This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer
File:                     AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer (raw, json)
Hash identifier:          qsoxudzrf1G3vbys9HqQwMBWd9a7Rt2Jm4MTrfIHnIw=
Subject key identifier:   AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6492B1D0D68B32595FDE38021623D15511FCDC0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 22 Nov 2025 13:21:32 +0000
Certificate not after:    Sat 21 Nov 2026 13:26:32 +0000
Subordinate resources:    AS: 61595
                          IP: 45.165.80.0/22
                          IP: 2804:54c8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 02:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:92:b1:d0:d6:8b:32:59:5f:de:38:02:16:23:d1:55:11:fc:dc:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 22 13:21:32 2025 GMT
            Not After : Nov 21 13:26:32 2026 GMT
        Subject: CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0b:f2:4e:a2:3c:4f:4f:1e:b5:49:18:e4:31:
                    b6:4a:57:3e:6e:c4:66:c3:e5:5a:67:32:35:69:02:
                    8b:b0:1d:3e:97:5a:7f:34:fd:e9:67:32:1f:52:02:
                    a1:7b:65:ab:82:19:a2:e8:8c:5b:f9:c3:31:63:50:
                    e4:a0:03:24:80:f0:9e:77:aa:04:c3:a6:c3:50:5b:
                    a9:06:68:d6:53:81:60:11:70:54:44:45:81:7e:74:
                    9b:71:cf:41:cd:b7:62:d7:99:33:13:a6:a0:bf:7c:
                    64:88:34:22:ec:a8:03:26:85:8f:a5:9c:43:5f:53:
                    74:df:ae:32:4b:64:7f:2d:63:50:7b:32:5a:e2:1f:
                    ce:99:8d:db:2e:77:40:0f:b3:e4:3d:d5:80:38:c5:
                    f3:46:ef:60:3e:1e:6c:a5:c7:39:c3:3c:4b:6f:b2:
                    2b:b6:a2:07:97:26:0f:af:3d:41:88:65:dc:83:cf:
                    9a:c8:cf:a2:70:e3:89:89:0c:ef:51:dc:3f:05:46:
                    dd:de:17:b3:bd:40:29:3b:8f:32:91:7a:8d:c4:e4:
                    0f:7f:68:49:46:38:f5:52:58:b7:d3:33:59:e0:e8:
                    a8:61:6d:2b:61:ce:3d:a2:cb:1a:e4:06:97:bc:1d:
                    25:13:3d:57:15:aa:62:f6:48:24:43:cd:51:1a:4b:
                    ba:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.80.0/22
                IPv6:
                  2804:54c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61595

    Signature Algorithm: sha256WithRSAEncryption
         75:27:70:f5:c7:f1:ce:36:65:e6:30:7d:6b:31:0b:9a:f9:75:
         1c:53:12:db:32:eb:e5:97:7e:df:a5:ff:26:60:3e:07:d1:2c:
         ac:a0:02:ef:b5:71:f5:c6:93:56:47:80:dd:35:55:01:01:e2:
         91:8c:14:30:58:67:3d:c6:c5:7e:15:50:88:ba:5b:7e:de:2b:
         38:a3:1b:8b:7d:54:6a:45:80:1d:55:ef:71:93:4d:2d:a8:44:
         a7:98:4e:72:0e:85:65:a0:82:f1:49:e4:ec:76:58:34:46:ca:
         a8:65:42:45:36:9e:df:29:ee:05:52:3b:fd:b2:89:3b:9d:ec:
         5e:05:48:d9:32:7c:98:fd:b4:bc:94:cd:92:98:e5:5c:26:af:
         87:52:6a:40:59:07:08:9a:56:a3:65:f2:e5:d5:94:2e:8e:d2:
         aa:d7:e1:b7:e4:3a:b8:09:2f:25:6b:af:f7:47:1f:a7:25:3a:
         dc:98:d1:f3:fa:db:5b:7c:7e:e5:43:2d:43:e0:9d:c3:2f:a3:
         7c:87:d9:e4:8c:e5:48:50:92:0b:8e:44:ba:96:8e:c1:fc:07:
         76:c2:15:49:27:a0:ca:2f:fc:ca:9e:bf:9c:23:20:19:a9:ab:
         df:a5:0c:b6:0a:21:4c:60:ab:73:54:47:93:bf:5b:d6:7e:42:
         95:d3:77:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:49:47 2025 by rpki-client