This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6AE14256892C56A512E61A5576E8BB4674AB83E4.cer
File:                     6AE14256892C56A512E61A5576E8BB4674AB83E4.cer (raw, json)
Hash identifier:          g0kFpZdAwix+Xa8OprWi9J/8HeYh6wKwVUFQ3lkh09I=
Subject key identifier:   6A:E1:42:56:89:2C:56:A5:12:E6:1A:55:76:E8:BB:46:74:AB:83:E4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4F439F5CC9D2A7A1B023084F0CC06BD132F0B539
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/6AE14256892C56A512E61A5576E8BB4674AB83E4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Nov 2025 12:41:32 +0000
Certificate not after:    Thu 05 Nov 2026 12:46:32 +0000
Subordinate resources:    AS: 271013
                          IP: 168.181.100.0/22
                          IP: 2804:74f0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:43:9f:5c:c9:d2:a7:a1:b0:23:08:4f:0c:c0:6b:d1:32:f0:b5:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  6 12:41:32 2025 GMT
            Not After : Nov  5 12:46:32 2026 GMT
        Subject: CN=6AE14256892C56A512E61A5576E8BB4674AB83E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:49:02:0a:b6:da:1a:d4:80:b4:a0:cb:e7:7d:
                    a6:5e:27:ae:f8:9f:ad:02:6d:33:26:a0:5c:83:c3:
                    9d:e8:fb:16:8d:f9:61:4e:9d:ec:1c:f3:4c:e4:44:
                    ad:8e:09:ab:d4:7c:32:b3:ff:49:bb:43:41:91:97:
                    08:f6:2c:b7:72:4c:2a:1e:20:f3:4d:fa:09:d3:05:
                    2a:0e:28:e8:da:ae:92:b9:67:9e:bd:bb:98:fd:fe:
                    8e:e6:27:c5:7c:fe:5a:37:4d:3d:e8:b5:9b:07:18:
                    7d:b0:0e:52:b7:d8:3f:91:6f:c6:af:d5:4d:02:46:
                    4b:82:9a:46:cd:b3:45:ce:b6:db:de:af:a3:b1:ba:
                    48:93:bd:27:0b:04:d3:4f:1a:2d:91:89:02:0a:3e:
                    74:ee:bc:52:e7:50:6c:cb:19:25:7c:71:08:2a:39:
                    e8:d9:f5:05:f7:db:6c:d6:df:0b:33:e5:f5:b5:01:
                    7c:95:d2:85:0b:df:03:bb:5f:02:b9:c7:d7:83:69:
                    14:5b:2d:d4:e1:73:8d:f8:da:d2:1e:75:a5:52:5c:
                    8f:24:44:1a:be:3b:ab:3c:85:bd:a6:fa:be:35:7b:
                    ae:6c:16:95:8b:f1:09:6d:8b:a6:53:51:4e:49:4d:
                    3b:81:89:89:31:f3:98:31:a4:2b:6b:40:9d:e6:ed:
                    40:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:E1:42:56:89:2C:56:A5:12:E6:1A:55:76:E8:BB:46:74:AB:83:E4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/6AE14256892C56A512E61A5576E8BB4674AB83E4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.100.0/22
                IPv6:
                  2804:74f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271013

    Signature Algorithm: sha256WithRSAEncryption
         c3:2a:a6:76:34:62:7f:93:41:2f:cd:aa:89:2d:fe:c2:d7:f1:
         cb:fd:4f:c0:10:b7:72:e0:ef:15:40:4e:8f:01:4c:4e:e5:4a:
         bc:e5:87:72:47:2c:db:6f:5b:70:9c:b2:57:bc:d1:58:a2:d8:
         57:5c:2a:98:40:01:8b:87:a5:82:40:1b:2a:e9:70:e3:e6:c5:
         9d:b4:c8:1c:1f:fc:1b:b2:28:c7:4c:ee:07:c4:ee:a4:b4:0e:
         79:8a:e6:cf:b8:01:67:01:40:24:41:ff:e8:08:38:4e:83:96:
         9f:6f:15:b1:c7:b5:1a:b1:a5:2b:82:7c:23:cb:a8:36:b7:8c:
         59:10:0f:72:69:82:90:40:00:3f:56:68:1b:2b:64:b7:19:aa:
         f4:33:44:fa:a6:fd:09:24:8d:b5:09:07:f6:d2:4a:98:9b:d7:
         89:40:2b:2d:27:e2:bc:0f:97:31:79:df:98:36:4a:c2:ba:6a:
         b8:e9:c6:ec:b7:78:c1:fb:3d:13:ac:8d:cb:c8:5e:c1:42:6d:
         82:06:ef:e7:98:25:f5:4f:03:0b:0e:39:64:5a:5d:5a:f2:4b:
         97:31:7a:84:e3:35:42:08:3c:9a:ce:0e:8a:d8:73:07:6c:ed:
         bd:f0:5f:07:3c:07:a1:4e:82:04:0c:51:12:ef:43:9a:0f:96:
         49:64:df:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----