This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6A279B424612940DC791666933613422FF82BC7E.cer
File:                     6A279B424612940DC791666933613422FF82BC7E.cer (raw, json)
Hash identifier:          r1QaT5qfL729zuAZOiAjtXquLXmcS+ufq389Kds+Gk0=
Subject key identifier:   6A:27:9B:42:46:12:94:0D:C7:91:66:69:33:61:34:22:FF:82:BC:7E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       05D29130A4576247838CC2B45186D2FC8FD6CC41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6rfKBVRCKSTujYFJBYJL6BAUaSkvZ2m7JChFoZYWfDqG/0/6A279B424612940DC791666933613422FF82BC7E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6rfKBVRCKSTujYFJBYJL6BAUaSkvZ2m7JChFoZYWfDqG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Nov 2025 15:18:47 +0000
Certificate not after:    Wed 11 Nov 2026 15:23:47 +0000
Subordinate resources:    AS: 267185
                          AS: 271035
                          IP: 45.231.0.0/22
                          IP: 177.91.224.0/22
                          IP: 186.226.219.0/24
                          IP: 2804:4974::/32
                          IP: 2804:7544::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d2:91:30:a4:57:62:47:83:8c:c2:b4:51:86:d2:fc:8f:d6:cc:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 12 15:18:47 2025 GMT
            Not After : Nov 11 15:23:47 2026 GMT
        Subject: CN=6A279B424612940DC791666933613422FF82BC7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d2:7a:47:7a:bc:d9:b8:b3:85:1a:57:9a:78:
                    29:5b:93:46:0c:0a:ab:88:d5:a8:b3:3f:0c:5b:db:
                    39:19:b6:0a:3e:38:87:12:f2:0c:24:29:bb:6e:18:
                    48:17:88:fc:56:20:8c:51:9d:62:35:1a:09:03:37:
                    ce:84:9c:d8:1e:55:87:35:30:c3:75:32:0d:31:e3:
                    76:a0:10:85:68:ac:59:1d:8b:31:59:0d:82:b8:84:
                    a6:c2:7b:8c:76:a3:c0:35:91:d3:6c:51:5a:ec:8b:
                    17:b8:0e:1e:14:b1:d4:43:d9:50:04:a5:ec:25:f9:
                    20:9a:99:3a:86:29:50:28:14:a1:24:e9:79:e4:d6:
                    ac:67:f6:dd:92:ac:a9:f4:61:e2:9c:fa:3f:1c:d8:
                    2e:df:96:a0:62:57:28:aa:5f:5d:6a:e2:89:3e:6b:
                    1e:63:b6:15:fb:d4:e5:ad:87:bf:4c:7d:c3:d2:4a:
                    08:5a:7c:c2:33:bf:ba:8b:36:3d:52:e0:72:08:3e:
                    26:ce:e9:36:5c:b5:a0:0d:a6:48:1a:e8:58:6e:04:
                    c1:b1:8e:3c:ad:65:eb:bf:76:61:a9:42:0f:5e:fd:
                    36:08:95:57:b0:cf:18:82:aa:21:88:9b:b3:a1:9e:
                    51:9b:ed:f9:b6:7c:a9:00:5d:a5:57:2d:14:4b:a1:
                    d8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:27:9B:42:46:12:94:0D:C7:91:66:69:33:61:34:22:FF:82:BC:7E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6rfKBVRCKSTujYFJBYJL6BAUaSkvZ2m7JChFoZYWfDqG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6rfKBVRCKSTujYFJBYJL6BAUaSkvZ2m7JChFoZYWfDqG/0/6A279B424612940DC791666933613422FF82BC7E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.0.0/22
                  177.91.224.0/22
                  186.226.219.0/24
                IPv6:
                  2804:4974::/32
                  2804:7544::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267185
                  271035

    Signature Algorithm: sha256WithRSAEncryption
         56:1e:c4:c2:bb:8e:ea:b8:83:6b:38:6f:01:2d:05:c9:28:08:
         ac:e6:02:ad:48:94:e5:81:a9:5b:02:40:c1:b1:e0:00:d8:61:
         93:72:8c:6e:00:98:2a:66:d7:4b:41:d9:7e:06:ce:b7:56:ed:
         82:8b:79:32:3f:94:02:c2:c7:e9:e0:64:4d:82:04:5a:ac:de:
         31:68:9f:55:9d:70:0f:f7:18:78:56:57:3a:b7:8b:c6:21:2d:
         4e:6d:80:7a:82:22:1e:a4:9a:1f:27:26:17:3b:f0:86:94:e7:
         23:16:09:03:d6:14:37:32:8a:c9:d6:c8:8a:05:2a:82:1b:c9:
         32:c0:5a:08:27:9f:8e:27:29:ca:67:3e:79:67:d9:9b:31:38:
         2f:ce:aa:ac:b3:9d:e8:bc:32:dd:50:81:0c:d0:0c:ad:34:f7:
         a2:49:92:77:1a:7c:e7:b2:b3:99:2e:36:15:71:71:0f:4a:90:
         61:27:a1:97:b1:25:a9:57:32:9a:da:82:02:9a:ef:27:b1:50:
         1e:7b:79:01:c0:d4:47:e3:21:2a:36:fe:7b:66:ac:bb:8b:63:
         e1:01:ea:31:b1:b7:af:04:2f:7c:64:60:7f:4a:70:fc:96:92:
         6c:5e:9a:74:c3:1f:e8:9c:d3:94:c3:90:67:eb:eb:39:ef:a3:
         d3:46:a7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:45:09 2025 by rpki-client