This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/30749C5E57A887A5B2B8370496E94AA79DC8B198.cer
File:                     30749C5E57A887A5B2B8370496E94AA79DC8B198.cer (raw, json)
Hash identifier:          ueLXcapjTyaWMin2yjXS11q/Xl9DtyFac68f+qTThaU=
Subject key identifier:   30:74:9C:5E:57:A8:87:A5:B2:B8:37:04:96:E9:4A:A7:9D:C8:B1:98
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1685277CF873B8D9D8EDA80C24061A615CD8A6EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/30749C5E57A887A5B2B8370496E94AA79DC8B198.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Nov 2025 18:34:28 +0000
Certificate not after:    Fri 20 Nov 2026 18:39:28 +0000
Subordinate resources:    AS: 266536
                          IP: 45.65.184.0/22
                          IP: 2804:3d84::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:52:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:85:27:7c:f8:73:b8:d9:d8:ed:a8:0c:24:06:1a:61:5c:d8:a6:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 21 18:34:28 2025 GMT
            Not After : Nov 20 18:39:28 2026 GMT
        Subject: CN=30749C5E57A887A5B2B8370496E94AA79DC8B198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:85:98:12:1e:3e:26:3e:f2:db:c6:41:dc:04:
                    50:0e:3b:5d:74:b6:81:7d:7e:c6:35:bc:47:5a:da:
                    95:cf:c2:52:77:97:ff:fd:00:b5:b5:c8:9a:a5:e1:
                    44:53:47:b2:a6:b4:77:6d:79:9a:c2:72:18:b3:64:
                    b9:36:15:01:de:ed:ce:d6:58:1f:08:a6:67:63:1c:
                    44:5f:f2:24:6c:fc:01:8a:a2:7c:b8:8d:23:31:fd:
                    c2:26:1a:03:ac:b4:8b:ad:25:b2:1a:37:21:6d:50:
                    cc:e7:98:3d:f8:34:80:43:78:0c:5c:dc:4c:ee:b3:
                    71:ef:64:19:99:e2:cc:21:65:68:f8:f0:c4:c8:8c:
                    5f:71:3c:01:30:c9:83:43:a0:24:ae:34:16:85:1f:
                    3d:3f:d3:64:08:1e:37:9d:fc:04:ab:a6:d7:7d:cd:
                    05:e4:d7:97:3e:5a:81:1e:11:3f:50:e2:51:ba:1f:
                    1b:d0:74:ed:a2:a1:17:9a:cc:c0:fc:5a:3b:2f:44:
                    3f:05:ce:35:18:4d:ca:dd:36:4f:cd:29:e3:38:0a:
                    91:1b:e1:c9:54:05:4d:83:fe:2f:45:96:b5:1b:00:
                    03:8d:75:c8:17:6a:e3:99:97:aa:86:ae:8a:1b:8d:
                    89:5a:29:e3:0f:06:94:c7:34:25:9c:8f:ce:e2:49:
                    b6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:74:9C:5E:57:A8:87:A5:B2:B8:37:04:96:E9:4A:A7:9D:C8:B1:98
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5GF85uHFA8VWBSrYLoJQYrufq9UWAriMpWkE9unnm2gJ/0/30749C5E57A887A5B2B8370496E94AA79DC8B198.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.184.0/22
                IPv6:
                  2804:3d84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266536

    Signature Algorithm: sha256WithRSAEncryption
         c4:61:b4:2f:e2:f2:e1:8d:f6:0d:cf:0f:e9:05:15:33:7c:9c:
         23:10:b3:64:52:b1:e9:e8:98:13:7d:b5:06:1e:0c:00:1c:8e:
         8b:2c:51:d2:7b:15:c5:73:64:5e:c0:16:02:e1:91:6d:3d:c8:
         38:cb:e2:99:cd:53:e8:73:f7:fa:21:41:b0:b2:15:00:39:18:
         de:03:e2:52:3c:65:94:ee:d0:1b:7d:07:e6:5f:6b:5c:cc:82:
         50:f4:08:70:c7:e1:7c:84:d2:54:50:7a:71:9b:89:68:6e:64:
         6e:f3:a9:fd:49:c4:84:e5:ba:f8:3f:79:b0:cd:ec:15:7d:9e:
         2f:ab:72:3e:8b:54:37:34:7d:ae:5e:db:2b:9d:49:6d:22:51:
         4d:b7:30:af:11:c3:4e:51:e0:25:45:f7:db:31:ed:40:7c:41:
         8c:ea:eb:8f:67:f0:50:10:11:eb:c5:99:f1:09:27:fa:65:33:
         90:ab:45:25:21:a7:60:50:e2:4d:bb:cf:3a:6f:4a:4a:ba:92:
         47:1b:88:d1:c5:51:03:dd:9c:77:2d:0b:88:79:f2:a8:c1:bd:
         ae:73:92:f6:16:ee:f0:eb:54:88:ea:fa:f8:bb:b9:05:95:d6:
         09:dd:90:d3:7d:62:07:19:f2:88:0d:44:50:14:d2:74:fe:c2:
         97:0a:d4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----