This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E0CDEEA5E44BA1529DFFA505AB1F000007FF4017.cer
File:                     E0CDEEA5E44BA1529DFFA505AB1F000007FF4017.cer (raw, json)
Hash identifier:          dNwG9mkHvbRxBsxtxmCHXxwcQBVGRx2ZErgS37ldDrk=
Subject key identifier:   E0:CD:EE:A5:E4:4B:A1:52:9D:FF:A5:05:AB:1F:00:00:07:FF:40:17
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       41DCCC2B94ED68BC01C84520EC6A241A690D1566
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/E0CDEEA5E44BA1529DFFA505AB1F000007FF4017.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Jan 2026 20:34:22 +0000
Certificate not after:    Tue 12 Jan 2027 20:39:22 +0000
Subordinate resources:    AS: 268298
                          IP: 45.237.208.0/22
                          IP: 2804:4f04::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:dc:cc:2b:94:ed:68:bc:01:c8:45:20:ec:6a:24:1a:69:0d:15:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 13 20:34:22 2026 GMT
            Not After : Jan 12 20:39:22 2027 GMT
        Subject: CN=E0CDEEA5E44BA1529DFFA505AB1F000007FF4017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:31:4c:31:7e:47:f4:9d:0f:e9:34:31:db:
                    cd:d5:e1:d9:03:90:8d:52:d7:ae:98:b9:ed:8d:89:
                    60:10:8b:86:4b:c9:4b:56:a8:6d:e8:19:2f:d5:14:
                    50:74:2a:f0:0d:fa:22:81:40:cb:75:57:da:6c:64:
                    d2:fe:65:c6:18:f4:44:df:32:04:39:19:97:30:36:
                    a7:ca:73:21:83:4e:36:39:85:cf:30:03:1e:95:37:
                    f3:fd:b2:43:e5:bf:83:7e:f9:0f:a5:7e:d5:69:c1:
                    e3:8e:84:a9:9c:66:9f:db:f5:50:4b:26:30:e9:14:
                    51:07:75:d9:da:6a:3b:bb:7b:6c:24:0c:ab:90:af:
                    7f:9c:f7:37:f5:f4:8e:5c:32:c3:6d:2f:1e:ea:ee:
                    f2:48:aa:18:ff:f7:a8:17:ba:36:aa:c7:85:b3:5b:
                    c1:d1:44:31:6b:eb:71:06:e5:21:de:1c:2d:16:27:
                    9c:2b:9f:a3:62:d3:48:77:42:37:7c:c9:bb:c3:2f:
                    17:63:22:cd:66:48:85:b8:72:4c:ed:50:b5:a5:1b:
                    76:a8:44:1d:ed:0b:d4:50:81:c6:f1:26:ab:62:32:
                    c9:da:83:e4:f3:3f:64:38:b4:4f:5f:9b:25:1a:fa:
                    2a:72:76:94:a7:47:c9:7b:d1:ff:f5:74:9a:51:f8:
                    ba:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:CD:EE:A5:E4:4B:A1:52:9D:FF:A5:05:AB:1F:00:00:07:FF:40:17
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/E0CDEEA5E44BA1529DFFA505AB1F000007FF4017.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.208.0/22
                IPv6:
                  2804:4f04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268298

    Signature Algorithm: sha256WithRSAEncryption
         a4:5e:26:62:9a:ad:99:44:ec:1b:68:9c:85:c9:fa:bc:02:6c:
         69:32:d4:de:10:06:f1:2d:5b:f1:5d:cc:f8:a1:7d:d0:52:30:
         23:94:e0:8f:c5:ce:20:cd:63:05:37:80:73:76:4d:24:f1:ed:
         04:f7:79:1a:68:29:75:88:85:33:d4:6e:07:a6:8c:ba:87:f9:
         bf:37:69:a7:0e:cd:1e:10:b2:5c:d7:55:e8:78:8e:85:eb:79:
         8e:a1:59:ec:2a:34:00:60:8e:c3:53:f1:0a:66:a9:e6:36:41:
         91:39:96:c3:b2:57:2c:17:f2:fd:84:1a:63:1c:de:6b:f8:9f:
         ce:dd:44:6b:f0:e6:1f:79:29:1c:44:72:b8:40:09:0f:43:8a:
         30:12:cd:cb:18:ac:40:7c:da:a9:96:7e:0a:aa:3b:cc:02:0a:
         cb:22:f7:91:9d:a6:8b:0a:5b:1c:cc:a3:74:f6:24:99:5c:e0:
         4b:9d:4b:30:ac:c6:cf:67:9f:3e:a8:a5:50:df:75:47:7f:00:
         2b:9b:78:51:26:3b:49:e1:55:bd:b0:f2:d7:d3:6b:a1:a4:7c:
         7e:67:86:14:1a:6a:95:91:0b:1a:4a:92:1f:bc:5f:22:f9:8e:
         5b:ab:c9:08:b7:38:be:c3:69:a4:48:89:6a:1a:ac:0f:32:d6:
         c6:ed:24:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----