This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6DF742314460043E383DDE058976EAE11908B136.cer
File:                     6DF742314460043E383DDE058976EAE11908B136.cer (raw, json)
Hash identifier:          t9evNqkArHK4yC8FMsR1O8ID4H/xNg237/VMutgIKmI=
Subject key identifier:   6D:F7:42:31:44:60:04:3E:38:3D:DE:05:89:76:EA:E1:19:08:B1:36
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6BA23836E0F9E67A3DB057020E9D226F82029AF9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/6DF742314460043E383DDE058976EAE11908B136.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Nov 2025 13:19:21 +0000
Certificate not after:    Mon 23 Nov 2026 13:24:21 +0000
Subordinate resources:    AS: 267128
                          IP: 45.229.138.0/23
                          IP: 2804:488c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a2:38:36:e0:f9:e6:7a:3d:b0:57:02:0e:9d:22:6f:82:02:9a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 24 13:19:21 2025 GMT
            Not After : Nov 23 13:24:21 2026 GMT
        Subject: CN=6DF742314460043E383DDE058976EAE11908B136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:91:e1:fc:6b:5f:17:87:18:9d:37:6a:bd:6b:
                    c0:98:22:7e:90:76:29:34:35:e2:92:2b:9d:22:e3:
                    1c:06:ed:ba:77:39:52:9f:c2:fd:5e:b9:00:78:15:
                    43:4d:43:12:28:c1:c4:69:65:06:d4:10:5a:29:91:
                    e6:46:46:39:80:e4:4a:78:12:ab:cc:b3:f4:bc:dc:
                    76:d7:80:64:41:d1:76:0f:49:ff:4d:50:37:ad:02:
                    be:13:c6:0a:b7:ab:18:03:3e:01:69:e2:c6:78:2f:
                    28:1d:5d:46:9d:dc:2d:60:24:72:da:1e:24:53:fd:
                    e3:e7:c2:08:00:25:0a:7d:7a:f9:69:21:10:90:42:
                    bd:05:c8:2a:fd:1a:a3:39:46:81:85:7c:ba:ac:91:
                    63:3c:b3:f3:1b:d2:56:28:89:fa:40:5a:b1:5f:10:
                    d2:3e:d8:03:84:f7:1b:6c:45:b7:2a:9a:40:ee:08:
                    4d:36:64:a2:b9:5b:79:4e:0e:ee:b7:10:a8:30:93:
                    aa:b6:9c:f4:b5:1a:01:3b:88:7a:13:51:14:90:69:
                    d6:b1:dc:0a:c2:57:9c:47:83:ed:7d:e5:11:72:df:
                    52:83:c3:d1:5a:52:f7:36:fa:0b:ec:dc:5a:5d:6b:
                    34:20:a0:75:11:f2:33:86:c5:1c:18:30:62:fc:f4:
                    d9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:F7:42:31:44:60:04:3E:38:3D:DE:05:89:76:EA:E1:19:08:B1:36
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/6DF742314460043E383DDE058976EAE11908B136.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.138.0/23
                IPv6:
                  2804:488c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267128

    Signature Algorithm: sha256WithRSAEncryption
         da:b6:05:b0:ce:16:12:43:97:20:e8:0c:63:0a:31:7c:3e:df:
         85:c1:5e:93:c6:e4:6f:34:9e:24:a5:1a:1a:f8:d2:08:08:96:
         3d:f9:e7:37:cb:12:b9:64:96:a9:ff:fd:4e:5b:b2:c7:17:de:
         47:96:c8:d5:c7:99:34:bd:e3:d4:5d:7f:ef:c7:19:a3:3e:87:
         9a:b2:85:ad:d2:87:ab:ce:2b:46:c5:e1:b1:0a:62:2a:11:59:
         9c:74:0c:22:36:36:66:47:1e:1c:93:e2:82:e8:78:6e:f3:ba:
         1b:23:6a:22:92:a4:14:b1:76:5a:da:0c:f3:45:1f:1c:4c:46:
         7d:48:bf:d7:e6:df:fd:12:ff:35:d3:da:ad:01:89:85:28:2d:
         53:04:b1:3f:ce:63:ef:58:b9:17:41:8b:31:9a:39:24:6f:20:
         47:96:39:18:aa:b8:ca:30:21:f9:ec:50:14:c7:c1:68:ab:f3:
         96:3d:64:cd:49:b1:b8:af:1d:10:b3:46:a7:0f:d1:cf:9f:65:
         17:0f:7b:fc:1c:2d:9b:a4:5c:66:1e:06:a1:54:6e:5c:80:62:
         27:a3:5f:a1:f2:bb:94:69:30:d1:a0:fd:96:50:81:01:08:7f:
         43:86:46:1e:be:5b:ce:df:4f:ae:cb:56:ba:4b:f0:09:97:cc:
         43:2c:b7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----