This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/468FA81CA7EA7737E96A534E0B0E4607D730A871.cer
File:                     468FA81CA7EA7737E96A534E0B0E4607D730A871.cer (raw, json)
Hash identifier:          6wgc2dZ9QFPWmxe1TaHZYqrwRRdhK+yWpZ5ONzSdurM=
Subject key identifier:   46:8F:A8:1C:A7:EA:77:37:E9:6A:53:4E:0B:0E:46:07:D7:30:A8:71
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5CEC075F9B7F11D7A6C17EDB4C309E9DBF8BC84E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8NoxCVubG3X6KymSNVX87WEFnMzXotMt3gbGohv6PMtV/0/468FA81CA7EA7737E96A534E0B0E4607D730A871.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8NoxCVubG3X6KymSNVX87WEFnMzXotMt3gbGohv6PMtV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Nov 2025 17:38:50 +0000
Certificate not after:    Thu 05 Nov 2026 17:43:50 +0000
Subordinate resources:    AS: 269114
                          IP: 45.180.28.0/22
                          IP: 2804:5fa4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ec:07:5f:9b:7f:11:d7:a6:c1:7e:db:4c:30:9e:9d:bf:8b:c8:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  6 17:38:50 2025 GMT
            Not After : Nov  5 17:43:50 2026 GMT
        Subject: CN=468FA81CA7EA7737E96A534E0B0E4607D730A871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a0:a1:d3:56:e7:b1:30:0a:3d:e8:d1:80:de:
                    eb:b3:af:05:2e:ed:a0:e7:78:49:d0:0d:0c:92:b6:
                    d6:26:0f:60:e6:2e:7f:f5:a3:d3:aa:2b:2f:13:25:
                    95:5f:43:da:36:c2:ab:d3:5f:be:87:49:8b:da:ec:
                    be:d3:dd:c7:ab:f8:a0:15:ff:57:7d:d9:0a:e6:f1:
                    e9:2e:df:ba:91:1b:60:78:3e:92:8e:12:2b:b6:54:
                    25:21:19:03:a3:fa:b4:08:cf:4a:01:a9:36:fd:ce:
                    cb:eb:aa:be:a5:f9:8c:5f:e6:62:3d:ce:a5:dc:b8:
                    7d:c4:91:d4:06:3c:b5:6b:15:49:b0:c5:85:ca:75:
                    e2:02:c9:3f:c6:a4:47:d0:ec:09:86:ae:d3:2f:6d:
                    71:eb:5a:ee:2f:65:2e:08:d0:09:c0:52:c1:35:1a:
                    da:13:8c:d7:1b:89:14:cf:c1:bd:d5:de:90:30:40:
                    ec:dc:28:2f:56:83:8f:11:e7:b5:b4:6b:b2:b2:11:
                    d6:e9:3d:b3:a4:5e:29:82:aa:50:4f:fc:44:9b:09:
                    d3:f3:ef:e6:40:62:13:55:51:41:7c:c5:9d:40:e4:
                    0c:72:a0:ad:2a:e3:55:0a:47:47:32:4f:cb:07:fe:
                    04:89:76:4d:6e:74:a6:35:fb:d5:c3:c4:88:61:50:
                    d9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:8F:A8:1C:A7:EA:77:37:E9:6A:53:4E:0B:0E:46:07:D7:30:A8:71
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8NoxCVubG3X6KymSNVX87WEFnMzXotMt3gbGohv6PMtV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8NoxCVubG3X6KymSNVX87WEFnMzXotMt3gbGohv6PMtV/0/468FA81CA7EA7737E96A534E0B0E4607D730A871.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.28.0/22
                IPv6:
                  2804:5fa4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269114

    Signature Algorithm: sha256WithRSAEncryption
         2e:b4:4a:87:ae:ff:fe:62:eb:ed:4b:6c:75:a1:21:5b:0e:23:
         5d:82:e0:37:e0:a2:15:fe:26:13:a1:b5:f3:e5:dd:2e:18:46:
         e3:ba:bf:3a:6a:a4:d6:0b:29:3b:83:bc:16:ce:9e:f2:94:38:
         83:0f:37:2f:ef:dd:54:cb:be:d7:f1:bd:f2:6e:aa:fa:79:97:
         cd:e4:b6:f9:78:e0:70:6c:83:47:81:a3:d8:db:4d:71:d5:e1:
         5a:0b:f1:d7:c0:8d:69:ab:8f:34:7e:df:08:db:4b:cb:66:08:
         9b:c6:f8:d3:a0:f7:e5:3d:fc:5c:9e:0d:13:e9:a8:b3:8f:50:
         a2:d7:9c:d7:a3:db:12:9e:d1:83:97:a4:de:c8:fc:d0:20:f5:
         76:7c:9b:44:21:af:61:5e:7a:db:91:d8:72:72:0c:03:22:22:
         d8:ea:bf:e3:b3:0e:27:44:d8:1c:6e:41:a2:ea:ab:26:c2:67:
         d6:e4:54:03:b2:39:c8:6d:63:38:63:5a:78:4e:68:2a:6e:c4:
         02:3b:89:a4:de:e0:51:b7:75:3f:4e:71:8b:60:26:d3:5a:98:
         d6:6b:4b:85:71:3e:0a:fb:b1:67:38:5d:8b:3c:43:93:ad:57:
         46:b9:2a:0c:d9:56:84:95:f5:a9:97:86:8a:8a:68:1e:2a:2c:
         89:83:6f:cd
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUXOwHX5t/EdemwX7bTDCenb+LyE4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTExMDYxNzM4NTBaFw0yNjExMDUxNzQzNTBaMDMxMTAvBgNV
BAMTKDQ2OEZBODFDQTdFQTc3MzdFOTZBNTM0RTBCMEU0NjA3RDczMEE4NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQoKHTVuexMAo96NGA3uuzrwUu
7aDneEnQDQySttYmD2DmLn/1o9OqKy8TJZVfQ9o2wqvTX76HSYva7L7T3cer+KAV
/1d92Qrm8eku37qRG2B4PpKOEiu2VCUhGQOj+rQIz0oBqTb9zsvrqr6l+Yxf5mI9
zqXcuH3EkdQGPLVrFUmwxYXKdeICyT/GpEfQ7AmGrtMvbXHrWu4vZS4I0AnAUsE1
GtoTjNcbiRTPwb3V3pAwQOzcKC9Wg48R57W0a7KyEdbpPbOkXimCqlBP/ESbCdPz
7+ZAYhNVUUF8xZ1A5AxyoK0q41UKR0cyT8sH/gSJdk1udKY1+9XDxIhhUNkzAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRGj6gcp+p3N+lq
U04LDkYH1zCocTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOE5v
eENWdWJHM1g2S3ltU05WWDg3V0VGbk16WG90TXQzZ2JHb2h2NlBNdFYvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhO
b3hDVnViRzNYNkt5bVNOVlg4N1dFRm5NelhvdE10M2diR29odjZQTXRWLzAvNDY4
RkE4MUNBN0VBNzczN0U5NkE1MzRFMEIwRTQ2MDdENzMwQTg3MS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbQcMA0EAgACMAcDBQAoBF+kMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQbOjANBgkqhkiG9w0BAQsFAAOCAQEALrRKh67//mLr7Uts
daEhWw4jXYLgN+CiFf4mE6G18+XdLhhG47q/Omqk1gspO4O8Fs6e8pQ4gw83L+/d
VMu+1/G98m6q+nmXzeS2+XjgcGyDR4Gj2NtNcdXhWgvx18CNaauPNH7fCNtLy2YI
m8b406D35T38XJ4NE+mos49Qotec16PbEp7Rg5ek3sj80CD1dnybRCGvYV5625HY
cnIMAyIi2Oq/47MOJ0TYHG5BouqrJsJn1uRUA7I5yG1jOGNaeE5oKm7EAjuJpN7g
Ubd1P05xi2Am01qY1mtLhXE+CvuxZzhdizxDk61XRrkqDNlWhJX1qZeGiopoHios
iYNvzQ==
-----END CERTIFICATE-----