This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B4F095052B6191331B71B1EC48EA099F01F7040A.cer
File:                     B4F095052B6191331B71B1EC48EA099F01F7040A.cer (raw, json)
Hash identifier:          1LNxdN2iAZ6e4PnNvaCqfBjIANLIZ1cz4Ah+Ov8YQG4=
Subject key identifier:   B4:F0:95:05:2B:61:91:33:1B:71:B1:EC:48:EA:09:9F:01:F7:04:0A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0964DF9980C81B83B90CC8B430B8D3F6B27303E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/B4F095052B6191331B71B1EC48EA099F01F7040A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Nov 2025 17:11:25 +0000
Certificate not after:    Mon 16 Nov 2026 17:16:25 +0000
Subordinate resources:    AS: 266094
                          IP: 45.5.112.0/22
                          IP: 2804:3a88::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:64:df:99:80:c8:1b:83:b9:0c:c8:b4:30:b8:d3:f6:b2:73:03:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 17 17:11:25 2025 GMT
            Not After : Nov 16 17:16:25 2026 GMT
        Subject: CN=B4F095052B6191331B71B1EC48EA099F01F7040A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5c:19:f4:73:08:96:e2:bc:a2:f1:28:0e:e0:
                    01:70:a1:93:cf:25:5b:fe:de:b5:0c:17:43:33:2a:
                    75:66:b4:f7:78:9e:a3:32:21:a4:93:31:f9:46:d3:
                    cd:e6:14:40:89:3d:bc:cd:32:96:a7:15:33:5f:4b:
                    90:65:89:66:42:d5:ff:82:5b:ad:0b:36:e2:5c:de:
                    a2:87:d6:2d:3e:a4:97:34:c5:82:73:9a:a3:de:fa:
                    8f:e8:d2:bc:5a:46:3d:13:c6:62:d2:1b:a3:5f:17:
                    ef:af:76:f7:45:80:ef:1a:9f:00:bb:77:7a:74:d4:
                    69:3f:4c:fc:8f:7e:6a:3a:db:91:02:cb:8b:16:b3:
                    20:f3:20:15:5e:ab:d1:66:e9:48:d5:51:68:e5:2d:
                    bc:af:48:0f:4a:34:c7:a4:57:8d:3b:2b:0b:94:a4:
                    e1:67:6c:5c:15:02:21:64:9a:02:7a:d8:22:82:a4:
                    c5:e1:1d:4e:e4:93:2f:d4:5b:3c:9f:f5:a1:3c:ec:
                    6a:c3:30:23:fd:41:e7:d4:69:a9:72:c7:60:c8:f7:
                    ec:14:4a:01:5f:1d:62:bf:11:48:bc:df:fc:07:aa:
                    8a:55:b9:50:fd:62:ff:0b:f6:54:92:9f:87:ee:61:
                    a7:71:12:a1:0c:3d:9b:55:69:d0:a8:92:fe:53:1a:
                    79:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:F0:95:05:2B:61:91:33:1B:71:B1:EC:48:EA:09:9F:01:F7:04:0A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/B4F095052B6191331B71B1EC48EA099F01F7040A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.112.0/22
                IPv6:
                  2804:3a88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266094

    Signature Algorithm: sha256WithRSAEncryption
         33:6e:f6:df:25:3b:75:67:34:eb:0f:cd:c5:cc:e1:4e:fb:3d:
         3b:1d:cc:8f:b1:57:f2:a4:2c:ee:b3:98:b9:50:2b:04:af:c5:
         70:99:c0:92:da:3c:dd:77:cb:ec:d7:ac:53:04:e3:54:43:8c:
         29:33:a0:97:17:03:c2:13:8b:67:fb:45:6f:18:ce:08:fd:c8:
         3d:51:f4:b1:65:98:37:8d:9a:bd:22:53:6b:a8:b4:51:cd:fb:
         69:dd:a2:bf:f6:ed:4b:3a:9a:10:92:24:55:28:30:bc:8d:6b:
         60:f6:09:d0:65:b6:5a:a9:a7:ce:51:c5:26:9b:dd:8f:30:08:
         2e:c9:63:95:d2:bb:58:0a:2f:fe:c5:e5:d9:ee:49:f2:4c:eb:
         70:13:95:9c:c2:93:f7:a4:f9:92:16:94:a8:44:47:3e:0f:fc:
         46:3f:20:e9:4a:27:cc:c6:65:fa:be:21:b8:c9:7b:e8:1c:38:
         a8:f0:f3:24:1b:60:71:96:62:a3:a9:37:17:c7:85:74:bb:d5:
         de:0b:ca:4c:35:96:70:49:cd:4a:6c:54:69:e5:b6:70:b4:60:
         3f:98:df:af:c7:a2:43:9b:4c:bd:bb:27:bd:e9:6c:a6:5e:9b:
         f1:60:cb:a6:4e:62:c8:a2:27:2f:34:c9:44:04:48:5f:43:93:
         35:07:ac:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----