This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E0E56E765738AF9709155514C8A4C6494D4155B3.cer
File:                     E0E56E765738AF9709155514C8A4C6494D4155B3.cer (raw, json)
Hash identifier:          NDktVZ1P+eDaK7kmZ4vengVcRmHiPeYGHZAK4UwdXz4=
Subject key identifier:   E0:E5:6E:76:57:38:AF:97:09:15:55:14:C8:A4:C6:49:4D:41:55:B3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5F7D51B2F21A4EDB8600BA3DF4091984057C3E7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/E0E56E765738AF9709155514C8A4C6494D4155B3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 19 Nov 2025 10:15:03 +0000
Certificate not after:    Wed 18 Nov 2026 10:20:03 +0000
Subordinate resources:    AS: 268267
                          IP: 45.181.26.0/24
                          IP: 45.237.92.0/22
                          IP: 2804:4e88::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:52:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:7d:51:b2:f2:1a:4e:db:86:00:ba:3d:f4:09:19:84:05:7c:3e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 19 10:15:03 2025 GMT
            Not After : Nov 18 10:20:03 2026 GMT
        Subject: CN=E0E56E765738AF9709155514C8A4C6494D4155B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:45:6a:9e:0e:62:46:14:8b:af:61:cb:63:f0:
                    83:d6:dd:f2:0a:1a:89:40:26:ee:4e:4e:8f:6d:cf:
                    30:36:99:d8:a1:e8:52:cc:dc:b7:95:67:c6:50:a9:
                    9e:16:eb:67:c5:3c:cf:50:a8:42:f6:ac:ad:a9:2f:
                    9d:4a:65:2d:42:da:89:bb:1c:0e:11:7e:6d:a9:7a:
                    8b:03:3e:b0:bd:57:5a:8a:9d:68:be:70:fe:09:f5:
                    e1:35:e2:2a:e2:0f:9c:1c:0f:cd:f9:ef:c1:b1:8d:
                    54:50:b9:db:de:71:dd:f8:b9:b4:7e:b3:02:d9:b1:
                    85:08:ce:84:26:a4:29:41:fb:93:8e:fe:d0:66:3b:
                    49:c0:a8:4b:e7:d2:51:9e:3c:7e:a1:63:f5:6c:18:
                    1a:42:81:76:08:8e:d9:fc:32:d5:c1:a2:f2:96:c7:
                    75:2d:82:c8:ab:57:74:24:7d:e0:a6:ea:1d:82:55:
                    25:ae:03:54:57:4b:42:e4:c5:27:14:54:71:44:b0:
                    f8:13:e7:bc:7e:47:38:7f:14:1e:0f:bd:be:26:2d:
                    33:a6:e8:9e:97:ee:d3:f7:16:75:df:e1:d2:65:c7:
                    fb:32:ea:f2:b2:33:f7:f3:49:7a:30:b2:72:0c:60:
                    0b:60:12:d9:29:e6:63:30:03:42:28:74:9e:57:63:
                    46:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:E5:6E:76:57:38:AF:97:09:15:55:14:C8:A4:C6:49:4D:41:55:B3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/E0E56E765738AF9709155514C8A4C6494D4155B3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.26.0/24
                  45.237.92.0/22
                IPv6:
                  2804:4e88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268267

    Signature Algorithm: sha256WithRSAEncryption
         4a:20:f6:79:a9:b2:42:16:04:fa:6e:f8:94:17:85:17:1d:e9:
         8f:fd:2b:68:aa:87:dc:87:1b:96:4b:6e:6e:d8:01:07:d0:2c:
         cf:73:f0:13:6a:e7:6b:f6:36:c1:cc:0c:83:a5:0a:f2:32:c8:
         f8:14:be:09:bc:bf:47:ff:4c:37:99:57:d3:56:7c:c5:b4:97:
         6f:3e:ad:16:63:7c:83:cf:45:22:9e:7a:86:09:8c:d2:54:66:
         cc:42:50:b9:73:70:84:a9:16:44:e8:30:0e:48:33:4c:92:2a:
         1d:2d:91:aa:a8:14:b7:1a:86:11:c8:b3:66:1b:9a:9d:1a:0f:
         46:1f:0d:43:d9:1e:01:ae:d4:27:6c:60:52:58:02:a1:7e:c5:
         88:a3:ae:13:63:ba:ad:a7:fb:4d:e3:0e:1a:75:e8:d6:03:b2:
         14:70:3d:6f:3e:9e:40:9f:77:cd:fd:bd:78:00:43:00:c1:d7:
         4c:dc:82:48:07:dd:a5:93:e4:a2:bd:c1:14:c3:f5:85:93:43:
         34:90:8f:39:fc:86:7a:42:f0:2c:28:6a:80:f4:09:0d:21:22:
         d9:2a:73:54:f7:8b:1b:db:e7:98:b4:84:38:35:0d:cf:ee:f2:
         14:5c:57:23:6f:7f:04:04:83:7f:09:6a:8a:96:af:8f:83:1c:
         66:6f:a7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----