This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E8FAEA9CA5E59718C329A558433A6076FF4425BF.cer
File:                     E8FAEA9CA5E59718C329A558433A6076FF4425BF.cer (raw, json)
Hash identifier:          DDA7izW8t8NAPyUVEU2QyQfbtKYPkG4KzkLKjnds0eU=
Subject key identifier:   E8:FA:EA:9C:A5:E5:97:18:C3:29:A5:58:43:3A:60:76:FF:44:25:BF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       728E56EE0DE32D3C1B2DDA93C71EDA24EAE7D312
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/E8FAEA9CA5E59718C329A558433A6076FF4425BF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Nov 2025 11:05:11 +0000
Certificate not after:    Mon 16 Nov 2026 11:10:11 +0000
Subordinate resources:    AS: 269090
                          IP: 45.178.76.0/22
                          IP: 2804:5f4c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:8e:56:ee:0d:e3:2d:3c:1b:2d:da:93:c7:1e:da:24:ea:e7:d3:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 17 11:05:11 2025 GMT
            Not After : Nov 16 11:10:11 2026 GMT
        Subject: CN=E8FAEA9CA5E59718C329A558433A6076FF4425BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c0:2e:e7:05:6e:c1:ab:fc:09:b9:da:b7:43:
                    af:a7:f1:d7:9b:21:23:5c:bf:ba:8d:5e:fd:f6:a2:
                    9f:ce:bc:3d:89:17:f5:49:4a:97:e0:cc:2b:c0:33:
                    36:d9:96:84:0f:3c:71:35:d0:fa:10:c0:27:cf:bb:
                    5b:91:67:2d:9f:a2:20:34:00:f1:d6:d3:d5:ce:23:
                    a1:64:81:16:25:a4:65:db:7e:bc:41:62:3c:0d:ce:
                    b5:2d:de:eb:66:48:e9:f9:6c:fc:95:48:b1:03:e7:
                    aa:19:e6:96:1b:7f:ee:fc:36:ad:79:e2:cb:7f:b6:
                    c4:2d:4f:0b:43:f6:7d:95:a4:57:62:2a:ec:23:a8:
                    3b:b7:6f:39:f8:6b:12:e2:78:c8:cb:32:bb:ab:2d:
                    ce:41:66:27:c0:97:ce:0c:74:1c:6d:ea:ea:56:11:
                    b4:65:e1:24:26:61:43:a7:9c:e8:f4:c4:9d:d7:e3:
                    18:54:cf:7b:4b:b0:cd:b3:55:52:75:f6:52:17:51:
                    d1:d6:50:d9:8a:2d:2d:9d:21:53:cc:75:cb:3c:62:
                    7e:4b:c0:eb:7d:32:7a:19:cf:0a:c9:4a:b3:39:dc:
                    b7:4b:aa:a2:35:56:a5:98:66:5f:f4:74:0e:03:82:
                    82:80:fa:ad:3a:94:8d:97:be:b5:b8:c5:4e:85:af:
                    b7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E8:FA:EA:9C:A5:E5:97:18:C3:29:A5:58:43:3A:60:76:FF:44:25:BF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/E8FAEA9CA5E59718C329A558433A6076FF4425BF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.76.0/22
                IPv6:
                  2804:5f4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269090

    Signature Algorithm: sha256WithRSAEncryption
         cf:64:8b:55:f0:9c:e8:e3:71:ae:2c:40:06:97:90:51:bd:b7:
         2f:e2:2e:81:a1:9c:64:74:9f:2e:99:13:6c:15:a3:64:1a:66:
         b1:03:e2:1e:c0:75:81:75:38:79:62:78:4d:0d:93:50:f0:0c:
         96:73:a8:f0:49:70:e9:d7:e8:0a:8d:88:20:19:00:69:d3:6a:
         2a:e7:8f:1a:c8:b0:79:5f:ce:cf:ef:bb:23:e7:f3:d0:02:92:
         5b:ea:08:32:c7:00:4c:97:f9:0c:55:10:fd:76:95:93:b7:1b:
         ec:e2:4e:57:72:7a:b8:44:3f:57:31:b0:53:7a:a2:95:d3:69:
         e1:4b:71:1d:b8:9c:12:85:43:dc:99:d2:26:23:a8:69:38:3a:
         91:b4:11:39:c8:6b:00:31:14:51:df:92:85:8f:98:eb:49:42:
         92:cb:9d:b0:bc:47:4a:ee:14:06:0b:40:56:27:3a:71:4a:74:
         8b:e2:72:6e:c1:36:45:35:38:0a:15:e4:d3:33:e0:34:2d:3e:
         00:4c:a0:05:92:1d:74:98:f5:13:41:98:1d:4a:d9:e0:42:3b:
         ab:66:43:f2:d6:80:98:b9:5c:16:ff:42:90:3b:74:53:a8:a4:
         ac:de:01:23:5b:b2:30:1d:09:38:4d:1a:92:fc:41:b4:4f:9d:
         2f:99:55:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----