This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer
File:                     2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer (raw, json)
Hash identifier:          Ids1ofrDrjwsLowVC1rAp8QnpmvePByYGBAVGOgx+Ug=
Subject key identifier:   2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0FD20AFA200FCCF0F0C92D90C73692F89BD1177A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Nov 2025 18:43:14 +0000
Certificate not after:    Thu 05 Nov 2026 18:48:14 +0000
Subordinate resources:    AS: 269699
                          IP: 45.191.252.0/22
                          IP: 2804:6888::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 08:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d2:0a:fa:20:0f:cc:f0:f0:c9:2d:90:c7:36:92:f8:9b:d1:17:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  6 18:43:14 2025 GMT
            Not After : Nov  5 18:48:14 2026 GMT
        Subject: CN=2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:28:dc:ed:63:e1:33:00:18:65:43:b6:be:2e:
                    49:b1:b4:0c:3d:50:72:f1:c2:11:7c:74:18:bf:3f:
                    1c:62:fb:cd:e5:77:30:dc:61:c1:5d:18:e5:44:80:
                    e6:86:17:32:5d:22:a4:4f:23:8a:ad:71:b0:54:16:
                    ee:c0:ac:f1:f5:e7:0a:04:4f:15:c8:68:0b:28:f4:
                    d4:8c:30:da:de:2a:49:25:31:28:f8:e5:36:7f:24:
                    fd:fd:b1:06:13:eb:45:21:f1:ed:2b:2d:07:cd:f0:
                    ae:bf:50:c5:53:b0:a3:8a:93:04:20:28:83:1e:8f:
                    1f:0c:6d:08:25:cf:f3:02:0e:87:36:90:4d:3e:2b:
                    51:4d:43:2d:c7:2e:50:16:4b:ce:34:8c:9b:3e:db:
                    0d:63:1a:57:61:46:c0:33:39:24:ca:c8:59:87:a4:
                    cc:c8:d5:98:85:60:75:7b:ca:a2:26:56:2a:51:d0:
                    a0:c0:30:60:fd:56:f4:94:ff:fc:ae:a1:9b:bd:73:
                    d7:8a:bd:ae:81:e6:71:de:95:64:94:4d:a4:ee:95:
                    ad:2b:55:04:c8:b8:b2:60:d1:4b:af:18:d0:2a:ff:
                    71:15:58:f8:33:4b:20:98:a9:53:67:d7:8e:3f:24:
                    7d:65:45:87:70:44:de:0b:94:d8:6c:44:e8:77:d8:
                    07:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.252.0/22
                IPv6:
                  2804:6888::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269699

    Signature Algorithm: sha256WithRSAEncryption
         57:0c:78:11:db:ca:e7:e7:8e:97:3a:27:5c:37:5d:53:d5:5f:
         63:3e:bf:a1:f0:ec:54:8a:b8:3b:96:7f:9b:4d:61:77:af:f2:
         06:75:a4:d8:0b:6c:08:fe:2b:b1:c1:c7:42:bc:5a:04:0b:07:
         9b:41:d7:92:4c:b1:81:e1:bf:8f:4e:ae:2b:e6:8d:2a:0e:3f:
         35:ec:27:81:d6:74:10:8a:02:af:13:b0:67:bc:84:b7:d7:c6:
         af:54:c8:c4:bf:6b:33:ea:bb:51:88:0f:03:2b:0a:e9:c5:f2:
         26:09:3d:a2:e1:5c:b3:2d:ca:87:f6:65:f1:3d:e6:4d:f2:4d:
         32:90:e4:38:39:57:ea:38:b3:aa:a9:51:dd:6b:89:44:54:7f:
         38:6a:8b:01:95:51:c0:a9:ba:ee:7f:05:52:dd:41:38:eb:79:
         f8:25:f2:57:cf:c9:c4:fb:0b:94:53:c9:dd:58:a8:3a:5c:f9:
         05:41:93:12:53:57:b5:c2:3f:02:52:c3:89:9d:b9:af:88:9d:
         3b:2c:4f:0b:87:cc:be:e9:0f:cb:2c:5f:06:2d:93:85:d4:b9:
         32:74:4c:b4:7a:d2:bc:9d:b6:04:62:4b:35:82:9d:dd:00:d1:
         14:6c:39:3f:ee:8c:3c:31:80:b0:c1:fa:8f:5c:44:b7:9c:aa:
         ca:de:a3:72
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUD9IK+iAPzPDwyS2QxzaS+JvRF3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTExMDYxODQzMTRaFw0yNjExMDUxODQ4MTRaMDMxMTAvBgNV
BAMTKDJERDgxQjM3MUU4QUFGOEMxNEUyMzg4OERGRkNBMjY0MkY4QkU2QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6KNztY+EzABhlQ7a+LkmxtAw9
UHLxwhF8dBi/Pxxi+83ldzDcYcFdGOVEgOaGFzJdIqRPI4qtcbBUFu7ArPH15woE
TxXIaAso9NSMMNreKkklMSj45TZ/JP39sQYT60Uh8e0rLQfN8K6/UMVTsKOKkwQg
KIMejx8MbQglz/MCDoc2kE0+K1FNQy3HLlAWS840jJs+2w1jGldhRsAzOSTKyFmH
pMzI1ZiFYHV7yqImVipR0KDAMGD9VvSU//yuoZu9c9eKva6B5nHelWSUTaTula0r
VQTIuLJg0UuvGNAq/3EVWPgzSyCYqVNn144/JH1lRYdwRN4LlNhsROh32Ae7AgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQt2Bs3HoqvjBTi
OIjf/KJkL4vmozAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRGcz
M21Mb2pGSnRvMWVOZUYxOXRCTW1DcFFTTDlZYWRDbUU4QTVScWtSYnYvMDCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRGcz
M21Mb2pGSnRvMWVOZUYxOXRCTW1DcFFTTDlZYWRDbUU4QTVScWtSYnYvMC8yREQ4
MUIzNzFFOEFBRjhDMTRFMjM4ODhERkZDQTI2NDJGOEJFNkEzLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAItv/wwDQQCAAIwBwMFACgEaIgwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBB2DMA0GCSqGSIb3DQEBCwUAA4IBAQBXDHgR28rn546XOidc
N11T1V9jPr+h8OxUirg7ln+bTWF3r/IGdaTYC2wI/iuxwcdCvFoECwebQdeSTLGB
4b+PTq4r5o0qDj817CeB1nQQigKvE7BnvIS318avVMjEv2sz6rtRiA8DKwrpxfIm
CT2i4VyzLcqH9mXxPeZN8k0ykOQ4OVfqOLOqqVHda4lEVH84aosBlVHAqbrufwVS
3UE463n4JfJXz8nE+wuUU8ndWKg6XPkFQZMSU1e1wj8CUsOJnbmviJ07LE8Lh8y+
6Q/LLF8GLZOF1LkydEy0etK8nbYEYks1gp3dANEUbDk/7ow8MYCwwfqPXES3nKrK
3qNy
-----END CERTIFICATE-----