This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.cer
File:                     5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.cer (raw, json)
Hash identifier:          ceb2MmEOBB08GLDIQGsqxdfEuQa+zhPFe42u2BJXfoE=
Subject key identifier:   5B:9D:EC:AF:81:F8:0B:2E:AE:42:6A:05:0C:B1:1C:33:DD:2F:0F:CB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       030E74A949BF27527457707EE3535BE04940187A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Nov 2025 00:32:13 +0000
Certificate not after:    Wed 11 Nov 2026 00:37:13 +0000
Subordinate resources:    AS: 264949
                          IP: 168.232.44.0/22
                          IP: 2804:3068::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0e:74:a9:49:bf:27:52:74:57:70:7e:e3:53:5b:e0:49:40:18:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 12 00:32:13 2025 GMT
            Not After : Nov 11 00:37:13 2026 GMT
        Subject: CN=5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7b:3a:f8:df:a7:4d:01:9b:ad:a7:32:47:ed:
                    3c:7e:d0:9d:ca:eb:0e:73:91:9e:a5:03:45:60:da:
                    83:0a:97:03:e7:1e:1a:27:e2:53:b6:85:47:63:88:
                    1c:7c:ac:ad:20:8f:9d:aa:0d:59:71:d4:92:8e:d4:
                    cd:85:28:1a:6d:46:e6:70:bb:c1:33:a2:b3:67:10:
                    c5:7c:fe:41:45:3a:f9:ec:b4:9d:86:ed:5e:d1:e7:
                    7b:e5:bb:50:52:79:9a:f1:09:5c:d1:18:3f:a8:83:
                    18:45:dd:46:7d:9c:ac:ab:c9:03:73:cc:4c:6c:ce:
                    c0:e7:27:0e:60:1d:a2:7d:e7:5e:47:0c:3d:c3:63:
                    5e:fd:89:0e:97:8c:13:60:7c:fd:4f:ba:b0:71:0f:
                    76:21:3b:d7:20:0a:9a:fd:3f:4d:ca:0e:19:52:6b:
                    8c:13:4b:eb:fa:0f:97:b5:08:aa:c6:0f:90:52:5e:
                    c2:a3:af:a8:a1:bb:4f:96:32:d9:bd:db:e7:de:e4:
                    6e:19:8a:c8:f8:4a:f6:aa:e1:76:3d:6f:5d:4f:84:
                    43:68:0c:cc:a8:27:83:ca:71:f7:c4:cc:c4:e3:1a:
                    b1:c4:fe:f7:0d:fb:5b:4a:ca:ab:66:dc:c2:15:17:
                    67:69:eb:d7:05:db:f9:67:3f:3e:91:cf:8d:8f:44:
                    32:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5B:9D:EC:AF:81:F8:0B:2E:AE:42:6A:05:0C:B1:1C:33:DD:2F:0F:CB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.44.0/22
                IPv6:
                  2804:3068::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264949

    Signature Algorithm: sha256WithRSAEncryption
         d7:81:72:71:e0:91:e6:35:9c:86:bb:81:a7:dc:ba:3a:46:b9:
         08:91:28:5d:c2:94:4c:16:9f:05:d3:6f:90:be:39:37:c1:c3:
         03:55:c0:f2:6f:74:33:04:3c:c2:a2:a8:26:0b:30:64:a8:f2:
         fc:af:28:78:d1:51:b7:18:79:72:d7:22:64:f0:b5:15:07:ef:
         58:23:79:aa:86:e6:37:91:cc:d0:7c:30:91:ae:95:cd:2e:ed:
         24:f8:5f:64:ae:9c:63:71:31:ba:0b:d5:88:3b:87:5e:a7:9f:
         7a:5b:41:1b:11:a8:eb:a1:21:0b:9f:a6:62:fd:70:94:d7:58:
         da:02:62:82:cb:9b:1a:0c:1d:0e:3e:3a:f8:39:43:2d:cd:2d:
         e1:13:72:10:27:4d:d0:75:e7:72:f9:75:50:67:bc:88:c1:35:
         65:4f:ba:fb:eb:1a:1c:44:a0:4b:44:38:bd:f8:fb:3b:d8:61:
         ea:0e:71:51:80:12:ad:bc:5e:92:d9:6f:99:c4:1b:18:c0:e1:
         8b:53:db:f5:1a:be:12:23:fc:91:e0:4f:6a:b4:d7:f0:38:14:
         6a:3a:f6:7b:55:e2:f0:97:8a:3b:6e:38:3d:0e:cb:54:6e:4e:
         e3:e9:ab:4e:21:59:2d:68:4e:2d:b9:8b:8e:c7:b2:5e:d2:20:
         69:e5:c5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----