This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5A5C1505E120E2F9F36D17FD29B2D09FBFF726F8.cer
File:                     5A5C1505E120E2F9F36D17FD29B2D09FBFF726F8.cer (raw, json)
Hash identifier:          ih5ZuzjRqFg7eJA++E2GeNWKU1NJQLjEHUs2pmgQ2Go=
Subject key identifier:   5A:5C:15:05:E1:20:E2:F9:F3:6D:17:FD:29:B2:D0:9F:BF:F7:26:F8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4051F4EEB286FC67E4F0DBE9FCDADD9112B49BDD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FHzwLF7EspmpdaxNed9njaRGk8PveTwCnfTE1AtxroLe/0/5A5C1505E120E2F9F36D17FD29B2D09FBFF726F8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FHzwLF7EspmpdaxNed9njaRGk8PveTwCnfTE1AtxroLe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Nov 2025 15:48:59 +0000
Certificate not after:    Wed 11 Nov 2026 15:53:59 +0000
Subordinate resources:    AS: 266104
                          IP: 45.5.192.0/22
                          IP: 2804:3ab4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:51:f4:ee:b2:86:fc:67:e4:f0:db:e9:fc:da:dd:91:12:b4:9b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 12 15:48:59 2025 GMT
            Not After : Nov 11 15:53:59 2026 GMT
        Subject: CN=5A5C1505E120E2F9F36D17FD29B2D09FBFF726F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1b:e0:dc:c9:74:82:57:31:b5:d0:85:8f:98:
                    14:a3:74:51:32:c7:2b:a7:ce:d4:bd:b0:0d:1b:72:
                    1c:ed:74:9c:98:bc:a0:66:08:d8:18:4b:32:4e:15:
                    ae:e4:1f:12:58:63:8b:cc:1f:23:f7:5b:5f:1a:60:
                    7b:d3:5f:9e:0c:56:8a:82:30:41:4a:b7:1f:e3:a9:
                    39:83:81:21:c2:6d:e4:a7:ab:35:3f:89:06:83:14:
                    53:bd:aa:65:a7:a0:02:2d:70:52:6c:c4:e8:71:04:
                    4d:46:c6:29:91:c7:3a:c7:11:58:05:10:0c:88:18:
                    30:7a:56:39:57:05:e2:a6:b0:dd:d4:72:ab:e4:fc:
                    2a:e3:0f:5b:af:0c:d9:7e:2a:d3:6a:5e:ab:9c:6b:
                    c0:cb:50:90:fb:73:18:88:25:d6:cc:20:1b:c2:cb:
                    f7:96:2f:e2:7d:23:db:3d:a6:c4:ac:03:3f:b8:50:
                    0e:32:4c:34:0e:aa:57:df:2d:e6:af:05:f7:db:74:
                    22:17:76:a9:a3:21:bb:c5:13:ed:db:3e:5d:25:7e:
                    4f:04:41:4b:ec:83:32:42:2e:0f:7d:d0:6a:4c:33:
                    d9:da:0d:70:b7:c2:0d:68:ad:d5:6e:07:d1:f6:6c:
                    4c:db:0b:4d:f1:43:a4:38:e7:61:48:89:4b:f0:b0:
                    b2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:5C:15:05:E1:20:E2:F9:F3:6D:17:FD:29:B2:D0:9F:BF:F7:26:F8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FHzwLF7EspmpdaxNed9njaRGk8PveTwCnfTE1AtxroLe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FHzwLF7EspmpdaxNed9njaRGk8PveTwCnfTE1AtxroLe/0/5A5C1505E120E2F9F36D17FD29B2D09FBFF726F8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.192.0/22
                IPv6:
                  2804:3ab4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266104

    Signature Algorithm: sha256WithRSAEncryption
         62:94:9f:4d:3a:21:74:4b:3b:84:45:1e:ef:5c:71:11:98:c4:
         0c:95:17:d2:ee:7c:70:38:26:6a:07:84:09:b1:37:3a:21:30:
         a3:69:21:34:ea:2a:3e:e7:57:ef:f1:85:43:b8:6e:42:14:52:
         84:58:c4:59:ba:9e:c4:86:29:16:5b:fe:ff:29:c5:1c:3c:18:
         76:7e:c6:6c:e0:7d:7e:5f:2c:43:18:94:e9:c5:74:ba:44:68:
         0e:dc:fc:cc:05:23:b3:e7:9f:72:d4:cf:43:d3:8c:27:ed:5f:
         b6:78:af:e0:fd:fb:c9:2b:6e:7e:f7:11:d6:77:ac:35:e7:8a:
         aa:78:e3:77:65:89:0d:78:c2:45:4d:3c:38:e6:f7:c8:43:36:
         67:a8:6a:93:61:8e:b1:d3:f9:05:d2:68:84:42:c8:99:52:e2:
         18:66:36:d9:38:74:6c:7b:48:6b:a4:88:e6:1c:df:ba:2b:0e:
         26:de:f6:86:4f:1c:c4:06:09:b4:92:15:24:77:5b:99:66:7f:
         5a:1a:9e:15:64:2b:41:c3:ef:bd:71:8b:b1:9a:67:a9:20:cb:
         88:ff:36:2c:0d:6d:0d:44:26:2e:f4:bd:19:93:0c:17:e6:51:
         b8:c2:d7:bf:8b:38:ff:5e:a0:7a:55:fb:a2:42:00:e4:74:8c:
         27:c4:cc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----