This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.cer
File:                     CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.cer (raw, json)
Hash identifier:          3dtPKg9YRZw2+46Bp1pSEEC0MclVYRWHRPZnagCNLG0=
Subject key identifier:   CA:1C:AD:DF:6D:C2:75:0F:6D:5D:18:A7:F1:42:5A:E1:34:86:38:5F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       41948A277C0107BD43D1BB94A81490C716BA6FFE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Dec 2025 18:40:17 +0000
Certificate not after:    Mon 30 Nov 2026 18:45:17 +0000
Subordinate resources:    AS: 270794
                          IP: 189.51.164.0/22
                          IP: 2804:7184::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:94:8a:27:7c:01:07:bd:43:d1:bb:94:a8:14:90:c7:16:ba:6f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  1 18:40:17 2025 GMT
            Not After : Nov 30 18:45:17 2026 GMT
        Subject: CN=CA1CADDF6DC2750F6D5D18A7F1425AE13486385F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1e:c8:29:94:7d:37:83:92:e9:5a:7c:52:1f:
                    e7:a6:01:e4:1f:f0:82:33:26:30:1f:ca:36:ab:95:
                    d6:85:b1:0f:90:1a:8c:c9:9f:b5:a8:41:f8:e6:7b:
                    4f:74:79:25:d0:54:67:ba:f0:07:d8:4f:82:e1:b9:
                    29:63:e6:78:1f:dd:fb:66:5d:2c:08:61:62:27:fd:
                    bb:9f:ad:d2:b2:b9:40:f5:5c:5f:60:fa:23:b9:aa:
                    e0:b7:ed:22:46:95:c7:68:b9:95:26:e9:4f:3c:46:
                    59:e6:a6:0e:b6:b3:87:9b:67:d2:43:d3:ae:b4:16:
                    1b:c8:33:e3:9e:90:c2:29:dc:c5:9a:78:e2:76:db:
                    14:1e:3e:3f:dc:f3:10:d9:65:cd:64:54:7d:09:7f:
                    be:2f:32:45:3c:79:07:b6:79:8b:30:a8:34:91:40:
                    16:e4:6e:1c:3d:ec:1f:1a:b5:24:2c:53:95:16:86:
                    90:94:c5:0e:be:c1:8a:2a:bb:27:70:7c:98:72:14:
                    c6:29:75:30:5a:a8:2c:47:32:8f:cc:42:1e:92:8a:
                    72:d0:1d:2f:af:b2:0a:1f:fe:04:43:69:b4:b8:ff:
                    69:8a:74:ac:33:c0:e7:3e:e7:b8:1b:4d:ff:22:37:
                    c4:d2:6a:82:fc:aa:d4:ae:a4:ab:cc:d8:d9:b4:69:
                    07:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:1C:AD:DF:6D:C2:75:0F:6D:5D:18:A7:F1:42:5A:E1:34:86:38:5F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.164.0/22
                IPv6:
                  2804:7184::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270794

    Signature Algorithm: sha256WithRSAEncryption
         b4:8c:62:84:72:9a:7c:37:11:b6:7d:1c:fb:21:52:3d:b4:5e:
         77:9d:a2:7c:ac:96:b0:b5:74:58:a8:88:9a:5d:92:e7:72:93:
         b9:71:85:a6:1a:73:21:a3:83:7e:23:3d:76:f8:42:43:6c:cb:
         71:54:1d:5c:f4:0b:69:87:9d:75:eb:3f:f8:cf:bb:2a:14:46:
         56:61:fb:d1:15:5c:0a:98:4c:4d:ab:2c:e4:71:99:99:00:9a:
         ea:e0:61:a4:03:c4:11:25:c6:f0:6e:0a:f1:0a:fc:e6:87:31:
         90:a5:18:1f:67:42:a1:00:8f:63:ce:7c:68:71:e7:d2:97:97:
         c4:e5:4b:41:6c:11:ef:00:cb:db:d9:56:88:56:a6:66:45:83:
         60:c5:17:5e:2d:94:5b:fb:ca:03:92:eb:d4:76:f5:51:37:e0:
         71:b1:36:ca:a5:69:38:40:bd:62:55:a1:64:82:d0:76:34:ef:
         12:13:2e:f1:d4:13:06:b3:ab:67:6d:47:03:cd:50:d4:da:15:
         6e:e8:7c:d5:b2:bc:bd:d5:f2:9f:58:a4:df:5f:68:71:52:ee:
         85:e4:5f:d0:38:51:83:58:e9:cd:4f:17:79:f8:96:63:4a:3a:
         35:3d:08:49:a8:0d:4d:fe:bb:fe:e1:fa:b6:e0:71:a5:c9:55:
         54:cc:d6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----