This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
File:                     62542D04D7B086689C6E3FE7D77F27061824D478.cer (raw, json)
Hash identifier:          5lYP9MzL7/OzmHJ+pR1qipBzOQ2SnksT97nxvziJGNo=
Subject key identifier:   62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       012693D53E24B8B0A5AA2C694C348BADBA571D3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Dec 2025 11:43:44 +0000
Certificate not after:    Fri 04 Dec 2026 11:48:44 +0000
Subordinate resources:    AS: 268793
                          IP: 45.173.48.0/22
                          IP: 2804:5ac0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:26:93:d5:3e:24:b8:b0:a5:aa:2c:69:4c:34:8b:ad:ba:57:1d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  5 11:43:44 2025 GMT
            Not After : Dec  4 11:48:44 2026 GMT
        Subject: CN=62542D04D7B086689C6E3FE7D77F27061824D478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:13:d5:7a:3f:52:d4:a4:06:03:9c:ea:c5:75:
                    52:8c:22:95:df:72:aa:c5:d2:27:cf:ec:2f:c7:c4:
                    28:83:e6:9d:b7:a1:2a:be:e4:0d:6d:91:5d:73:86:
                    1c:f2:17:47:d1:13:67:7e:2c:e3:e7:96:e4:ec:52:
                    a2:bb:ee:16:f5:1d:60:7c:eb:38:45:6b:86:18:da:
                    d7:82:74:75:f4:03:07:8b:85:93:a3:61:78:6d:60:
                    4b:63:bf:88:6d:11:8e:1d:70:41:20:df:3b:bc:09:
                    00:f9:11:85:6d:3f:55:0b:f3:a5:d5:87:fd:40:4a:
                    a6:a4:4c:ba:4e:b6:75:fe:f8:8d:da:56:af:7b:02:
                    ef:88:7d:81:76:b6:97:01:47:01:af:99:dd:02:08:
                    c6:12:de:3f:84:d3:ca:6f:3e:49:54:eb:5b:86:2d:
                    c8:f8:44:43:39:13:77:47:38:97:50:cd:03:0d:cb:
                    89:76:75:11:7a:a7:bf:9c:a1:1f:31:38:be:76:10:
                    3a:1b:e5:b9:c6:be:76:c4:e3:24:26:01:12:fd:c8:
                    77:e8:40:c2:2d:2d:c6:3f:30:84:0d:a8:51:0c:80:
                    f6:eb:97:1c:cc:f5:8f:71:d4:1c:cb:bb:76:de:07:
                    2a:2f:5e:50:3d:89:65:2a:b7:f2:4c:63:cf:65:e6:
                    ae:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.48.0/22
                IPv6:
                  2804:5ac0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268793

    Signature Algorithm: sha256WithRSAEncryption
         9e:16:7d:7e:3e:8f:89:1f:99:b7:61:02:6e:bc:5d:9a:65:39:
         a2:67:f5:89:b0:44:96:9a:64:47:a5:a8:e0:1f:97:8f:c0:06:
         ac:78:a9:7f:cc:66:04:a4:10:f0:c5:ac:94:a4:d6:a1:b1:d4:
         ca:da:ea:00:7c:6e:a5:ea:ae:a0:ce:2d:d7:54:38:63:3e:d7:
         5f:c5:ab:71:0a:a5:a9:03:86:96:f9:95:aa:ba:04:ec:61:8b:
         88:cd:8d:2b:83:3a:c1:12:e9:5f:79:be:7c:c6:87:be:10:aa:
         fd:ed:6e:d8:0d:36:0a:66:41:b1:03:08:a2:48:4e:09:ee:09:
         1e:9a:c7:b5:d0:fb:9d:69:9c:46:b2:68:12:80:2b:5c:d2:8e:
         da:8a:95:ce:d9:eb:d8:f2:39:b9:2f:80:5a:1f:98:e5:b9:7c:
         43:0b:4c:e1:68:4e:9f:c7:73:a3:27:64:19:c2:d6:e2:dd:df:
         85:4f:6e:ec:6f:66:4c:2b:64:72:a1:4c:4a:76:0f:88:20:4c:
         8f:53:23:1b:17:f7:3e:0e:fa:49:3d:1b:64:80:28:7a:1e:3d:
         66:64:90:c0:b3:6f:79:10:62:e4:54:38:e3:9d:bb:81:17:d2:
         fe:c3:7d:e7:23:40:2b:a9:cd:0b:a3:2f:24:1b:af:79:01:78:
         61:78:31:40
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUASaT1T4kuLClqixpTDSLrbpXHT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEyMDUxMTQzNDRaFw0yNjEyMDQxMTQ4NDRaMDMxMTAvBgNV
BAMTKDYyNTQyRDA0RDdCMDg2Njg5QzZFM0ZFN0Q3N0YyNzA2MTgyNEQ0NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQE9V6P1LUpAYDnOrFdVKMIpXf
cqrF0ifP7C/HxCiD5p23oSq+5A1tkV1zhhzyF0fRE2d+LOPnluTsUqK77hb1HWB8
6zhFa4YY2teCdHX0AweLhZOjYXhtYEtjv4htEY4dcEEg3zu8CQD5EYVtP1UL86XV
h/1ASqakTLpOtnX++I3aVq97Au+IfYF2tpcBRwGvmd0CCMYS3j+E08pvPklU61uG
Lcj4REM5E3dHOJdQzQMNy4l2dRF6p7+coR8xOL52EDob5bnGvnbE4yQmARL9yHfo
QMItLcY/MIQNqFEMgPbrlxzM9Y9x1BzLu3beByovXlA9iWUqt/JMY89l5q5hAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRiVC0E17CGaJxu
P+fXfycGGCTUeDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQnpL
cWlMeHUyUHFtV3F4VVp1b0JCMWtxeHIydWZCcU1SYUhCdnNoZGh0OWMvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0J6
S3FpTHh1MlBxbVdxeFVadW9CQjFrcXhyMnVmQnFNUmFIQnZzaGRodDljLzEvNjI1
NDJEMDREN0IwODY2ODlDNkUzRkU3RDc3RjI3MDYxODI0RDQ3OC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLa0wMA0EAgACMAcDBQAoBFrAMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQZ+TANBgkqhkiG9w0BAQsFAAOCAQEAnhZ9fj6PiR+Zt2EC
brxdmmU5omf1ibBElppkR6Wo4B+Xj8AGrHipf8xmBKQQ8MWslKTWobHUytrqAHxu
pequoM4t11Q4Yz7XX8WrcQqlqQOGlvmVqroE7GGLiM2NK4M6wRLpX3m+fMaHvhCq
/e1u2A02CmZBsQMIokhOCe4JHprHtdD7nWmcRrJoEoArXNKO2oqVztnr2PI5uS+A
Wh+Y5bl8QwtM4WhOn8dzoydkGcLW4t3fhU9u7G9mTCtkcqFMSnYPiCBMj1MjGxf3
Pg76ST0bZIAoeh49ZmSQwLNveRBi5FQ44527gRfS/sN95yNAK6nNC6MvJBuveQF4
YXgxQA==
-----END CERTIFICATE-----