This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ECADEA938914F9A8499264BBC9B579A4EDF92D27.cer
File:                     ECADEA938914F9A8499264BBC9B579A4EDF92D27.cer (raw, json)
Hash identifier:          w9odzLrT03wSy6MoqRJirbWizKnH7AS1UVcbYp3znss=
Subject key identifier:   EC:AD:EA:93:89:14:F9:A8:49:92:64:BB:C9:B5:79:A4:ED:F9:2D:27
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       53B8115FB789091A5074B727D7FB658306DD5123
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/ECADEA938914F9A8499264BBC9B579A4EDF92D27.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 08 Nov 2025 23:11:48 +0000
Certificate not after:    Sat 07 Nov 2026 23:16:48 +0000
Subordinate resources:    AS: 61670
                          IP: 131.100.104.0/22
                          IP: 201.148.164.0/22
                          IP: 2804:1cb4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b8:11:5f:b7:89:09:1a:50:74:b7:27:d7:fb:65:83:06:dd:51:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  8 23:11:48 2025 GMT
            Not After : Nov  7 23:16:48 2026 GMT
        Subject: CN=ECADEA938914F9A8499264BBC9B579A4EDF92D27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c9:da:be:f4:17:ff:88:96:64:98:2a:6d:d6:
                    85:b3:a9:06:b1:ce:ad:ab:30:1d:70:4e:5e:d7:6d:
                    4d:1a:3e:0a:80:95:2a:da:58:85:f6:3e:81:f5:ed:
                    93:a9:ba:ec:4b:01:97:7e:f4:9f:0c:c7:45:72:2d:
                    94:10:d1:89:b8:94:fc:77:9f:8f:a1:d8:fe:0d:84:
                    d3:44:1c:94:18:bb:cd:6f:e8:87:69:37:7f:1b:8a:
                    51:25:09:1b:73:a8:90:f2:13:e4:77:ab:ad:d8:36:
                    d2:26:0a:5a:60:f7:e2:0a:1f:3e:1c:8a:5d:86:d7:
                    16:6e:37:ca:9e:64:6c:51:7f:75:c7:33:11:1d:74:
                    a1:8f:a0:70:4e:5a:14:5c:db:fb:2b:ae:02:f8:d8:
                    24:69:ed:ca:fb:3d:8c:f4:e3:49:3b:34:01:87:f8:
                    42:f5:8a:ed:17:be:98:bf:6d:b9:4f:04:f6:a1:36:
                    43:59:9b:ab:8d:a9:65:24:a2:8c:f4:7a:68:a5:6a:
                    2a:1c:7f:b1:44:fb:f6:fd:d5:1e:71:c3:17:35:18:
                    3a:65:b5:cc:03:4e:39:39:e1:fb:ea:3a:d0:88:64:
                    c3:f1:db:7b:bc:d4:03:b9:06:bf:e7:f5:04:a3:1c:
                    7b:44:75:25:e1:55:43:c5:c5:6d:3a:f4:b8:c4:b7:
                    49:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:AD:EA:93:89:14:F9:A8:49:92:64:BB:C9:B5:79:A4:ED:F9:2D:27
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/ECADEA938914F9A8499264BBC9B579A4EDF92D27.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.104.0/22
                  201.148.164.0/22
                IPv6:
                  2804:1cb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61670

    Signature Algorithm: sha256WithRSAEncryption
         8c:5f:bd:25:19:90:0d:83:9a:ae:d3:82:33:42:3a:6b:c2:82:
         cd:b6:37:f2:67:8a:2c:f2:a7:58:cd:a9:fc:15:93:75:2a:ae:
         76:26:80:b3:5c:5d:9a:19:19:d3:9f:60:23:9d:d8:57:79:da:
         af:ba:bf:94:d2:b7:15:9e:77:34:b6:97:69:4b:13:29:05:36:
         91:36:8e:0d:19:84:34:f2:1b:45:70:1d:b4:01:44:5d:0d:a7:
         e6:89:36:99:08:83:d1:97:06:36:cb:67:91:6f:9b:e6:49:42:
         3e:44:27:d1:24:68:dc:4f:da:97:2c:8f:e1:49:09:22:09:a3:
         2d:fa:8f:0f:58:74:a7:e8:c2:fb:fb:53:e5:97:81:39:42:d4:
         5e:a5:be:e1:36:e2:2d:ec:a1:51:0f:9c:9e:00:4f:3d:e2:4b:
         34:36:23:a9:c4:e2:88:c1:28:a3:ca:54:b1:05:6a:64:d4:9f:
         8f:a4:f3:ba:10:49:71:63:0f:10:d5:19:05:3c:34:6b:1b:17:
         b9:1a:2c:c7:d2:34:a2:44:40:0a:1d:9f:d3:7e:88:b7:47:93:
         b1:ea:5d:ce:22:6d:e4:37:c8:27:af:b3:db:95:b8:1e:8e:0f:
         4f:66:e2:d1:83:2a:4d:50:36:1d:25:e8:07:8b:64:ec:90:39:
         7a:b7:39:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:37:06 2025 by rpki-client