This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer
File:                     46347A4C2AE403C996A9371EF62F1CE19E33F606.cer (raw, json)
Hash identifier:          dyHyyqb+mHV5u7YF8sKRwLh+/VT2XrZ8crdjmFVz1qA=
Subject key identifier:   46:34:7A:4C:2A:E4:03:C9:96:A9:37:1E:F6:2F:1C:E1:9E:33:F6:06
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7334D1161C9390F71C1E9194BC9EDE71AC81D6F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/46347A4C2AE403C996A9371EF62F1CE19E33F606.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Nov 2025 05:14:06 +0000
Certificate not after:    Fri 13 Nov 2026 05:19:06 +0000
Subordinate resources:    AS: 262777
                          IP: 45.175.116.0/22
                          IP: 45.235.192.0/22
                          IP: 131.255.48.0/22
                          IP: 138.219.208.0/22
                          IP: 168.121.188.0/22
                          IP: 170.80.180.0/22
                          IP: 177.93.176.0/21
                          IP: 177.128.248.0/21
                          IP: 186.233.16.0/21
                          IP: 2804:814::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:52:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:34:d1:16:1c:93:90:f7:1c:1e:91:94:bc:9e:de:71:ac:81:d6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 14 05:14:06 2025 GMT
            Not After : Nov 13 05:19:06 2026 GMT
        Subject: CN=46347A4C2AE403C996A9371EF62F1CE19E33F606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8a:c3:18:8b:f3:e0:a4:01:58:dc:b4:cd:94:
                    08:68:5d:5c:aa:56:f9:67:da:2b:1a:59:e0:14:39:
                    06:a8:3c:2a:eb:5a:0c:ac:73:62:9f:78:a3:eb:5b:
                    b7:02:8f:f5:ea:ee:0f:68:cb:1d:c5:5f:79:62:cb:
                    52:fe:0e:8d:51:a8:e1:fc:0a:50:00:c7:ff:cd:de:
                    81:dd:1c:e2:c6:21:78:38:e0:f5:5e:9a:e5:c8:1f:
                    98:a2:23:43:e7:99:f8:9e:db:14:20:ad:c4:c8:0b:
                    9b:a9:06:d3:04:24:90:8a:c2:d1:31:ba:23:a7:12:
                    37:41:83:90:9c:9a:2c:1c:4e:96:aa:75:f9:6d:7f:
                    ca:7f:f5:d7:fa:c6:14:7c:5b:8f:ce:b8:00:99:5a:
                    5a:31:38:11:68:17:4e:12:05:9d:70:2e:de:b1:b3:
                    11:42:6e:45:94:2f:f8:36:8b:83:f9:e7:d5:f4:f2:
                    73:53:44:86:75:9d:0a:ce:84:5f:0a:c2:50:1f:94:
                    d4:31:7f:87:08:39:55:64:38:ab:91:bb:0d:01:fd:
                    7c:eb:4c:db:46:02:ba:54:b1:08:c9:ce:bc:90:be:
                    d2:11:30:78:3e:d2:e4:c4:15:fd:e7:bf:b8:57:4a:
                    ee:a1:b0:64:1c:ef:03:bc:e6:f4:38:65:ec:5d:86:
                    82:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:34:7A:4C:2A:E4:03:C9:96:A9:37:1E:F6:2F:1C:E1:9E:33:F6:06
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/46347A4C2AE403C996A9371EF62F1CE19E33F606.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.116.0/22
                  45.235.192.0/22
                  131.255.48.0/22
                  138.219.208.0/22
                  168.121.188.0/22
                  170.80.180.0/22
                  177.93.176.0/21
                  177.128.248.0/21
                  186.233.16.0/21
                IPv6:
                  2804:814::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262777

    Signature Algorithm: sha256WithRSAEncryption
         63:46:6f:5f:e1:4e:44:80:51:b8:4b:e9:08:14:0c:ce:b0:31:
         73:66:da:93:37:0b:34:2c:b8:7a:65:5b:32:be:fc:8b:7e:ff:
         0b:da:b3:61:fd:7f:5a:0c:1a:43:ea:09:52:8d:15:f3:7d:27:
         f8:22:d2:b8:c4:b2:8b:4d:e6:d7:b3:bd:2d:f8:c3:f4:62:5d:
         64:9d:9a:73:7a:15:cc:41:d0:92:3e:b9:1e:b3:d6:32:69:80:
         f0:be:5b:76:a6:4e:76:63:a8:42:ca:82:4b:7d:5f:c9:33:01:
         00:db:29:dc:fd:8e:cb:40:5a:9b:4c:e9:fc:96:c5:4d:30:62:
         fc:56:d6:ee:87:c5:6c:e2:74:ad:57:1b:b4:9b:af:28:fc:2c:
         a0:46:89:69:6a:88:c4:1d:9d:e2:d0:28:bd:42:fe:8a:f8:0e:
         59:80:fa:3a:92:1e:b2:61:88:fc:3b:5e:1c:ca:3f:7a:97:e3:
         37:1f:dd:fe:8f:fa:ec:6c:ab:ab:e3:75:eb:0a:90:3f:bf:7b:
         3d:69:bc:de:8d:b3:78:08:47:68:49:dc:f2:aa:72:6c:7f:45:
         84:0d:ac:91:e7:45:09:03:40:36:dc:90:f9:73:44:80:c5:63:
         3b:b7:92:45:d4:42:68:8e:80:bf:ff:42:18:6a:65:da:65:81:
         f9:65:13:c9
-----BEGIN CERTIFICATE-----
MIIGYDCCBUigAwIBAgIUczTRFhyTkPccHpGUvJ7ecayB1vAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTExMTQwNTE0MDZaFw0yNjExMTMwNTE5MDZaMDMxMTAvBgNV
BAMTKDQ2MzQ3QTRDMkFFNDAzQzk5NkE5MzcxRUY2MkYxQ0UxOUUzM0Y2MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyisMYi/PgpAFY3LTNlAhoXVyq
Vvln2isaWeAUOQaoPCrrWgysc2KfeKPrW7cCj/Xq7g9oyx3FX3liy1L+Do1RqOH8
ClAAx//N3oHdHOLGIXg44PVemuXIH5iiI0Pnmfie2xQgrcTIC5upBtMEJJCKwtEx
uiOnEjdBg5CcmiwcTpaqdfltf8p/9df6xhR8W4/OuACZWloxOBFoF04SBZ1wLt6x
sxFCbkWUL/g2i4P559X08nNTRIZ1nQrOhF8KwlAflNQxf4cIOVVkOKuRuw0B/Xzr
TNtGArpUsQjJzryQvtIRMHg+0uTEFf3nv7hXSu6hsGQc7wO85vQ4ZexdhoKXAgMB
AAGjggNqMIIDZjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRGNHpMKuQDyZap
Nx72LxzhnjP2BjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2FV
UzZqVzlKblFDVFM3akUyaTNMS1V0aGZub3hLV3ZrdWh2amdWQlpNS2IvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dh
VVM2alc5Sm5RQ1RTN2pFMmkzTEtVdGhmbm94S1d2a3VodmpnVkJaTUtiLzAvNDYz
NDdBNEMyQUU0MDNDOTk2QTkzNzFFRjYyRjFDRTE5RTMzRjYwNi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEH
AQH/BE8wTTA8BAIAATA2AwQCLa90AwQCLevAAwQCg/8wAwQCitvQAwQCqHm8AwQC
qlC0AwQDsV2wAwQDsYD4AwQDuukQMA0EAgACMAcDBQAoBAgUMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQCeTANBgkqhkiG9w0BAQsFAAOCAQEAY0ZvX+FORIBRuEvp
CBQMzrAxc2bakzcLNCy4emVbMr78i37/C9qzYf1/WgwaQ+oJUo0V830n+CLSuMSy
i03m17O9LfjD9GJdZJ2ac3oVzEHQkj65HrPWMmmA8L5bdqZOdmOoQsqCS31fyTMB
ANsp3P2Oy0Bam0zp/JbFTTBi/FbW7ofFbOJ0rVcbtJuvKPwsoEaJaWqIxB2d4tAo
vUL+ivgOWYD6OpIesmGI/DteHMo/epfjNx/d/o/67Gyrq+N16wqQP797PWm83o2z
eAhHaEnc8qpybH9FhA2skedFCQNANtyQ+XNEgMVjO7eSRdRCaI6Av/9CGGpl2mWB
+WUTyQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:04:04 2025 by rpki-client