This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5D54217B57CD08CDAFF28E26855F9ED57C4EC9A4.cer
File:                     5D54217B57CD08CDAFF28E26855F9ED57C4EC9A4.cer (raw, json)
Hash identifier:          oNNecdUxw1TfXj7AJlx2DFMtBFsyB2WASqJr1V6F1pk=
Subject key identifier:   5D:54:21:7B:57:CD:08:CD:AF:F2:8E:26:85:5F:9E:D5:7C:4E:C9:A4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       076018BF5B69617CA9FA78109E03CF1E52CAE938
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/5D54217B57CD08CDAFF28E26855F9ED57C4EC9A4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Dec 2025 12:28:42 +0000
Certificate not after:    Thu 17 Dec 2026 12:33:42 +0000
Subordinate resources:    AS: 267096
                          IP: 45.229.24.0/22
                          IP: 2804:4814::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 12:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:60:18:bf:5b:69:61:7c:a9:fa:78:10:9e:03:cf:1e:52:ca:e9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 18 12:28:42 2025 GMT
            Not After : Dec 17 12:33:42 2026 GMT
        Subject: CN=5D54217B57CD08CDAFF28E26855F9ED57C4EC9A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dd:de:ca:17:20:fc:85:0d:5e:32:13:e2:b0:
                    c9:31:b9:3d:75:c2:ef:90:52:28:68:c7:8f:ae:2d:
                    d8:c2:f8:a2:31:28:92:24:09:49:81:32:33:a5:7b:
                    d1:9e:56:e8:fa:f6:7d:12:a0:b0:70:54:8b:ac:c9:
                    e6:e0:98:65:ca:18:de:83:55:a4:3e:a4:d8:d7:26:
                    9d:30:c8:46:d2:c3:ae:de:19:a9:20:d3:26:84:68:
                    9d:72:68:0b:4c:5d:bb:0c:a7:3b:35:3e:34:a5:6a:
                    9c:1d:92:30:5c:8f:6f:44:a2:3a:f6:26:a8:81:70:
                    45:9f:5a:85:0d:d7:39:1f:bb:c9:ca:ae:fe:9e:42:
                    41:7d:ca:f0:50:c0:78:2b:c3:09:27:d3:64:af:69:
                    3b:93:5f:c0:67:15:3e:27:29:c5:ef:9e:8f:c7:1f:
                    64:7b:8e:72:3a:42:8f:c0:26:1f:60:ac:8a:2f:5c:
                    c0:a6:1a:0e:02:99:7e:fb:49:90:ac:20:c6:5d:1a:
                    29:41:6e:52:69:4b:b6:4f:d5:d0:9f:7e:e2:6e:05:
                    88:0c:95:1d:a6:d4:cd:63:a3:71:47:df:f8:82:cd:
                    47:e1:9e:22:47:50:48:be:c8:a4:6d:7e:c2:f2:45:
                    e5:9e:25:17:ba:47:77:2c:4f:12:5e:b8:71:64:d0:
                    3a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:54:21:7B:57:CD:08:CD:AF:F2:8E:26:85:5F:9E:D5:7C:4E:C9:A4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/5D54217B57CD08CDAFF28E26855F9ED57C4EC9A4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.24.0/22
                IPv6:
                  2804:4814::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267096

    Signature Algorithm: sha256WithRSAEncryption
         37:89:e0:9f:0d:1a:3b:6c:ab:ba:18:04:00:ba:a0:f7:66:ce:
         b1:d0:2b:25:60:26:a7:ad:87:e3:33:b4:96:ad:bb:43:5c:f3:
         2a:1f:3d:94:f2:43:bf:36:b4:31:67:41:4d:98:1f:42:90:a7:
         83:d8:7c:9a:e3:2f:1e:3d:de:f9:b2:ff:03:d5:45:9e:d8:b4:
         6a:10:d4:98:e4:e6:76:fa:0a:77:53:a3:c1:56:27:79:99:09:
         78:a6:fa:0b:2f:63:e8:d2:91:45:4d:12:69:cb:35:41:ef:87:
         bc:ac:9e:18:ac:89:ed:66:9e:d5:1b:0f:00:b2:d0:33:85:73:
         b9:89:56:63:90:df:01:e6:83:27:8b:31:88:a0:87:9f:7a:49:
         95:83:7f:d1:e1:77:d3:4b:e5:76:02:c2:f9:f4:c5:63:78:d5:
         d0:5e:63:5a:e8:9a:49:7f:0f:1a:94:fb:2a:9c:82:d4:9d:0f:
         22:63:7a:c2:59:16:5f:cb:c9:93:d6:69:a5:26:79:99:89:92:
         5d:4a:e0:3e:2b:0d:d5:23:c0:0f:f3:ed:7e:e7:ad:44:26:8c:
         3c:f4:fb:6a:6b:ef:1f:b8:22:91:36:24:2e:ef:5d:3f:28:cd:
         ce:25:1b:e3:00:da:e0:7c:38:fe:b8:f0:f0:73:29:0e:3e:90:
         0c:dc:1a:ac
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUB2AYv1tpYXyp+ngQngPPHlLK6TgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEyMTgxMjI4NDJaFw0yNjEyMTcxMjMzNDJaMDMxMTAvBgNV
BAMTKDVENTQyMTdCNTdDRDA4Q0RBRkYyOEUyNjg1NUY5RUQ1N0M0RUM5QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC93d7KFyD8hQ1eMhPisMkxuT11
wu+QUihox4+uLdjC+KIxKJIkCUmBMjOle9GeVuj69n0SoLBwVIusyebgmGXKGN6D
VaQ+pNjXJp0wyEbSw67eGakg0yaEaJ1yaAtMXbsMpzs1PjSlapwdkjBcj29Eojr2
JqiBcEWfWoUN1zkfu8nKrv6eQkF9yvBQwHgrwwkn02SvaTuTX8BnFT4nKcXvno/H
H2R7jnI6Qo/AJh9grIovXMCmGg4CmX77SZCsIMZdGilBblJpS7ZP1dCffuJuBYgM
lR2m1M1jo3FH3/iCzUfhniJHUEi+yKRtfsLyReWeJRe6R3csTxJeuHFk0DptAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRdVCF7V80Iza/y
jiaFX57VfE7JpDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNms4
QTJlVXRCd2k1a0E5UEo2eHBhc3pCU2NjeWNyTnB0MlpKZUJSSjVKbjQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZr
OEEyZVV0QndpNWtBOVBKNnhwYXN6QlNjY3ljck5wdDJaSmVCUko1Sm40LzAvNUQ1
NDIxN0I1N0NEMDhDREFGRjI4RTI2ODU1RjlFRDU3QzRFQzlBNC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLeUYMA0EAgACMAcDBQAoBEgUMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQTWDANBgkqhkiG9w0BAQsFAAOCAQEAN4ngnw0aO2yruhgE
ALqg92bOsdArJWAmp62H4zO0lq27Q1zzKh89lPJDvza0MWdBTZgfQpCng9h8muMv
Hj3e+bL/A9VFnti0ahDUmOTmdvoKd1OjwVYneZkJeKb6Cy9j6NKRRU0Sacs1Qe+H
vKyeGKyJ7Wae1RsPALLQM4VzuYlWY5DfAeaDJ4sxiKCHn3pJlYN/0eF300vldgLC
+fTFY3jV0F5jWuiaSX8PGpT7KpyC1J0PImN6wlkWX8vJk9ZppSZ5mYmSXUrgPisN
1SPAD/PtfuetRCaMPPT7amvvH7gikTYkLu9dPyjNziUb4wDa4Hw4/rjw8HMpDj6Q
DNwarA==
-----END CERTIFICATE-----