This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E246B17C2B9BE5A0051959FCF6752346B46E0EAA.cer
File:                     E246B17C2B9BE5A0051959FCF6752346B46E0EAA.cer (raw, json)
Hash identifier:          +/8FSsggMRfcXtckZEk1Yju3Pp3LIlcf/y9dHA8jGAQ=
Subject key identifier:   E2:46:B1:7C:2B:9B:E5:A0:05:19:59:FC:F6:75:23:46:B4:6E:0E:AA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       788B1D546A373F5406BE69B2220FAF807C82CB65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7A2KHyJmc9VsH3evgQhUQjwTSHJ4aAQxHR5Z3eeQKjmD/0/E246B17C2B9BE5A0051959FCF6752346B46E0EAA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7A2KHyJmc9VsH3evgQhUQjwTSHJ4aAQxHR5Z3eeQKjmD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Nov 2025 11:17:23 +0000
Certificate not after:    Thu 19 Nov 2026 11:22:23 +0000
Subordinate resources:    AS: 267231
                          IP: 45.231.188.0/22
                          IP: 2804:4a4c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 04:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:8b:1d:54:6a:37:3f:54:06:be:69:b2:22:0f:af:80:7c:82:cb:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 20 11:17:23 2025 GMT
            Not After : Nov 19 11:22:23 2026 GMT
        Subject: CN=E246B17C2B9BE5A0051959FCF6752346B46E0EAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e2:90:54:47:f2:bb:0e:1d:25:26:37:d6:a0:
                    4e:11:7b:ca:b0:86:83:02:ff:fb:82:ab:08:05:04:
                    9f:98:08:35:39:99:28:6c:a3:65:b6:e0:ce:00:ae:
                    20:f7:04:b5:20:65:01:28:7a:b6:bd:21:d6:ce:d1:
                    69:10:b5:f0:8c:e3:4b:90:ff:1b:e8:19:87:1d:41:
                    59:8c:3a:0c:49:e1:7d:65:f5:87:7b:b8:b4:8e:e6:
                    f2:ea:0c:01:71:43:b8:81:64:4e:56:29:2c:f1:02:
                    2f:2c:ed:9a:55:e6:12:cc:6d:bc:f9:27:be:75:40:
                    3c:ed:30:4d:2d:5d:ec:db:1a:8c:ef:30:d9:9c:e9:
                    95:b4:4f:f9:50:b8:9a:cc:59:8c:ce:cc:a4:34:63:
                    b2:1c:f5:a9:bc:a0:d5:25:a9:30:10:cd:0a:2f:3a:
                    91:7a:4d:3c:d9:78:ea:0d:0b:f5:d9:38:75:7b:0d:
                    2d:ec:a6:65:68:f6:dc:4e:e6:d6:4d:3b:6e:f7:d6:
                    ff:f4:68:96:0e:67:88:15:7b:b7:cc:0a:7d:8f:ee:
                    79:6c:ae:8d:9d:e1:fe:73:bc:d4:45:bd:59:a1:8f:
                    fb:b2:df:df:f0:59:89:06:8e:f8:a5:33:fb:54:0c:
                    67:21:84:34:84:e1:69:e6:5c:47:2a:36:bd:5b:14:
                    e1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E2:46:B1:7C:2B:9B:E5:A0:05:19:59:FC:F6:75:23:46:B4:6E:0E:AA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7A2KHyJmc9VsH3evgQhUQjwTSHJ4aAQxHR5Z3eeQKjmD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7A2KHyJmc9VsH3evgQhUQjwTSHJ4aAQxHR5Z3eeQKjmD/0/E246B17C2B9BE5A0051959FCF6752346B46E0EAA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.188.0/22
                IPv6:
                  2804:4a4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267231

    Signature Algorithm: sha256WithRSAEncryption
         9d:39:11:79:3d:4a:52:07:96:9a:36:cd:1e:31:05:95:c4:30:
         08:a1:c6:a5:3b:01:be:a8:b8:bc:15:14:dc:3a:e6:b7:8e:f6:
         a9:c4:3d:19:ab:da:fc:64:f9:52:4b:df:9a:cf:02:02:c6:ad:
         e5:7e:5d:23:bb:e6:02:20:68:65:21:f4:56:18:9d:13:90:18:
         2e:c0:d4:a8:6a:8c:87:ed:bf:77:39:94:68:8c:b6:a9:dd:a1:
         84:8d:cf:31:c9:99:b2:92:85:44:6e:c2:c0:92:e4:1c:dd:e4:
         ed:fb:cf:ae:d3:bf:4d:d3:25:cb:f8:19:72:c4:69:3f:6a:81:
         7c:2e:d4:02:f2:f2:55:14:e7:4b:69:6c:4e:5e:ed:4e:d1:61:
         0c:cb:69:9a:00:9b:cf:94:43:20:e7:5f:f7:ee:d4:bc:95:d9:
         0e:42:ca:00:3c:a4:ca:90:35:34:82:a8:0d:3f:b8:69:51:d9:
         87:2d:fd:f8:1c:86:85:db:26:b2:a0:d4:fa:62:c7:41:9a:12:
         34:1e:8c:49:23:d9:5b:c1:d6:df:2a:49:f8:be:a1:41:65:44:
         11:89:1d:75:0b:98:e0:6f:80:eb:3c:fb:97:7f:1b:89:31:dd:
         d0:6e:b8:1d:29:34:c6:90:44:a9:7e:2d:36:84:12:2b:bf:06:
         32:1f:91:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----