This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.cer
File:                     CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.cer (raw, json)
Hash identifier:          AdLMROeQC59o7zeQnVtGrfVilEYRcLEMusR6f8pxucc=
Subject key identifier:   CA:5D:3B:AC:C0:98:C7:9F:E5:F2:C9:97:3B:CD:EA:C5:AD:0C:53:A3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5B091BF8264AA02E0FE787BA6ADD1D66D4406734
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 29 Nov 2025 15:59:45 +0000
Certificate not after:    Sat 28 Nov 2026 16:04:45 +0000
Subordinate resources:    AS: 270344
                          IP: 189.126.4.0/22
                          IP: 2804:6a90::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:09:1b:f8:26:4a:a0:2e:0f:e7:87:ba:6a:dd:1d:66:d4:40:67:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 29 15:59:45 2025 GMT
            Not After : Nov 28 16:04:45 2026 GMT
        Subject: CN=CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9a:de:4d:66:89:06:b7:b5:80:d7:3b:c6:31:
                    ce:66:6e:73:fa:28:2c:54:94:80:60:30:17:ab:c1:
                    8c:eb:54:d6:53:8c:07:a4:80:3a:b8:8f:bc:3f:a2:
                    5b:c5:a2:c9:f1:5d:8e:26:75:62:5a:bb:ad:f1:5b:
                    2a:31:57:2b:65:b7:65:3c:de:c0:76:6b:1d:3f:8a:
                    04:15:2a:3d:c0:a6:aa:83:b9:b7:11:20:34:77:1c:
                    91:56:1b:73:bc:20:bf:5f:3b:68:55:27:78:6a:fb:
                    a5:23:29:2b:f0:61:cb:24:70:c7:5f:ab:9d:08:e6:
                    48:b8:30:02:00:1d:81:d8:8a:15:11:af:e2:cb:32:
                    44:3b:d5:6a:d7:86:fc:6e:90:34:8d:d9:99:1b:34:
                    9c:db:3a:41:d0:46:b1:a9:f9:ab:bd:4d:1b:ea:6e:
                    c4:bf:8f:d5:03:72:82:c8:89:2e:1c:d5:06:f6:29:
                    87:fc:41:b1:7a:50:93:75:53:22:4b:b6:08:42:5b:
                    88:e6:51:e6:2c:d1:15:42:44:de:3d:e8:1f:26:0a:
                    f6:90:bb:aa:10:a2:26:0a:cf:99:e0:03:3e:cb:a4:
                    82:3c:af:2e:7c:16:b9:1e:e5:55:3d:b5:e8:f1:66:
                    0c:b6:cf:af:0f:48:b4:9c:98:5c:53:a6:4b:a7:ec:
                    7c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:5D:3B:AC:C0:98:C7:9F:E5:F2:C9:97:3B:CD:EA:C5:AD:0C:53:A3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.4.0/22
                IPv6:
                  2804:6a90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270344

    Signature Algorithm: sha256WithRSAEncryption
         05:5f:d4:d5:59:4f:d8:c0:30:fb:bf:81:80:19:4b:ed:24:91:
         37:29:10:8f:0a:3f:4b:4f:ba:3f:95:89:a7:fc:ee:4b:9d:98:
         7f:03:4f:55:6a:24:53:d3:e9:e7:f3:c1:c8:9e:44:5c:2d:ea:
         bf:56:0a:96:ad:73:8e:8c:f5:b0:4b:9d:f6:6f:fe:fe:ed:f7:
         ac:90:be:e8:36:13:d7:28:13:a6:dc:99:87:5b:c4:0c:bc:0e:
         9a:3e:2d:1d:6e:c8:8c:78:f7:1e:a4:57:5a:21:1a:c5:1f:f1:
         2a:b3:13:57:69:cc:c4:10:09:37:c7:be:d7:a4:4b:c5:ec:cd:
         10:19:d3:f4:4c:07:4d:35:61:a6:2f:1d:0e:e7:7d:b0:f1:99:
         05:2f:60:1f:d6:51:18:d3:e8:78:5b:77:ac:2f:1a:34:dd:da:
         01:be:6b:2e:e9:32:76:d1:b8:58:59:cb:b0:7f:b5:37:09:f0:
         3b:50:54:93:26:e0:f3:9d:68:51:4d:9e:17:75:59:fb:5e:f5:
         7b:35:77:a0:21:e1:cb:3f:78:f5:57:57:0f:cb:ac:2c:23:3a:
         31:1d:7b:01:42:ec:4b:0f:9d:90:dd:c1:97:4d:b0:24:3b:17:
         ae:6d:23:4a:c2:95:91:02:6b:e6:97:3e:fd:27:12:cd:ba:40:
         53:fa:2c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----