This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5E878ACF42BCB846E133F1C042360C4F1DF3ED27.cer
File:                     5E878ACF42BCB846E133F1C042360C4F1DF3ED27.cer (raw, json)
Hash identifier:          XEynJ8ctI2oQM0Nag1EizlEIxr6lXfOwuBykABYCUV4=
Subject key identifier:   5E:87:8A:CF:42:BC:B8:46:E1:33:F1:C0:42:36:0C:4F:1D:F3:ED:27
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       24D8311E6D63E1252D8F843FD501D8FE4D040728
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9QiGftbDyM61si2hjRaTEJcAn16j4Pn2ueFsjT6sNPWs/0/5E878ACF42BCB846E133F1C042360C4F1DF3ED27.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9QiGftbDyM61si2hjRaTEJcAn16j4Pn2ueFsjT6sNPWs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Nov 2025 14:02:29 +0000
Certificate not after:    Tue 24 Nov 2026 14:07:29 +0000
Subordinate resources:    AS: 271717
                          IP: 45.164.168.0/22
                          IP: 2804:7fe8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d8:31:1e:6d:63:e1:25:2d:8f:84:3f:d5:01:d8:fe:4d:04:07:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 25 14:02:29 2025 GMT
            Not After : Nov 24 14:07:29 2026 GMT
        Subject: CN=5E878ACF42BCB846E133F1C042360C4F1DF3ED27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:65:b1:62:b4:93:99:6e:b3:87:b2:47:4b:c8:
                    6b:6b:9c:6a:3c:58:b3:62:38:a9:75:85:4d:6d:3e:
                    67:f9:24:85:3d:92:df:68:e9:ba:73:1c:77:e2:75:
                    4b:a0:5e:8b:e7:2f:fd:27:f1:9d:61:ed:3e:b8:63:
                    21:97:47:11:f4:ab:6e:27:91:70:4f:3f:eb:05:8e:
                    7a:20:3e:50:b9:23:43:b0:38:41:c1:88:bf:c3:8d:
                    97:11:ff:94:52:fa:00:4c:11:6b:d9:fc:16:33:69:
                    86:c1:66:35:9b:1c:90:f7:7d:0a:a9:b8:9d:54:ca:
                    8a:8d:0b:cd:c7:b9:61:5c:70:b0:b9:21:f9:9c:e2:
                    0d:e1:af:fb:71:04:1b:38:f3:bd:77:f8:3c:b3:8d:
                    21:9b:07:41:5c:e9:e9:21:30:16:f3:63:31:bc:ef:
                    8e:6b:f8:74:5e:7a:79:11:5a:1e:cd:9b:35:26:dc:
                    6c:aa:7b:c2:36:19:5e:46:82:e1:c6:3f:64:26:32:
                    8a:d0:f3:78:b6:1d:31:91:cd:2a:d3:7d:32:03:ca:
                    7a:8b:78:f5:12:e6:82:31:01:a5:40:61:4a:ad:3c:
                    8a:c8:07:ff:5b:c6:59:a9:5c:d7:11:53:c7:25:72:
                    d4:75:0d:7b:b2:7e:6c:e3:3f:0a:16:7d:f3:9f:c3:
                    58:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:87:8A:CF:42:BC:B8:46:E1:33:F1:C0:42:36:0C:4F:1D:F3:ED:27
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9QiGftbDyM61si2hjRaTEJcAn16j4Pn2ueFsjT6sNPWs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9QiGftbDyM61si2hjRaTEJcAn16j4Pn2ueFsjT6sNPWs/0/5E878ACF42BCB846E133F1C042360C4F1DF3ED27.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.168.0/22
                IPv6:
                  2804:7fe8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271717

    Signature Algorithm: sha256WithRSAEncryption
         6f:7c:0a:bb:93:70:65:8a:97:70:e1:c4:98:13:ce:c4:76:7a:
         99:55:9b:fd:04:91:c0:b5:a6:c7:7e:0f:d6:cf:26:6b:12:9f:
         3c:f0:74:de:c2:7d:79:cc:4d:6d:d4:58:70:c0:4f:94:e7:ef:
         86:34:31:53:ba:3e:d7:52:64:fc:35:94:31:f9:c2:4c:8b:7f:
         9f:9f:71:fa:65:e8:eb:05:12:18:a1:ab:02:c6:45:62:8d:7c:
         8d:97:cb:1f:fc:97:70:f9:d0:99:e3:5c:73:63:10:73:c9:18:
         03:ba:bb:d7:b8:e7:10:f6:93:8c:60:e9:08:82:a8:2f:cd:65:
         88:ed:a9:b3:4f:50:27:59:20:23:6d:89:19:76:29:11:8a:fe:
         64:9c:79:48:cf:e4:9a:59:60:bc:c4:d2:fd:38:61:d3:99:9e:
         1b:36:d9:29:05:92:23:c6:d5:a5:11:c6:4a:43:ef:01:65:6c:
         63:46:24:6e:5c:9a:27:0f:37:0d:30:a5:21:a3:2c:08:2c:25:
         88:78:91:ef:65:49:a8:22:64:b5:3e:b4:f0:ac:81:52:ef:04:
         60:99:7e:bd:18:c8:d6:cc:bc:9d:78:81:c1:39:50:51:e9:5c:
         54:fb:ad:39:08:e7:18:db:4e:ab:e2:c3:bf:66:1e:56:07:d2:
         f7:0c:05:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----