This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E9C1CDFE922950B0B75B4BEA6EAD6969F1C94834.cer
File:                     E9C1CDFE922950B0B75B4BEA6EAD6969F1C94834.cer (raw, json)
Hash identifier:          I7i5JkS2XLPfTt0UC09W0QNpNsEMvy0wckTy9wZoI3Y=
Subject key identifier:   E9:C1:CD:FE:92:29:50:B0:B7:5B:4B:EA:6E:AD:69:69:F1:C9:48:34
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       115B1B7477092A696E66CD20924357F79203CA8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G9UayEKVazc5wGF5SR4vkms8VH6osS8Jiq22p7UNGi1F/0/E9C1CDFE922950B0B75B4BEA6EAD6969F1C94834.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G9UayEKVazc5wGF5SR4vkms8VH6osS8Jiq22p7UNGi1F/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Nov 2025 17:59:10 +0000
Certificate not after:    Mon 16 Nov 2026 18:04:10 +0000
Subordinate resources:    AS: 269267
                          IP: 45.182.56.0/22
                          IP: 2804:61f4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:5b:1b:74:77:09:2a:69:6e:66:cd:20:92:43:57:f7:92:03:ca:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 17 17:59:10 2025 GMT
            Not After : Nov 16 18:04:10 2026 GMT
        Subject: CN=E9C1CDFE922950B0B75B4BEA6EAD6969F1C94834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:70:7b:24:2b:b8:a0:06:09:3b:c5:84:8a:ac:
                    5b:f0:a8:6f:61:60:1d:44:b6:ac:1e:e2:ee:22:2a:
                    b3:ee:ff:73:56:35:69:70:6b:48:43:c1:69:86:aa:
                    2b:65:75:ce:6e:12:2a:c6:81:46:13:45:f8:49:a1:
                    2d:88:6c:99:da:06:a0:08:27:d0:d1:9e:32:be:cc:
                    00:f5:b6:ac:95:f8:5e:bb:28:76:8e:41:80:aa:ac:
                    20:f2:06:8e:24:c1:04:51:28:51:68:e3:70:07:eb:
                    4d:ba:1f:8e:7a:97:aa:5d:6d:3e:c9:94:83:a8:09:
                    37:fa:e8:f2:f5:8c:0f:ec:33:dc:0f:7a:d6:46:e3:
                    24:63:57:03:58:47:21:b7:f2:a6:b5:3c:19:4d:c8:
                    d7:ea:b6:e6:8d:05:8f:3d:0a:24:b8:e0:b4:18:01:
                    e8:c5:14:35:de:07:64:72:35:86:6f:c8:cb:fd:91:
                    01:86:dc:a4:2d:a8:6e:07:fd:16:27:8e:a4:c9:50:
                    6b:49:ad:0c:0e:8a:38:d7:f9:b3:ca:44:86:bc:70:
                    81:f5:8f:68:09:d7:ce:70:9b:59:92:72:0a:3c:08:
                    63:42:83:df:9b:52:75:be:17:31:e7:25:b7:53:96:
                    d4:a2:92:cc:05:9f:5a:a1:ef:ff:61:10:2a:db:da:
                    52:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E9:C1:CD:FE:92:29:50:B0:B7:5B:4B:EA:6E:AD:69:69:F1:C9:48:34
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G9UayEKVazc5wGF5SR4vkms8VH6osS8Jiq22p7UNGi1F/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G9UayEKVazc5wGF5SR4vkms8VH6osS8Jiq22p7UNGi1F/0/E9C1CDFE922950B0B75B4BEA6EAD6969F1C94834.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.56.0/22
                IPv6:
                  2804:61f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269267

    Signature Algorithm: sha256WithRSAEncryption
         69:4e:18:d8:98:31:2e:1a:fd:a3:22:81:dc:9f:d2:9f:08:1b:
         49:4f:7a:2c:00:6c:e5:c6:7f:7a:be:82:52:ba:b8:63:61:c4:
         e3:e3:12:9e:70:1f:aa:17:c5:8f:1d:05:be:dd:19:0a:ee:8b:
         f6:80:de:e9:64:e5:b1:6e:89:c7:26:67:0a:4c:15:b7:fc:f8:
         6b:ed:fd:a8:77:48:98:73:82:bd:60:82:5f:37:01:9e:8f:ad:
         c7:ff:ab:de:53:09:81:62:2d:a9:cd:2b:bf:2c:dc:82:27:9c:
         c4:6e:3d:79:47:87:d8:c3:53:a5:7c:ed:ea:da:13:ae:e3:4d:
         6d:6f:35:c9:8f:ea:95:c7:8b:7f:4a:cc:5b:06:67:4d:2f:af:
         e3:3f:9b:54:d0:d3:3a:6f:9f:ed:aa:8b:11:e6:80:d1:68:51:
         7d:e1:bd:63:e8:16:e5:ec:30:18:74:2f:27:68:9e:62:85:bb:
         26:a8:c8:0d:f8:c7:93:b5:af:a7:92:92:8d:9e:5a:4a:e6:df:
         86:3b:28:8b:f5:f2:85:be:fa:89:34:15:2b:22:98:b6:5a:e9:
         b6:9a:6a:87:c0:ab:15:9b:30:d4:6a:08:e5:15:1e:95:12:cc:
         e4:db:2a:ee:af:0d:ca:f1:39:e9:e0:a4:98:5d:64:f8:91:1f:
         9e:87:5a:5f
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUEVsbdHcJKmluZs0gkkNX95IDyoowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTExMTcxNzU5MTBaFw0yNjExMTYxODA0MTBaMDMxMTAvBgNV
BAMTKEU5QzFDREZFOTIyOTUwQjBCNzVCNEJFQTZFQUQ2OTY5RjFDOTQ4MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrcHskK7igBgk7xYSKrFvwqG9h
YB1Etqwe4u4iKrPu/3NWNWlwa0hDwWmGqitldc5uEirGgUYTRfhJoS2IbJnaBqAI
J9DRnjK+zAD1tqyV+F67KHaOQYCqrCDyBo4kwQRRKFFo43AH6026H456l6pdbT7J
lIOoCTf66PL1jA/sM9wPetZG4yRjVwNYRyG38qa1PBlNyNfqtuaNBY89CiS44LQY
AejFFDXeB2RyNYZvyMv9kQGG3KQtqG4H/RYnjqTJUGtJrQwOijjX+bPKRIa8cIH1
j2gJ185wm1mScgo8CGNCg9+bUnW+FzHnJbdTltSikswFn1qh7/9hECrb2lI9AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTpwc3+kilQsLdb
S+purWlp8clINDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzlV
YXlFS1ZhemM1d0dGNVNSNHZrbXM4Vkg2b3NTOEppcTIycDdVTkdpMUYvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c5
VWF5RUtWYXpjNXdHRjVTUjR2a21zOFZINm9zUzhKaXEyMnA3VU5HaTFGLzAvRTlD
MUNERkU5MjI5NTBCMEI3NUI0QkVBNkVBRDY5NjlGMUM5NDgzNC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbY4MA0EAgACMAcDBQAoBGH0MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQb0zANBgkqhkiG9w0BAQsFAAOCAQEAaU4Y2JgxLhr9oyKB
3J/SnwgbSU96LABs5cZ/er6CUrq4Y2HE4+MSnnAfqhfFjx0Fvt0ZCu6L9oDe6WTl
sW6JxyZnCkwVt/z4a+39qHdImHOCvWCCXzcBno+tx/+r3lMJgWItqc0rvyzcgiec
xG49eUeH2MNTpXzt6toTruNNbW81yY/qlceLf0rMWwZnTS+v4z+bVNDTOm+f7aqL
EeaA0WhRfeG9Y+gW5ewwGHQvJ2ieYoW7JqjIDfjHk7Wvp5KSjZ5aSubfhjsoi/Xy
hb76iTQVKyKYtlrptppqh8CrFZsw1GoI5RUelRLM5Nsq7q8NyvE56eCkmF1k+JEf
nodaXw==
-----END CERTIFICATE-----