This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/42F151EC6332FC2768F7C46E57772FDBBFA6D092.cer
File:                     42F151EC6332FC2768F7C46E57772FDBBFA6D092.cer (raw, json)
Hash identifier:          1fl8sSrgoKRBKp2n7F0FZI0EMR1ePoStYnEHv2bdfoM=
Subject key identifier:   42:F1:51:EC:63:32:FC:27:68:F7:C4:6E:57:77:2F:DB:BF:A6:D0:92
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2E0B0145F9B51E65F64FAD32A2F376995A89CE1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/42F151EC6332FC2768F7C46E57772FDBBFA6D092.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Dec 2025 16:47:24 +0000
Certificate not after:    Wed 02 Dec 2026 16:52:24 +0000
Subordinate resources:    AS: 262594
                          IP: 177.84.240.0/21
                          IP: 2804:68c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:0b:01:45:f9:b5:1e:65:f6:4f:ad:32:a2:f3:76:99:5a:89:ce:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  3 16:47:24 2025 GMT
            Not After : Dec  2 16:52:24 2026 GMT
        Subject: CN=42F151EC6332FC2768F7C46E57772FDBBFA6D092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:14:dc:07:04:62:ed:d1:3c:c1:80:fd:e9:94:
                    e0:27:35:71:c1:07:24:ae:48:cb:2b:72:94:49:f3:
                    ed:53:aa:f8:00:77:92:63:95:19:6f:7a:43:dd:c3:
                    b0:da:8e:b6:a5:ec:11:ab:b1:52:32:8e:9d:9f:44:
                    b5:6f:73:80:80:f2:2f:a9:25:58:04:6f:7c:8e:20:
                    3b:12:81:48:d9:3f:64:c4:63:d0:cb:e9:c6:41:a5:
                    5f:cc:29:82:ac:f5:4b:0f:3a:e1:38:56:32:e1:40:
                    c8:57:99:42:55:93:02:d0:c9:d5:61:89:fa:ee:98:
                    0b:82:0a:29:5f:75:a5:fe:c4:93:0b:d0:e1:49:88:
                    a6:2a:40:f8:ef:b7:91:b4:27:4d:ec:1b:bb:d8:e7:
                    d4:58:21:f0:d6:5b:67:c4:38:b4:c9:b5:a4:fc:aa:
                    09:25:d0:f4:2c:02:71:51:01:22:8a:5c:78:49:07:
                    fd:90:e7:57:ff:eb:be:4f:67:d2:6c:5c:83:d8:17:
                    6e:32:64:07:52:83:65:9b:0d:9a:97:8b:d3:95:99:
                    c2:8b:9d:26:b6:34:5f:43:2e:b5:d0:b9:6e:fd:51:
                    8d:31:f8:04:ec:67:c3:e7:98:8e:d1:85:9c:87:19:
                    a9:c6:bf:8e:99:78:10:5b:a9:54:55:c1:2b:12:23:
                    0e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:F1:51:EC:63:32:FC:27:68:F7:C4:6E:57:77:2F:DB:BF:A6:D0:92
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6FFhxBJ55Jr7xJSkra3sTtjzFBspWkqxG6LAtPyyK4go/0/42F151EC6332FC2768F7C46E57772FDBBFA6D092.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.240.0/21
                IPv6:
                  2804:68c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262594

    Signature Algorithm: sha256WithRSAEncryption
         86:8c:50:15:39:21:19:51:d6:93:ea:22:46:74:a9:86:81:cd:
         ac:e6:0f:00:66:ff:78:75:62:24:eb:e6:d3:8a:c8:c8:7a:95:
         d6:94:cd:d9:85:7e:4f:42:ab:30:81:a1:1f:d3:55:fe:f6:db:
         34:b9:2b:af:cd:75:af:83:ca:2e:f1:92:5f:44:f5:cd:e0:53:
         10:f2:68:09:5c:d8:20:e1:6e:4b:a0:34:28:26:05:5a:79:11:
         0b:a0:56:7a:2a:ac:42:b6:45:20:54:e3:b2:0e:6b:60:1b:71:
         b7:e7:f9:56:a9:77:a9:ee:b3:e7:29:2d:9e:96:00:03:d3:4a:
         29:1c:0e:60:90:58:41:58:22:83:8d:91:77:b4:c1:be:eb:82:
         f1:34:d6:56:be:6d:ed:35:7e:ea:40:a6:89:72:14:af:0e:42:
         2b:91:a6:e3:91:e2:4f:2f:95:16:2c:d9:8a:a1:25:0d:c8:d1:
         a8:2f:7e:52:bc:89:eb:65:7c:7a:3c:50:f8:6e:5b:d1:58:5d:
         60:f3:04:16:0c:8e:50:ee:d5:8f:82:1c:22:0e:37:db:7f:29:
         60:9b:18:cb:f9:ff:97:70:13:17:fb:14:b4:c0:33:8e:c6:a7:
         73:e2:f8:0d:4a:38:bc:e4:87:2f:7e:b6:82:0d:3b:16:7a:1c:
         3e:52:41:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----