This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6A7229281936FDF6807C956949B8906409365025.cer
File:                     6A7229281936FDF6807C956949B8906409365025.cer (raw, json)
Hash identifier:          l1pmbyyfx2gcReVg7SsGjuE/48n2mZ7HfnAQfrx7dFw=
Subject key identifier:   6A:72:29:28:19:36:FD:F6:80:7C:95:69:49:B8:90:64:09:36:50:25
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       54730AF13C23EE44B31DC25A9BE978D7E62E97B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7pRpFpJJVkyfukEE6HWc4HbQkDqvXBHTVuJAJLWZxYdU/0/6A7229281936FDF6807C956949B8906409365025.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7pRpFpJJVkyfukEE6HWc4HbQkDqvXBHTVuJAJLWZxYdU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Dec 2025 21:49:07 +0000
Certificate not after:    Mon 07 Dec 2026 21:54:07 +0000
Subordinate resources:    AS: 268028
                          IP: 45.168.40.0/22
                          IP: 2804:56dc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 20:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:73:0a:f1:3c:23:ee:44:b3:1d:c2:5a:9b:e9:78:d7:e6:2e:97:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  8 21:49:07 2025 GMT
            Not After : Dec  7 21:54:07 2026 GMT
        Subject: CN=6A7229281936FDF6807C956949B8906409365025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:9d:6b:07:ee:6a:b0:41:04:7e:67:1f:af:
                    a5:f9:9d:e1:01:0b:bf:04:00:cd:a9:7e:42:64:cc:
                    5e:b0:5f:6a:43:22:84:4e:31:c1:12:78:91:44:c0:
                    aa:2a:36:d3:e6:d4:f3:b5:d7:a3:42:b4:d2:71:72:
                    a5:b1:50:17:ca:97:1a:1e:30:1a:b4:1e:df:91:3f:
                    2c:d8:58:ba:05:8f:0b:17:48:1a:f3:c2:08:c4:08:
                    03:5f:b7:94:b6:2e:fb:bf:f8:08:61:02:72:32:cd:
                    dc:d4:57:5a:c8:ae:5b:c5:0b:09:67:2b:bf:c5:d1:
                    47:99:61:5a:31:b0:ca:6a:4e:2d:47:22:4c:3d:b0:
                    1b:74:a3:d9:af:53:c4:ab:8f:ac:dd:21:d7:4c:25:
                    a8:a9:88:c5:96:dd:9b:ce:c6:24:54:40:43:a9:2c:
                    4c:20:ff:d9:33:11:3c:a7:9e:be:35:85:0d:bd:51:
                    02:af:70:a9:aa:64:55:8c:2d:1a:2e:00:ed:b1:21:
                    d2:9d:84:ff:e7:07:e2:3b:d4:e5:0c:52:6a:66:13:
                    05:59:90:84:8c:34:1e:09:12:53:06:4c:5b:63:7e:
                    a1:c8:ea:d7:02:30:cb:e9:98:69:20:44:32:42:bb:
                    5c:3e:86:e1:6c:48:76:77:e5:bc:e1:12:dd:d2:a6:
                    fb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:72:29:28:19:36:FD:F6:80:7C:95:69:49:B8:90:64:09:36:50:25
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7pRpFpJJVkyfukEE6HWc4HbQkDqvXBHTVuJAJLWZxYdU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7pRpFpJJVkyfukEE6HWc4HbQkDqvXBHTVuJAJLWZxYdU/0/6A7229281936FDF6807C956949B8906409365025.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.40.0/22
                IPv6:
                  2804:56dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268028

    Signature Algorithm: sha256WithRSAEncryption
         a8:6a:3c:94:20:8a:bb:4e:c3:0e:e2:01:e5:f1:57:49:a4:86:
         4f:1a:8a:eb:dd:ec:5b:e1:31:c0:35:84:fc:09:47:ee:9a:61:
         58:c2:4f:41:08:61:6b:fc:ec:f0:5d:de:63:0f:83:f0:c4:49:
         d3:a9:05:ae:a9:41:e5:26:c6:92:a3:f0:66:5c:2a:e1:c4:b5:
         5f:8e:da:7e:36:83:a2:7e:c6:98:cc:e2:b5:06:57:e9:b0:28:
         3b:b6:ab:42:9b:ca:9d:f0:6f:b7:3a:55:e7:b6:5c:9c:ad:e6:
         af:15:45:29:04:cd:44:04:eb:57:66:a3:fd:34:fd:c8:dc:b9:
         e5:8a:a3:dc:9d:db:66:67:d3:11:99:f7:a4:4c:bf:5b:9d:7c:
         0e:49:30:0a:7a:d0:b7:26:c5:2b:66:87:d4:65:71:60:b8:c7:
         0c:04:7f:44:4d:e1:a0:37:88:63:2a:19:84:de:4b:7f:2b:ec:
         6b:c7:18:73:9f:ce:cd:ce:08:ca:c5:ca:97:3e:04:93:cb:f4:
         b2:81:21:e4:5d:63:0e:22:33:8d:60:fc:78:a1:46:f5:4e:3f:
         82:f7:e8:80:bb:ba:bc:e2:e8:7b:16:82:1c:03:f4:2b:54:60:
         7b:bf:a8:54:38:bd:47:ae:b8:98:1e:90:69:2a:b3:3a:0d:ee:
         f7:c0:56:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----