This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.cer
File:                     2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.cer (raw, json)
Hash identifier:          m2dQYIwjnRGps27k4l6dI5grI6IXknaQCCSY9oEMav8=
Subject key identifier:   2B:DE:DB:46:25:87:B5:4D:8E:AD:03:5C:81:DB:7F:C0:30:F3:0B:BD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7AB2B233B622F7C09CE54CC75C312175EA42C4A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6ukPz17uVrbMHvjCf4oR5uy539GUWRN8CaGRd7zetzoS/0/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6ukPz17uVrbMHvjCf4oR5uy539GUWRN8CaGRd7zetzoS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Nov 2025 22:48:05 +0000
Certificate not after:    Wed 11 Nov 2026 22:53:05 +0000
Subordinate resources:    AS: 265217
                          IP: 168.0.8.0/22
                          IP: 2804:2c6c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 08:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b2:b2:33:b6:22:f7:c0:9c:e5:4c:c7:5c:31:21:75:ea:42:c4:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 12 22:48:05 2025 GMT
            Not After : Nov 11 22:53:05 2026 GMT
        Subject: CN=2BDEDB462587B54D8EAD035C81DB7FC030F30BBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5f:01:95:dc:d1:24:26:60:a4:53:c3:9f:57:
                    9b:65:2e:b9:84:05:c4:18:c3:80:34:ea:67:0a:33:
                    66:98:d8:80:97:13:dd:9d:74:9a:06:af:3a:d2:d3:
                    31:0b:28:d7:c4:af:51:8c:ac:85:4c:0b:e7:11:8e:
                    ea:6a:90:62:c2:4c:b1:36:a8:49:2c:5d:ff:a9:b5:
                    6d:bf:60:75:66:43:73:c7:4b:53:02:9b:ca:22:02:
                    74:a4:78:34:2a:dc:1f:1d:86:20:01:67:e1:44:bc:
                    38:e2:ae:f6:3a:50:97:fc:f2:36:ee:45:e4:05:7d:
                    13:2e:72:99:c7:c8:39:c4:f9:d9:71:28:af:75:0a:
                    cf:86:61:e9:37:2b:51:84:f8:ce:c1:79:32:dd:b1:
                    89:71:85:53:9c:d9:d2:ed:44:b7:2e:fd:a7:da:3c:
                    07:a6:31:b7:5e:db:2a:85:72:4e:df:3e:77:b7:cf:
                    21:0f:86:4c:9e:74:b1:40:89:88:76:c4:57:cc:0b:
                    17:c1:93:c4:4f:3b:08:a1:4d:88:b9:ba:a5:67:72:
                    33:67:c4:25:6f:f2:cf:63:53:92:e0:87:b1:37:2f:
                    58:1a:1c:e0:e6:dc:75:00:ff:12:5f:cf:9a:3e:c3:
                    31:ed:c4:8e:36:ff:96:91:88:94:3b:3f:39:1a:0a:
                    df:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:DE:DB:46:25:87:B5:4D:8E:AD:03:5C:81:DB:7F:C0:30:F3:0B:BD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6ukPz17uVrbMHvjCf4oR5uy539GUWRN8CaGRd7zetzoS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6ukPz17uVrbMHvjCf4oR5uy539GUWRN8CaGRd7zetzoS/0/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.8.0/22
                IPv6:
                  2804:2c6c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265217

    Signature Algorithm: sha256WithRSAEncryption
         92:1c:cb:9a:36:8a:83:d0:42:f3:4b:fa:c3:d2:01:f1:92:86:
         c5:6e:ff:79:fd:2b:2c:20:fb:19:c8:83:69:45:c4:ea:40:c7:
         9e:d3:5f:7b:82:09:7b:87:5b:1c:ef:61:ff:27:4a:10:2d:e1:
         ba:63:95:33:e9:1b:28:4c:e1:3d:4b:db:81:03:cf:d4:d5:25:
         5f:61:21:39:23:ce:7e:b1:14:bc:ae:f2:e7:93:7c:7d:0f:f5:
         a1:c0:bb:ae:f7:6a:5d:1a:c6:e4:91:3c:c3:19:e6:6e:6a:63:
         bd:6a:d9:f8:4c:ca:f1:d0:37:0d:0b:13:43:45:87:72:af:3f:
         fa:0d:10:9e:23:72:93:09:0f:ac:9c:82:be:29:54:8d:79:dd:
         fb:57:70:8d:87:c1:b3:f8:43:0c:b7:9e:e4:41:b3:13:73:ae:
         72:03:2f:cd:1b:f7:3a:d7:db:92:4d:40:72:fe:fa:66:52:0b:
         55:6c:a1:6b:ff:75:c8:bd:f7:57:e9:34:42:0d:01:fe:b5:37:
         9d:92:af:d2:9a:62:63:6c:5d:4f:ec:d4:89:9b:61:e8:eb:15:
         92:79:4b:51:05:8b:f4:5b:12:c3:7b:65:bc:cc:2a:02:6c:bb:
         e4:ad:a8:5f:e6:c8:3d:80:81:f1:26:5c:d9:1b:84:8e:d8:58:
         e4:53:ec:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----