This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer
File:                     4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer (raw, json)
Hash identifier:          Wlxfouui7tPMZA1Cnb9ZYCEGF2kOeB5KtUwxgGmFKS4=
Subject key identifier:   4E:E0:AA:39:E5:67:32:05:B6:15:B1:33:7C:24:E8:6F:BC:D3:C6:35
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       54E86597BFE2AE3342842371EDDA4F2AB1B0C803
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Nov 2025 19:55:02 +0000
Certificate not after:    Thu 05 Nov 2026 20:00:02 +0000
Subordinate resources:    AS: 266338
                          IP: 170.238.184.0/22
                          IP: 2804:3644::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:52:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e8:65:97:bf:e2:ae:33:42:84:23:71:ed:da:4f:2a:b1:b0:c8:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  6 19:55:02 2025 GMT
            Not After : Nov  5 20:00:02 2026 GMT
        Subject: CN=4EE0AA39E5673205B615B1337C24E86FBCD3C635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:08:86:ea:70:23:c6:d3:bf:35:33:88:d7:e7:
                    e8:ce:d1:b0:0d:bd:7f:7a:64:f4:30:9a:66:22:e9:
                    15:df:a7:d7:df:41:10:af:9f:85:92:55:bc:4a:4c:
                    29:34:4e:1f:09:f9:b5:34:22:71:2b:21:02:86:e9:
                    0c:9d:24:34:ab:91:97:e5:f3:4c:64:57:90:6b:56:
                    08:e2:d6:21:b6:d0:c8:14:67:73:c9:3d:c1:1b:0d:
                    11:3c:a0:a8:20:c4:5c:91:7e:0f:e2:35:63:e4:12:
                    4c:37:19:4a:1a:a2:9d:fb:70:99:74:3f:47:99:21:
                    14:0a:20:f8:c1:08:a7:40:67:fe:04:22:d6:20:a8:
                    8c:f5:7b:ac:f4:f9:77:28:01:62:e6:31:f6:e7:25:
                    b9:d0:bb:04:d4:42:76:e2:1c:54:22:95:91:b5:00:
                    26:b5:56:82:d8:e5:f8:e1:4b:69:84:a8:05:8d:08:
                    28:e7:d4:82:3e:de:96:b6:bb:f8:68:18:5d:41:7b:
                    92:cc:9f:08:c5:32:25:68:31:2f:20:8a:37:37:e8:
                    5e:f1:2f:a3:66:86:20:e6:00:02:b8:4a:56:09:ee:
                    12:25:ed:0a:a1:dd:4b:a2:14:d2:48:55:0a:6c:82:
                    ba:31:d4:e7:0c:1f:e2:a0:1d:9d:aa:51:51:32:65:
                    d2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4E:E0:AA:39:E5:67:32:05:B6:15:B1:33:7C:24:E8:6F:BC:D3:C6:35
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.184.0/22
                IPv6:
                  2804:3644::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266338

    Signature Algorithm: sha256WithRSAEncryption
         68:fd:5f:69:16:a0:01:17:af:4f:8a:1c:5a:bb:3f:6a:25:79:
         d6:d1:e1:5f:76:14:b4:ee:01:de:2e:63:28:5c:b9:6c:24:9f:
         07:a0:23:ea:8a:5c:3d:03:d7:d2:6e:55:d0:01:36:bc:fd:df:
         d6:79:b7:33:0d:85:6b:e8:33:cb:6c:6b:e7:ce:81:85:f0:a1:
         1d:f0:c8:9e:3d:f6:17:6d:4f:29:65:0d:46:15:b6:18:d7:24:
         10:cd:66:4b:37:7d:a9:71:3b:e4:74:22:82:87:26:3c:98:c8:
         74:b3:68:6b:b0:7c:22:d3:48:c5:43:b4:83:41:77:a1:af:7a:
         e6:fa:02:f8:e2:0c:73:4a:02:58:81:b0:94:3d:67:d3:51:33:
         76:c4:10:da:10:3f:1b:4a:84:2f:c4:6d:92:e3:6f:5a:71:6a:
         ae:59:68:67:54:62:03:57:d6:2f:a3:e3:fc:3b:10:87:c8:1b:
         2c:cb:ac:d7:4b:8c:04:de:88:35:c3:18:1c:96:a9:51:a8:1f:
         cd:82:14:05:be:bf:e2:10:c6:c1:bf:0b:d5:8f:11:94:df:7e:
         d7:80:52:c5:f3:3a:86:44:ca:90:12:f9:a5:7e:48:cb:73:88:
         79:6c:d3:37:70:2c:91:08:70:42:b6:5c:a9:1e:15:32:90:69:
         00:d0:5d:3b
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUVOhll7/irjNChCNx7dpPKrGwyAMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTExMDYxOTU1MDJaFw0yNjExMDUyMDAwMDJaMDMxMTAvBgNV
BAMTKDRFRTBBQTM5RTU2NzMyMDVCNjE1QjEzMzdDMjRFODZGQkNEM0M2MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0CIbqcCPG0781M4jX5+jO0bAN
vX96ZPQwmmYi6RXfp9ffQRCvn4WSVbxKTCk0Th8J+bU0InErIQKG6QydJDSrkZfl
80xkV5BrVgji1iG20MgUZ3PJPcEbDRE8oKggxFyRfg/iNWPkEkw3GUoaop37cJl0
P0eZIRQKIPjBCKdAZ/4EItYgqIz1e6z0+XcoAWLmMfbnJbnQuwTUQnbiHFQilZG1
ACa1VoLY5fjhS2mEqAWNCCjn1II+3pa2u/hoGF1Be5LMnwjFMiVoMS8gijc36F7x
L6NmhiDmAAK4SlYJ7hIl7Qqh3UuiFNJIVQpsgrox1OcMH+KgHZ2qUVEyZdLdAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRO4Ko55WcyBbYV
sTN8JOhvvNPGNTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ002
MVlYNDhGeHZxOVVUSzU3YUdRNVpmaEsxajhwamlvaHBVS05wZWtINTUvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NN
NjFZWDQ4Rnh2cTlVVEs1N2FHUTVaZmhLMWo4cGppb2hwVUtOcGVrSDU1LzEvNEVF
MEFBMzlFNTY3MzIwNUI2MTVCMTMzN0MyNEU4NkZCQ0QzQzYzNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqu64MA0EAgACMAcDBQAoBDZEMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQQYjANBgkqhkiG9w0BAQsFAAOCAQEAaP1faRagARevT4oc
Wrs/aiV51tHhX3YUtO4B3i5jKFy5bCSfB6Aj6opcPQPX0m5V0AE2vP3f1nm3Mw2F
a+gzy2xr586BhfChHfDInj32F21PKWUNRhW2GNckEM1mSzd9qXE75HQigocmPJjI
dLNoa7B8ItNIxUO0g0F3oa965voC+OIMc0oCWIGwlD1n01EzdsQQ2hA/G0qEL8Rt
kuNvWnFqrlloZ1RiA1fWL6Pj/DsQh8gbLMus10uMBN6INcMYHJapUagfzYIUBb6/
4hDGwb8L1Y8RlN9+14BSxfM6hkTKkBL5pX5Iy3OIeWzTN3AskQhwQrZcqR4VMpBp
ANBdOw==
-----END CERTIFICATE-----