This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.cer
File:                     49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.cer (raw, json)
Hash identifier:          ORJ26ZPzVfxmMeVaLwOSBIRFBj4JtIRWuyVOR7bGpiE=
Subject key identifier:   49:BF:C5:F0:22:E6:2E:C9:09:AC:DF:C2:D2:BB:CA:D6:E9:0F:6A:DB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4D98755DEF0EDF1299A350F13A9A2851096CD7C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 19 Nov 2025 17:03:36 +0000
Certificate not after:    Wed 18 Nov 2026 17:08:36 +0000
Subordinate resources:    AS: 61657
                          IP: 131.100.252.0/22
                          IP: 2804:1c80::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:98:75:5d:ef:0e:df:12:99:a3:50:f1:3a:9a:28:51:09:6c:d7:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 19 17:03:36 2025 GMT
            Not After : Nov 18 17:08:36 2026 GMT
        Subject: CN=49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e5:4f:cf:53:65:54:1c:09:b9:ca:d0:a8:8e:
                    d1:76:fc:0a:4a:45:f4:98:9f:32:3a:8c:a9:9f:77:
                    0d:a9:8e:c9:0a:8e:94:14:6a:60:4c:30:ec:0a:05:
                    b0:52:ec:73:a9:fa:97:32:78:b3:33:cf:14:94:d8:
                    62:b9:6d:af:61:26:e8:75:a0:44:9c:53:38:1c:bf:
                    62:81:6c:fa:5f:af:75:e6:a3:78:05:da:49:40:63:
                    ae:40:d4:c2:63:fb:7c:ed:02:9a:77:42:dd:c5:97:
                    6b:7a:4d:06:6f:5d:31:ce:59:ac:4f:85:38:2e:a4:
                    d0:2e:27:e4:5d:ca:2a:4a:d6:c8:c8:f8:7b:b1:e6:
                    53:b9:ad:99:c1:b8:81:19:32:71:e6:56:55:de:81:
                    e0:01:19:86:fe:62:a4:ad:eb:52:14:42:fe:70:1f:
                    c5:dd:91:80:8e:ed:ac:60:3f:66:c8:d4:b7:91:ae:
                    b1:84:66:83:50:26:48:4b:34:1a:27:31:8c:39:f3:
                    2a:11:02:a2:5c:31:d4:1d:5e:f9:71:68:a5:b5:c9:
                    9f:5a:25:28:57:71:1e:a9:c3:87:9b:73:aa:a9:f4:
                    c6:ca:ce:f1:fc:f7:31:bf:5d:25:2b:ed:a7:30:6d:
                    5a:88:01:7f:e7:f8:b2:cf:26:1c:13:ea:7d:f6:37:
                    54:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:BF:C5:F0:22:E6:2E:C9:09:AC:DF:C2:D2:BB:CA:D6:E9:0F:6A:DB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.252.0/22
                IPv6:
                  2804:1c80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61657

    Signature Algorithm: sha256WithRSAEncryption
         46:de:87:ed:b6:bd:00:4d:0e:25:f0:11:3d:24:06:30:bf:d4:
         bd:ba:ca:f0:73:15:fa:b7:11:5f:80:92:c9:ef:71:42:cf:41:
         4b:13:70:d3:4f:30:11:32:0d:d5:83:01:02:ab:03:b0:65:ca:
         7e:5d:57:ff:47:61:86:75:93:27:70:06:c7:7b:13:9f:34:3a:
         3a:a0:c2:35:95:73:aa:f0:47:1e:c5:6b:89:c2:f7:42:21:86:
         e9:17:9d:5b:bb:5d:a1:10:1f:f2:34:f4:19:3b:c1:3a:27:97:
         fc:26:2d:8c:30:11:43:19:08:5b:29:81:5f:af:71:a6:31:15:
         dc:d9:d4:56:e4:8a:97:e3:47:06:e4:27:34:37:60:4d:b2:ee:
         b5:d1:e5:10:85:a3:91:4a:38:90:c1:0c:2e:d0:2b:f0:4a:1d:
         59:58:ed:ec:22:06:ff:61:8b:1d:ba:e0:52:7c:e1:05:61:c6:
         31:02:90:99:26:0e:2c:4c:c8:d5:a2:25:61:59:9b:46:99:3e:
         47:9a:60:4a:7b:e1:57:25:85:a5:e6:44:97:64:3c:9c:ff:a7:
         73:3b:f7:1f:6d:c4:47:b6:c2:de:84:fb:58:02:46:3f:94:c1:
         f7:fe:87:86:75:1b:65:9d:a5:1d:89:16:73:de:a3:a5:44:93:
         1b:8d:c2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----