2e:e6:01:46:fc:83:0f:79:72:aa:b2:9f:3c:96:
                    0d:cc:60:63:aa:0a:d3:d8:54:c3:c5:f1:76:89:46:
                    cd:e3:a7:6c:3a:7b:6d:e7:eb:0e:74:bb:f5:52:35:
                    ef:25:a1:33:86:51:36:c9:1c:86:11:52:cd:da:d7:
                    5b:9d:13:11:0b:f4:ae:be:c1:7c:e0:a3:e4:0d:04:
                    20:a4:da:d8:09:d9:bc:ac:2d:61:c8:2a:38:b4:88:
                    2d:94:08:bf:f9:a6:83:cf:da:ff:55:bd:d3:bf:05:
                    f4:85:a9:22:29:b4:78:60:f5:4d:d4:69:46:25:2e:
                    57:11:57:09:7e:f5:7f:30:80:74:7a:a8:43:d6:78:
                    d4:19:f1:77:35:48:4d:26:08:e4:5f:5f:8b:60:29:
                    9b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                22:64:D1:7A:1D:E6:58:F2:5F:A0:EB:77:73:DA:7F:6B:41:E5:2F:D0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.44.0/22
                IPv6:
                  2804:39dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266055

    Signature Algorithm: sha256WithRSAEncryption
         aa:b0:99:7d:b4:53:32:02:ef:ba:ce:11:a1:3e:60:10:25:85:
         6c:ae:3a:f2:df:b2:b1:04:33:11:7f:81:d5:35:ab:6d:b1:89:
         e7:2c:47:d9:a5:b6:b3:23:ee:08:58:19:e6:ab:12:ba:17:59:
         e8:10:6e:1f:58:ab:bd:b5:8e:2b:90:bd:f4:8b:01:0e:9f:09:
         53:48:08:dd:3b:1d:44:3e:d5:9a:bd:0b:ec:bc:4e:4e:31:11:
         51:55:ff:e4:9f:09:e9:87:c3:76:0c:9f:6d:da:a3:d1:d2:f9:
         5f:d6:b3:07:a9:7d:25:ef:83:0c:8f:b4:dc:f8:54:7d:02:11:
         ee:bd:cc:95:b9:33:57:3e:82:6e:19:8b:18:ed:c1:77:ad:74:
         f5:35:5c:e9:a3:28:18:ee:ef:34:35:59:3a:fa:66:9b:77:c4:
         63:64:31:36:47:fa:69:2e:1d:c4:49:05:24:30:57:de:76:55:
         35:c5:35:15:ce:74:a8:ea:61:39:fa:9f:bc:3c:06:f1:e2:15:
         8c:f3:8c:67:e6:e4:62:45:8b:fe:36:91:3d:aa:5e:3d:ef:49:
         08:80:11:d1:44:2d:c5:53:4b:b1:cf:fa:a1:e6:dd:64:dd:ac:
         b7:0b:12:3e:53:f2:92:e0:d8:f3:5e:bd:54:0a:a5:83:1e:b0:
         d1:e7:29:2a
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUITYb74BLLN3IGz+eaM5mNBtX4IowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTExMjMwOTI2MTFaFw0yNjExMjIwOTMxMTFaMDMxMTAvBgNV
BAMTKDIyNjREMTdBMURFNjU4RjI1RkEwRUI3NzczREE3RjZCNDFFNTJGRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/wxO7wUfIzVpKauDe5sqevQRx
EerZc6wrepqVvbVpOt46t2DV5hqxGfWksXD1oqPrI6P9wKcAvP6MV8bQk/yiDCUI
bMfXzgt5Z3t3nj/hri6dJItOYt4iqZAv120dfOAzan8ipUjyHjUu5gFG/IMPeXKq
sp88lg3MYGOqCtPYVMPF8XaJRs3jp2w6e23n6w50u/VSNe8loTOGUTbJHIYRUs3a
11udExEL9K6+wXzgo+QNBCCk2tgJ2bysLWHIKji0iC2UCL/5poPP2v9VvdO/BfSF
qSIptHhg9U3UaUYlLlcRVwl+9X8wgHR6qEPWeNQZ8Xc1SE0mCORfX4tgKZufAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQiZNF6HeZY8l+g
63dz2n9rQeUv0DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFB3
MjQ5M1pHM2ExN1BtZFdXYVNDdTFHNjJ3SjM2TGZ6VnpZS3haVVJidEovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhQ
dzI0OTNaRzNhMTdQbWRXV2FTQ3UxRzYyd0ozNkxmelZ6WUt4WlVSYnRKLzAvMjI2
NEQxN0ExREU2NThGMjVGQTBFQjc3NzNEQTdGNkI0MUU1MkZEMC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLQQsMA0EAgACMAcDBQAoBDncMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQPRzANBgkqhkiG9w0BAQsFAAOCAQEAqrCZfbRTMgLvus4R
oT5gECWFbK468t+ysQQzEX+B1TWrbbGJ5yxH2aW2syPuCFgZ5qsSuhdZ6BBuH1ir
vbWOK5C99IsBDp8JU0gI3TsdRD7Vmr0L7LxOTjERUVX/5J8J6YfDdgyfbdqj0dL5
X9azB6l9Je+DDI+03PhUfQIR7r3MlbkzVz6CbhmLGO3Bd6109TVc6aMoGO7vNDVZ
Ovpmm3fEY2QxNkf6aS4dxEkFJDBX3nZVNcU1Fc50qOphOfqfvDwG8eIVjPOMZ+bk
YkWL/jaRPapePe9JCIAR0UQtxVNLsc/6oebdZN2stwsSPlPykuDY8169VAqlgx6w
0ecpKg==
-----END CERTIFICATE-----