This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AE4E0194FE0EFE41D5AFE1B3664EFFCD49E8D4AA.cer
File:                     AE4E0194FE0EFE41D5AFE1B3664EFFCD49E8D4AA.cer (raw, json)
Hash identifier:          DkmTwjg3M6A3OZDjox2DXxg9aDv7BN3xifY/i41qCLY=
Subject key identifier:   AE:4E:01:94:FE:0E:FE:41:D5:AF:E1:B3:66:4E:FF:CD:49:E8:D4:AA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       31DDE1DF106D90E2BEDBEDB86567FEA4DF9D8882
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/AE4E0194FE0EFE41D5AFE1B3664EFFCD49E8D4AA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Jan 2026 17:15:57 +0000
Certificate not after:    Mon 11 Jan 2027 17:20:57 +0000
Subordinate resources:    AS: 268447
                          IP: 45.161.48.0/22
                          IP: 2804:515c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:dd:e1:df:10:6d:90:e2:be:db:ed:b8:65:67:fe:a4:df:9d:88:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 12 17:15:57 2026 GMT
            Not After : Jan 11 17:20:57 2027 GMT
        Subject: CN=AE4E0194FE0EFE41D5AFE1B3664EFFCD49E8D4AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ba:05:2e:60:96:d1:0b:17:cc:45:1c:fe:9a:
                    92:03:e1:9c:d0:c9:6f:c4:46:c0:c1:b5:b7:5e:95:
                    59:d2:10:ce:02:ec:fe:0d:c6:f9:19:7c:d6:de:d0:
                    a4:32:c6:4c:4c:50:cd:b8:43:ed:98:da:72:30:a4:
                    69:0d:b7:1a:f0:71:5f:c0:01:81:0c:63:fa:72:dd:
                    e6:49:5b:8f:5d:11:c6:bf:4b:d2:8d:76:e9:3a:70:
                    da:ab:45:0b:eb:05:0b:d6:14:20:03:da:5a:9a:5f:
                    3c:a6:07:71:ea:84:b4:53:29:c0:9a:33:b8:3c:bd:
                    f5:e4:5c:6f:7a:2f:3a:30:54:12:ed:78:ad:29:6a:
                    1f:2e:0e:4b:fd:12:78:f3:2f:8a:58:ff:54:7d:41:
                    b5:95:7c:98:95:f1:c3:bb:c5:ef:c0:a8:e5:c3:4c:
                    0c:5d:e9:f8:bb:99:7a:67:2c:12:cc:7a:9b:19:1f:
                    cb:c9:fe:e3:88:a9:bb:7a:76:eb:c0:e9:3a:49:6c:
                    b7:42:fa:ad:c4:4e:0a:b0:ec:a7:7b:10:0a:cd:8b:
                    e5:f2:ae:4b:e0:0c:87:e1:c0:dd:4c:c0:53:3f:16:
                    3c:df:9f:43:50:d8:f3:da:de:94:74:d8:2b:61:c9:
                    68:86:9f:9c:97:41:cf:53:2e:ff:85:01:6a:06:13:
                    ba:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:4E:01:94:FE:0E:FE:41:D5:AF:E1:B3:66:4E:FF:CD:49:E8:D4:AA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/AE4E0194FE0EFE41D5AFE1B3664EFFCD49E8D4AA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.48.0/22
                IPv6:
                  2804:515c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268447

    Signature Algorithm: sha256WithRSAEncryption
         57:11:ba:72:4f:2a:d8:1d:99:1d:97:4e:ce:5d:08:8a:46:2c:
         ab:da:3d:52:54:a5:c0:42:d3:ee:ce:9a:9f:21:0d:6d:78:ce:
         c0:45:dc:c3:92:dd:17:70:90:48:c8:79:6e:60:ee:35:22:61:
         08:35:d7:80:67:5f:87:05:88:f2:e1:04:b7:83:9e:6d:7d:d3:
         e4:bf:cb:8f:15:a7:f7:b8:2f:8b:b6:a4:b2:94:e8:16:61:eb:
         81:a7:20:67:76:43:d0:64:4d:69:d4:be:e7:94:ee:54:f1:79:
         26:ac:f3:db:64:4f:5d:a9:3c:7a:6a:9b:79:08:ae:f9:ff:20:
         0c:1b:8a:10:d5:94:0d:94:a9:86:0b:e6:c8:f8:39:70:5d:fa:
         9c:d0:47:b4:f1:b6:9b:3f:fe:6a:af:31:cb:ab:8e:65:30:d2:
         5b:73:44:9a:80:e0:e7:79:be:1c:37:5e:cb:fe:02:ed:d4:c3:
         49:f1:6c:b7:13:aa:1b:16:70:4c:80:f5:57:49:24:b7:f2:52:
         70:64:04:92:68:7e:40:2d:54:d0:cb:25:67:96:81:26:ff:60:
         ac:22:c0:0e:10:7f:f6:fa:9e:41:6e:59:9f:81:d0:c6:b7:70:
         7e:dc:a3:eb:50:d4:ba:68:57:d8:46:cf:4a:e5:fb:2c:9b:8d:
         c3:71:cc:91
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUMd3h3xBtkOK+2+24ZWf+pN+diIIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAxMTIxNzE1NTdaFw0yNzAxMTExNzIwNTdaMDMxMTAvBgNV
BAMTKEFFNEUwMTk0RkUwRUZFNDFENUFGRTFCMzY2NEVGRkNENDlFOEQ0QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEugUuYJbRCxfMRRz+mpID4ZzQ
yW/ERsDBtbdelVnSEM4C7P4NxvkZfNbe0KQyxkxMUM24Q+2Y2nIwpGkNtxrwcV/A
AYEMY/py3eZJW49dEca/S9KNduk6cNqrRQvrBQvWFCAD2lqaXzymB3HqhLRTKcCa
M7g8vfXkXG96LzowVBLteK0pah8uDkv9EnjzL4pY/1R9QbWVfJiV8cO7xe/AqOXD
TAxd6fi7mXpnLBLMepsZH8vJ/uOIqbt6duvA6TpJbLdC+q3ETgqw7Kd7EArNi+Xy
rkvgDIfhwN1MwFM/Fjzfn0NQ2PPa3pR02CthyWiGn5yXQc9TLv+FAWoGE7qlAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSuTgGU/g7+QdWv
4bNmTv/NSejUqjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNDhr
NmlmRjJrU0pmR3lqUkpXMk1QdFhVUUpZUU5lQVZUZHhLOEVMUlg0SmsvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ4
azZpZkYya1NKZkd5alJKVzJNUHRYVVFKWVFOZUFWVGR4SzhFTFJYNEprLzAvQUU0
RTAxOTRGRTBFRkU0MUQ1QUZFMUIzNjY0RUZGQ0Q0OUU4RDRBQS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLaEwMA0EAgACMAcDBQAoBFFcMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQYnzANBgkqhkiG9w0BAQsFAAOCAQEAVxG6ck8q2B2ZHZdO
zl0IikYsq9o9UlSlwELT7s6anyENbXjOwEXcw5LdF3CQSMh5bmDuNSJhCDXXgGdf
hwWI8uEEt4OebX3T5L/LjxWn97gvi7akspToFmHrgacgZ3ZD0GRNadS+55TuVPF5
Jqzz22RPXak8emqbeQiu+f8gDBuKENWUDZSphgvmyPg5cF36nNBHtPG2mz/+aq8x
y6uOZTDSW3NEmoDg53m+HDdey/4C7dTDSfFstxOqGxZwTID1V0kkt/JScGQEkmh+
QC1U0MslZ5aBJv9grCLADhB/9vqeQW5Zn4HQxrdwftyj61DUumhX2EbPSuX7LJuN
w3HMkQ==
-----END CERTIFICATE-----