This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E8C64F57C60E035CC91FAF096A8CBE39B4C3CF23.cer
File:                     E8C64F57C60E035CC91FAF096A8CBE39B4C3CF23.cer (raw, json)
Hash identifier:          lZCMBriMD7h3T0uRDjUs3y56NDhTsg0DxMV2mIdW7lg=
Subject key identifier:   E8:C6:4F:57:C6:0E:03:5C:C9:1F:AF:09:6A:8C:BE:39:B4:C3:CF:23
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5F424E4074972B35DC35AA83457FF888A459CFD8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/E8C64F57C60E035CC91FAF096A8CBE39B4C3CF23.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Nov 2025 16:58:04 +0000
Certificate not after:    Wed 11 Nov 2026 17:03:04 +0000
Subordinate resources:    AS: 270459
                          IP: 200.26.244.0/22
                          IP: 2804:6c50::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:42:4e:40:74:97:2b:35:dc:35:aa:83:45:7f:f8:88:a4:59:cf:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 12 16:58:04 2025 GMT
            Not After : Nov 11 17:03:04 2026 GMT
        Subject: CN=E8C64F57C60E035CC91FAF096A8CBE39B4C3CF23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d4:1a:0e:b0:25:75:fb:a1:66:3d:65:c4:25:
                    bb:8f:3c:55:c0:8d:4d:22:53:a0:83:2b:ee:2d:06:
                    4c:c8:b5:62:ea:60:f1:84:75:3d:8e:22:ad:4a:e8:
                    1c:ac:b9:45:0b:5e:28:fd:c4:92:5d:fa:6f:56:e7:
                    3f:b8:ee:a9:3a:d7:88:4b:0b:12:75:c9:0f:cf:2a:
                    3a:f9:87:61:fd:fa:c3:8c:1d:de:67:e4:64:57:c3:
                    77:d1:44:8d:b4:de:b4:3a:cc:f1:07:b1:07:4d:db:
                    f2:89:72:63:f7:d0:61:b7:da:78:03:b0:8e:8f:0d:
                    e9:57:11:cb:68:f2:60:24:e3:e7:0b:f0:0f:fd:b6:
                    7d:4a:8c:95:90:5b:e1:0c:83:56:da:22:88:3d:ce:
                    2f:a8:74:28:32:54:d2:27:10:ae:14:66:a8:61:14:
                    86:4b:1c:40:29:16:4a:c2:63:7e:d8:3f:be:fc:e8:
                    b5:64:33:e8:d8:4c:1d:16:07:46:c1:fd:bf:47:e9:
                    20:51:29:99:5c:ad:43:df:a2:7d:c4:ad:d2:04:59:
                    b2:cf:aa:85:c3:1f:8b:23:3d:12:e6:6c:14:3b:58:
                    11:1c:49:3b:bf:f0:e1:1d:4d:5d:9d:96:8a:8a:23:
                    78:76:a1:ea:50:42:9e:9f:6c:44:1b:52:a0:73:3c:
                    30:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E8:C6:4F:57:C6:0E:03:5C:C9:1F:AF:09:6A:8C:BE:39:B4:C3:CF:23
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/E8C64F57C60E035CC91FAF096A8CBE39B4C3CF23.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.244.0/22
                IPv6:
                  2804:6c50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270459

    Signature Algorithm: sha256WithRSAEncryption
         60:af:f6:87:8c:c4:9c:01:aa:4b:6a:5b:50:b6:b1:cf:af:70:
         fa:53:2b:c5:fd:1c:c9:18:6f:ac:80:7d:79:ca:25:59:8f:d1:
         82:d2:56:f9:34:0f:2e:3c:70:d8:d6:8d:4a:71:95:4b:2f:0b:
         84:8d:59:51:3c:ec:23:05:26:6a:28:52:b6:25:f7:a4:df:73:
         c5:7e:49:12:70:b3:e7:db:b6:51:0b:59:be:31:f9:5e:f2:9b:
         6e:84:af:72:dc:0a:7a:aa:52:61:21:72:f8:36:f9:4e:f2:fc:
         63:a3:88:e2:df:76:67:dd:fe:e0:9d:4d:93:99:df:df:f5:6a:
         8c:6b:14:b1:6a:bf:27:ec:a4:6d:99:50:77:2c:3a:56:25:af:
         18:64:0f:bc:4a:a5:90:af:5f:60:54:2f:2d:f2:4d:38:4e:63:
         7d:ee:eb:81:73:13:99:9e:37:03:c0:df:3b:b1:30:b6:eb:3c:
         3e:96:a1:fa:54:2e:b7:84:74:ed:44:b5:8f:45:f6:62:0a:28:
         cd:b5:30:9e:06:b2:96:ea:4e:75:32:30:cc:45:18:1c:6c:a6:
         56:f5:fe:06:a2:94:52:a2:b0:6d:4b:96:f9:cc:b7:ec:57:71:
         6e:5c:a2:0d:19:a1:87:f9:05:f9:b8:ec:eb:ff:00:72:8c:8b:
         88:1f:16:77
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUX0JOQHSXKzXcNaqDRX/4iKRZz9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTExMTIxNjU4MDRaFw0yNjExMTExNzAzMDRaMDMxMTAvBgNV
BAMTKEU4QzY0RjU3QzYwRTAzNUNDOTFGQUYwOTZBOENCRTM5QjRDM0NGMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw1BoOsCV1+6FmPWXEJbuPPFXA
jU0iU6CDK+4tBkzItWLqYPGEdT2OIq1K6BysuUULXij9xJJd+m9W5z+47qk614hL
CxJ1yQ/PKjr5h2H9+sOMHd5n5GRXw3fRRI203rQ6zPEHsQdN2/KJcmP30GG32ngD
sI6PDelXEcto8mAk4+cL8A/9tn1KjJWQW+EMg1baIog9zi+odCgyVNInEK4UZqhh
FIZLHEApFkrCY37YP7786LVkM+jYTB0WB0bB/b9H6SBRKZlcrUPfon3ErdIEWbLP
qoXDH4sjPRLmbBQ7WBEcSTu/8OEdTV2dloqKI3h2oepQQp6fbEQbUqBzPDB9AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBToxk9Xxg4DXMkf
rwlqjL45tMPPIzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSExH
RXdYTVo1U3hESzViWldFMlY3YlFSNmR6UWF4dFdZNjF5dTI2Z3N5TVUvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hM
R0V3WE1aNVN4REs1YlpXRTJWN2JRUjZkelFheHRXWTYxeXUyNmdzeU1VLzAvRThD
NjRGNTdDNjBFMDM1Q0M5MUZBRjA5NkE4Q0JFMzlCNEMzQ0YyMy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyBr0MA0EAgACMAcDBQAoBGxQMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQgezANBgkqhkiG9w0BAQsFAAOCAQEAYK/2h4zEnAGqS2pb
ULaxz69w+lMrxf0cyRhvrIB9ecolWY/RgtJW+TQPLjxw2NaNSnGVSy8LhI1ZUTzs
IwUmaihStiX3pN9zxX5JEnCz59u2UQtZvjH5XvKbboSvctwKeqpSYSFy+Db5TvL8
Y6OI4t92Z93+4J1Nk5nf3/VqjGsUsWq/J+ykbZlQdyw6ViWvGGQPvEqlkK9fYFQv
LfJNOE5jfe7rgXMTmZ43A8DfO7Ewtus8Ppah+lQut4R07US1j0X2YgoozbUwngay
lupOdTIwzEUYHGymVvX+BqKUUqKwbUuW+cy37FdxblyiDRmhh/kF+bjs6/8AcoyL
iB8Wdw==
-----END CERTIFICATE-----