This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer
File:                     D1FFDF44055E16082D529730642377D751467152.cer (raw, json)
Hash identifier:          moflKmX0zUvRHm5fo8ugZ7r+Z2jfD07gIaR8Pie0fJE=
Subject key identifier:   D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2EEE92993E93671867FED86A754A4FCB8F9AE2EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 23 Nov 2025 02:15:22 +0000
Certificate not after:    Sun 22 Nov 2026 02:20:22 +0000
Subordinate resources:    AS: 268782
                          IP: 45.172.240.0/22
                          IP: 2804:5a94::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ee:92:99:3e:93:67:18:67:fe:d8:6a:75:4a:4f:cb:8f:9a:e2:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 23 02:15:22 2025 GMT
            Not After : Nov 22 02:20:22 2026 GMT
        Subject: CN=D1FFDF44055E16082D529730642377D751467152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:29:15:dd:a7:57:43:f4:3a:06:e2:8b:91:23:
                    84:53:ee:02:63:d7:c9:cc:1e:ec:9d:84:97:c9:47:
                    ae:b4:fb:27:a9:d9:e0:a6:d1:15:09:92:2d:9e:c6:
                    d3:9f:c6:aa:af:47:c0:c5:4a:48:43:db:42:76:32:
                    ea:89:96:ad:43:e9:ed:e4:ae:a4:3a:d1:6d:b1:05:
                    11:ad:2e:fe:f5:2a:03:cf:05:6a:1b:b1:7a:a2:e0:
                    08:4f:57:41:d5:96:88:fa:eb:55:4c:8b:c1:b6:05:
                    d7:f5:cd:28:bc:4e:82:04:5c:3c:33:5c:72:a7:0f:
                    48:e2:e5:03:18:2e:5f:f6:bf:ac:c6:2b:fc:9f:03:
                    8f:a9:b7:97:f2:30:41:c4:ff:d5:90:70:97:99:b1:
                    46:e1:91:ea:5a:07:62:e9:31:a0:90:9f:74:26:f7:
                    41:6a:a3:5b:d7:3b:8c:06:29:db:eb:60:ee:27:06:
                    6c:78:1f:10:f8:94:74:23:4d:dc:8f:4a:11:56:cf:
                    a2:19:a1:b9:82:68:8c:51:10:b1:eb:21:1b:7c:07:
                    eb:ad:f5:d8:0a:d9:ee:5c:b3:7c:24:56:4f:96:3e:
                    e9:1e:a6:03:97:de:e9:bb:37:e4:09:db:94:fe:45:
                    3c:84:24:64:be:21:b2:32:d3:7c:57:55:34:19:60:
                    8b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.240.0/22
                IPv6:
                  2804:5a94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268782

    Signature Algorithm: sha256WithRSAEncryption
         8e:af:a4:1b:82:7f:42:68:84:6d:88:c4:ee:2c:c7:24:ea:86:
         12:b9:fe:5c:a7:6c:d3:40:2b:2a:27:66:c8:0e:2f:3b:7f:83:
         b1:91:02:f7:49:1c:ae:7a:f3:5d:f6:9f:f0:cc:e6:e0:87:a5:
         13:22:88:ce:fb:e0:cf:45:37:90:41:50:2d:63:b2:8c:34:84:
         56:98:45:5e:c6:ac:ec:85:ba:cf:a4:0b:d2:0f:d0:20:0a:86:
         5c:a7:71:04:06:a8:ca:67:35:e4:4b:22:27:0e:92:08:bd:50:
         65:5e:12:c1:25:7a:18:c5:fd:25:e0:e9:51:cc:4a:62:4d:5c:
         42:3d:7e:bc:54:69:e0:44:ed:c2:b4:b3:53:3e:5a:09:a9:0d:
         d2:5f:47:b8:31:08:ac:60:bb:ff:91:ef:32:5d:b9:ec:99:7c:
         7b:c6:cb:04:17:40:39:f2:6b:4d:66:17:bc:e0:64:5f:17:af:
         e6:7f:c8:3f:1c:85:84:2a:1b:e1:18:3c:13:28:af:ed:73:e9:
         95:fc:19:7a:47:a8:77:e3:b0:7f:91:7d:03:1c:58:68:36:f9:
         ce:b5:01:c1:77:ca:ca:2b:eb:bc:68:e1:4d:7f:67:03:90:e0:
         a9:2b:0c:4a:14:a7:cf:89:c3:be:07:3a:9b:d9:80:87:64:dc:
         71:b7:e0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----