This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E5A6F5B562DEC887693E66CDECF5C507DD15FFF8.cer
File:                     E5A6F5B562DEC887693E66CDECF5C507DD15FFF8.cer (raw, json)
Hash identifier:          fJsCO1KyfEYbDCk6Subizu3fnEIkBKIZIq22sd5PdRY=
Subject key identifier:   E5:A6:F5:B5:62:DE:C8:87:69:3E:66:CD:EC:F5:C5:07:DD:15:FF:F8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0C3DA56A6852CA99E6A2E193FA2FA84CE13765D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/E5A6F5B562DEC887693E66CDECF5C507DD15FFF8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Nov 2025 14:41:06 +0000
Certificate not after:    Wed 11 Nov 2026 14:46:06 +0000
Subordinate resources:    AS: 267237
                          IP: 45.231.252.0/22
                          IP: 2804:4a64::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:3d:a5:6a:68:52:ca:99:e6:a2:e1:93:fa:2f:a8:4c:e1:37:65:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 12 14:41:06 2025 GMT
            Not After : Nov 11 14:46:06 2026 GMT
        Subject: CN=E5A6F5B562DEC887693E66CDECF5C507DD15FFF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9e:af:37:c4:97:b6:89:2c:3b:31:b9:f3:11:
                    d8:ea:74:1e:a4:f5:ff:fb:3e:b5:31:8d:45:5c:47:
                    71:67:73:a3:2f:de:49:3c:50:b4:ef:af:ac:21:01:
                    24:e0:8b:64:48:ed:3a:06:c5:6c:7e:bf:2f:1d:a9:
                    70:ef:bf:8b:54:95:f4:74:80:a5:6f:bb:e2:4f:9e:
                    ae:e5:69:65:75:55:1c:af:3a:b6:7d:34:2e:48:30:
                    89:0c:c8:ba:50:0f:83:9b:81:20:e8:73:8a:97:e5:
                    08:e8:60:24:ef:c7:df:88:79:e5:6f:a4:c1:00:6e:
                    52:14:48:fd:08:cf:7b:28:9b:e7:7a:01:0f:9b:d8:
                    55:5e:dd:72:da:2c:cb:96:4f:09:c9:eb:88:9b:d9:
                    5d:3a:53:01:59:1c:6a:37:9d:11:79:35:7f:83:1e:
                    7d:2f:fa:20:7a:01:74:f0:db:c0:2b:5d:24:5b:bc:
                    44:b1:0b:72:5f:0d:e6:59:0b:55:d0:cd:ba:2d:79:
                    7e:da:2a:48:67:03:01:83:0a:31:26:44:0e:5d:31:
                    90:75:e6:d8:d2:d5:f2:7a:38:41:06:a7:df:ad:13:
                    6f:e0:c3:28:5c:15:64:ea:6c:e6:ee:61:b1:69:44:
                    50:39:ee:3a:19:e8:ea:a9:a6:ff:f7:c2:d2:dd:49:
                    2b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:A6:F5:B5:62:DE:C8:87:69:3E:66:CD:EC:F5:C5:07:DD:15:FF:F8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/E5A6F5B562DEC887693E66CDECF5C507DD15FFF8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.252.0/22
                IPv6:
                  2804:4a64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267237

    Signature Algorithm: sha256WithRSAEncryption
         2e:cd:c9:20:b4:14:80:5b:ea:c8:6d:ec:89:6f:04:20:a9:3b:
         79:1a:12:81:57:dc:2b:74:e0:a1:94:89:4b:d9:5b:66:ba:80:
         75:fc:76:90:57:39:ba:05:da:3b:8c:ba:7c:9b:12:32:71:23:
         6b:ff:f8:73:70:2d:89:b1:0e:af:1c:38:a9:7f:67:89:87:a0:
         65:fd:c6:6a:60:b4:ee:d3:77:b2:fe:0b:f8:28:b0:45:64:f5:
         71:60:90:1a:c5:ae:f8:a4:d8:46:e3:c6:ab:8e:18:6d:3b:64:
         66:16:bf:cd:70:e1:86:7f:88:c9:52:c3:cf:15:07:ad:89:f1:
         0b:b6:c6:1b:51:ef:fd:8a:79:cf:48:6c:10:bd:c8:5b:f5:ab:
         52:01:74:62:50:8b:09:b0:3f:b9:d6:df:c3:26:f2:92:30:7d:
         e2:88:2e:7e:7a:f6:e6:92:d4:d1:c0:12:40:3d:d4:db:b3:da:
         7e:b7:b9:79:b9:fc:fc:73:31:34:97:16:93:13:0d:72:ed:5e:
         77:d7:8a:54:05:db:ea:10:44:c8:70:6c:5c:9a:ee:90:93:ed:
         31:e2:57:f0:44:b4:c6:96:2b:54:74:c8:01:77:87:96:4c:1d:
         5d:85:7f:1f:63:cf:64:58:6f:8f:bb:27:1f:5f:41:7c:12:7b:
         46:2e:87:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----