This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/46CF21516B99BC1DC0B92EECA44503BF2F12FEE0.cer
File:                     46CF21516B99BC1DC0B92EECA44503BF2F12FEE0.cer (raw, json)
Hash identifier:          R6rK1+YtNgqv/bKnXmFwTqLtwrGE3QNfhYfbkZJ5efc=
Subject key identifier:   46:CF:21:51:6B:99:BC:1D:C0:B9:2E:EC:A4:45:03:BF:2F:12:FE:E0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       418AC1027CA9E2F35374861076E57389A5D8E99B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/46CF21516B99BC1DC0B92EECA44503BF2F12FEE0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Nov 2025 21:24:58 +0000
Certificate not after:    Wed 11 Nov 2026 21:29:58 +0000
Subordinate resources:    AS: 263047
                          IP: 45.174.140.0/22
                          IP: 45.188.224.0/22
                          IP: 177.129.208.0/21
                          IP: 186.237.24.0/22
                          IP: 187.61.112.0/21
                          IP: 191.243.144.0/20
                          IP: 2804:908::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8a:c1:02:7c:a9:e2:f3:53:74:86:10:76:e5:73:89:a5:d8:e9:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 12 21:24:58 2025 GMT
            Not After : Nov 11 21:29:58 2026 GMT
        Subject: CN=46CF21516B99BC1DC0B92EECA44503BF2F12FEE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6c:6d:40:5c:62:80:ef:59:42:19:d6:1e:f5:
                    b3:bc:fb:0e:18:c7:61:73:e3:d7:d2:6d:ef:7e:0b:
                    94:63:ed:be:a3:99:67:69:6d:f7:62:82:c5:f6:91:
                    b4:e7:cb:f5:db:e5:5c:e9:67:60:2d:8b:b7:c9:64:
                    16:02:04:a8:6c:1c:d1:b8:ef:90:a6:e1:2b:8f:f9:
                    97:4d:48:f5:75:cf:da:43:e6:bb:6e:29:11:69:ce:
                    55:fd:e4:31:a6:1d:4c:d5:fe:bb:a2:02:f1:a5:0b:
                    1d:af:ae:53:0b:48:50:65:2a:b5:25:f4:ce:6a:72:
                    f8:20:58:ec:fb:ba:43:36:eb:ef:50:1b:30:cf:89:
                    ff:68:ce:0b:8f:3c:e9:4d:07:59:36:9b:f7:1c:56:
                    9a:48:b7:a6:ef:ba:af:9f:93:ba:66:f7:8f:88:b2:
                    12:da:ad:7f:11:5a:d7:51:10:90:f9:a7:1f:ba:54:
                    99:df:55:26:59:6e:90:3b:2c:13:a9:74:d1:65:20:
                    8f:d1:42:37:91:bb:71:45:d9:1c:59:99:79:ef:ca:
                    e1:8e:22:74:a1:4a:c5:49:24:03:8a:02:c6:da:7b:
                    36:7a:f0:63:04:04:f9:35:08:58:98:aa:87:99:33:
                    36:24:ef:6a:61:e8:72:fe:bb:e6:61:71:2b:78:2d:
                    27:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:CF:21:51:6B:99:BC:1D:C0:B9:2E:EC:A4:45:03:BF:2F:12:FE:E0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/46CF21516B99BC1DC0B92EECA44503BF2F12FEE0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.140.0/22
                  45.188.224.0/22
                  177.129.208.0/21
                  186.237.24.0/22
                  187.61.112.0/21
                  191.243.144.0/20
                IPv6:
                  2804:908::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263047

    Signature Algorithm: sha256WithRSAEncryption
         0f:30:ab:78:98:7d:98:cb:fc:67:6d:9b:13:a5:dd:a8:26:fc:
         6f:0f:56:e5:70:d9:96:33:73:5d:20:fe:9b:ad:97:11:01:73:
         b3:66:4a:0e:0a:aa:0c:bc:a7:ea:0a:25:bf:36:29:4f:a9:e0:
         5e:e0:c9:96:a1:d2:66:11:21:ac:28:fe:07:b6:cd:82:44:aa:
         1d:94:66:b4:3e:0f:8e:4e:b1:00:a8:d9:f2:6b:e6:b0:07:a7:
         32:61:81:42:c9:fa:e9:56:3e:0f:5a:d8:bb:88:5b:79:dd:2e:
         57:5f:10:98:a0:f4:94:9b:6b:58:1f:4e:40:80:48:4e:e3:06:
         d0:5b:6b:b5:11:6f:44:64:92:11:7a:f2:2b:40:30:83:83:18:
         95:64:66:d0:5b:fd:eb:40:34:b0:16:bb:18:8b:03:b1:88:3a:
         33:1a:14:a7:4f:5b:ec:16:62:d7:e9:85:2a:4e:ab:ac:f2:b4:
         07:3e:e2:ce:e1:21:b3:90:36:1e:83:37:3d:21:5b:05:b7:ff:
         25:89:a6:89:7e:03:3f:c7:8d:b8:ed:4e:08:ea:cb:a6:9d:a8:
         f5:1f:e1:fd:01:35:14:e4:63:0b:1d:a7:84:e8:06:2f:5d:b6:
         de:48:3a:f1:ad:9a:35:05:aa:1d:40:9b:9d:0c:e1:df:5d:51:
         73:64:a2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:37:18 2025 by rpki-client