This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CDCA5D752465C82F87C02572646B39237CA981A8.cer
File:                     CDCA5D752465C82F87C02572646B39237CA981A8.cer (raw, json)
Hash identifier:          aBQUaXuSbQL1SOtfHWCNvPtzpEIOnwzruLU39xNvnOQ=
Subject key identifier:   CD:CA:5D:75:24:65:C8:2F:87:C0:25:72:64:6B:39:23:7C:A9:81:A8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1CBA173F28779F0AE724BD42562E7B84565D3D91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/CDCA5D752465C82F87C02572646B39237CA981A8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 22 Nov 2025 12:41:11 +0000
Certificate not after:    Sat 21 Nov 2026 12:46:11 +0000
Subordinate resources:    AS: 266298
                          IP: 170.78.172.0/22
                          IP: 2804:35a4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ba:17:3f:28:77:9f:0a:e7:24:bd:42:56:2e:7b:84:56:5d:3d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 22 12:41:11 2025 GMT
            Not After : Nov 21 12:46:11 2026 GMT
        Subject: CN=CDCA5D752465C82F87C02572646B39237CA981A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f9:57:62:61:54:78:34:06:ca:1b:b8:1b:23:
                    a3:04:ee:85:e4:f6:5d:d2:d6:bb:44:48:aa:f6:f3:
                    9c:10:be:a6:64:48:50:a2:8d:ee:da:30:3e:10:6c:
                    f9:70:19:d8:07:8e:e7:83:d5:17:bc:72:81:fe:49:
                    48:7d:0c:47:9e:58:6b:7e:9f:98:66:7f:78:62:3b:
                    f1:d0:5d:28:44:47:e6:d8:02:dc:b3:ca:ce:48:1e:
                    82:57:74:80:43:b2:76:2f:8d:1a:cf:85:c6:f2:de:
                    b0:c7:97:bb:5e:6d:3f:f9:59:1d:28:9d:9c:99:47:
                    d8:81:e0:de:41:c1:d1:c9:81:b4:4e:47:97:ae:6f:
                    6b:af:0c:4f:d8:5f:cc:d1:92:1c:7a:14:c2:c9:76:
                    5f:87:c2:ad:e0:d1:2e:75:b6:66:f3:2e:e3:f0:6b:
                    3a:5a:37:82:a4:bb:80:74:4f:ac:ca:08:84:e1:dd:
                    0f:cb:65:4e:b9:69:54:47:ef:b2:0d:d9:67:73:20:
                    3d:66:6d:75:37:5b:2b:00:f9:c4:61:71:3d:e2:77:
                    99:cc:da:90:87:8d:f2:5f:9c:b3:24:6b:6b:77:37:
                    5a:7c:2b:59:ee:47:9c:12:30:66:2e:9c:58:20:74:
                    5b:b3:6c:ca:06:02:78:42:b0:e7:da:18:21:74:d5:
                    05:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:CA:5D:75:24:65:C8:2F:87:C0:25:72:64:6B:39:23:7C:A9:81:A8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/CDCA5D752465C82F87C02572646B39237CA981A8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.172.0/22
                IPv6:
                  2804:35a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266298

    Signature Algorithm: sha256WithRSAEncryption
         85:25:cf:51:c6:12:dc:90:bc:1f:21:08:80:b8:a1:3e:7d:c3:
         b5:cd:b2:82:45:bc:76:bb:71:87:dd:90:d2:e6:2f:bb:1d:e9:
         29:38:8a:de:19:42:9d:5a:14:8f:11:3b:d1:4a:97:d7:92:c4:
         c5:90:9c:96:26:e5:37:46:70:52:0d:3b:31:e7:fb:85:a7:1e:
         96:ac:d2:05:d9:48:a9:86:bd:f9:fa:a2:26:cd:25:67:86:d5:
         64:2f:5b:22:85:66:eb:3e:5c:99:b3:c6:ed:12:32:02:06:d0:
         64:c1:0f:42:1d:6a:2a:25:c4:d5:7d:0e:78:51:34:53:2a:29:
         b8:65:66:f6:f9:7d:e3:2c:3f:7e:c1:29:75:d4:56:a9:5e:22:
         80:6e:f5:22:4d:b9:54:77:11:52:fd:9c:c2:05:d6:fc:be:62:
         45:e9:b0:1c:84:cc:f9:28:b8:5d:77:bc:18:57:bf:a5:ee:05:
         d7:66:f6:bb:e3:96:76:e8:fa:87:8e:dc:d7:47:e3:f5:0d:39:
         55:92:63:f1:f3:f5:cc:9c:1a:97:0b:88:15:10:90:6d:ca:51:
         a4:b7:90:66:b3:cb:d9:00:42:24:8c:ee:57:f8:ec:a7:10:a6:
         d1:b5:9a:af:74:0e:46:a6:fc:76:ad:ff:52:d3:68:20:c2:e9:
         5e:e6:c8:08
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUHLoXPyh3nwrnJL1CVi57hFZdPZEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTExMjIxMjQxMTFaFw0yNjExMjExMjQ2MTFaMDMxMTAvBgNV
BAMTKENEQ0E1RDc1MjQ2NUM4MkY4N0MwMjU3MjY0NkIzOTIzN0NBOTgxQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCD+VdiYVR4NAbKG7gbI6ME7oXk
9l3S1rtESKr285wQvqZkSFCije7aMD4QbPlwGdgHjueD1Re8coH+SUh9DEeeWGt+
n5hmf3hiO/HQXShER+bYAtyzys5IHoJXdIBDsnYvjRrPhcby3rDHl7tebT/5WR0o
nZyZR9iB4N5BwdHJgbROR5eub2uvDE/YX8zRkhx6FMLJdl+Hwq3g0S51tmbzLuPw
azpaN4Kku4B0T6zKCITh3Q/LZU65aVRH77IN2WdzID1mbXU3WysA+cRhcT3id5nM
2pCHjfJfnLMka2t3N1p8K1nuR5wSMGYunFggdFuzbMoGAnhCsOfaGCF01QU1AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTNyl11JGXIL4fA
JXJkazkjfKmBqDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2Jy
U1ViTWNldVN1M1h5M0N4Tmc2VXBRZnNDS2J0NEt5VkFDUTNqN2dXMWgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0di
clNVYk1jZXVTdTNYeTNDeE5nNlVwUWZzQ0tidDRLeVZBQ1EzajdnVzFoLzAvQ0RD
QTVENzUyNDY1QzgyRjg3QzAyNTcyNjQ2QjM5MjM3Q0E5ODFBOC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqk6sMA0EAgACMAcDBQAoBDWkMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQQOjANBgkqhkiG9w0BAQsFAAOCAQEAhSXPUcYS3JC8HyEI
gLihPn3Dtc2ygkW8drtxh92Q0uYvux3pKTiK3hlCnVoUjxE70UqX15LExZCclibl
N0ZwUg07Mef7hacelqzSBdlIqYa9+fqiJs0lZ4bVZC9bIoVm6z5cmbPG7RIyAgbQ
ZMEPQh1qKiXE1X0OeFE0UyopuGVm9vl94yw/fsEpddRWqV4igG71Ik25VHcRUv2c
wgXW/L5iRemwHITM+Si4XXe8GFe/pe4F12b2u+OWduj6h47c10fj9Q05VZJj8fP1
zJwalwuIFRCQbcpRpLeQZrPL2QBCJIzuV/jspxCm0bWar3QORqb8dq3/UtNoIMLp
XubICA==
-----END CERTIFICATE-----