This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
File:                     EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer (raw, json)
Hash identifier:          lBtzbmYovFffXTOjDmYPGMUWSgKp5Xq3HV/mIVD42zQ=
Subject key identifier:   EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5FAE5482C1C0F9A4784C22B14014BC541D6096F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Nov 2025 00:56:44 +0000
Certificate not after:    Wed 11 Nov 2026 01:01:44 +0000
Subordinate resources:    AS: 266389
                          IP: 45.189.52.0/22
                          IP: 170.81.36.0/22
                          IP: 187.87.156.0/22
                          IP: 2804:3718::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ae:54:82:c1:c0:f9:a4:78:4c:22:b1:40:14:bc:54:1d:60:96:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 12 00:56:44 2025 GMT
            Not After : Nov 11 01:01:44 2026 GMT
        Subject: CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4b:00:1c:4a:57:e5:a8:2d:38:7b:66:72:65:
                    d6:69:8e:c2:ba:45:d6:f4:f1:97:63:d4:ad:c3:98:
                    a6:c3:56:f5:e6:b6:aa:d9:86:ee:ac:05:ff:5a:a7:
                    de:48:bb:b0:d9:6d:32:bc:25:95:f6:6b:d0:67:f9:
                    d5:88:42:e3:7a:8b:77:91:60:05:90:5f:9c:04:d8:
                    d5:51:b6:e8:e3:f5:b7:28:04:59:69:4b:5f:05:b7:
                    8f:70:16:5e:61:34:97:24:9b:b5:a0:f5:5c:20:79:
                    70:80:4b:48:4b:6b:c2:4b:9e:3d:4a:ab:fb:6a:67:
                    b1:c6:9b:01:04:89:96:c8:bb:c5:cd:15:f7:02:79:
                    77:f2:f2:0e:af:8d:80:91:a1:18:63:b0:43:33:ad:
                    77:5f:2f:c7:ed:54:f0:e4:78:14:05:cc:19:f0:60:
                    d0:07:34:d6:8b:13:46:b4:38:73:87:df:8a:82:63:
                    87:ec:4f:5b:cf:92:4d:83:06:4c:52:25:31:2a:38:
                    2e:fa:00:df:a4:34:3b:18:1f:ee:26:18:2d:ea:d5:
                    11:5a:46:2b:df:0c:cb:8a:ea:5e:70:0d:ca:44:7a:
                    26:3c:b7:ac:70:0d:9f:e5:53:06:e3:64:f3:42:92:
                    1a:42:ac:fa:bf:38:1c:c4:7a:af:99:5d:6d:38:5f:
                    f9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.52.0/22
                  170.81.36.0/22
                  187.87.156.0/22
                IPv6:
                  2804:3718::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266389

    Signature Algorithm: sha256WithRSAEncryption
         62:e6:ef:ce:3d:35:0a:c2:7e:ea:ea:9f:54:fb:48:1f:f5:72:
         a0:07:ab:f4:b1:25:eb:72:c9:b5:ab:83:22:8a:7c:9a:db:2b:
         85:2e:d1:12:8c:77:1d:34:0b:fc:85:be:d2:d6:21:d2:4d:ee:
         e0:cc:89:d1:44:34:52:e1:5a:20:c7:94:44:cc:87:1e:20:0f:
         7d:79:38:de:2b:0f:e3:ae:5c:12:16:60:4f:b4:d6:d6:0b:a5:
         05:e0:3a:10:0a:17:4e:2f:29:18:0a:56:c2:11:72:78:ea:ae:
         15:d7:24:a6:80:00:9d:7b:92:6d:49:52:cb:dc:8f:f9:c6:bd:
         53:eb:75:bf:2b:de:92:08:d2:a2:5a:01:64:11:fa:48:31:82:
         a6:0d:d0:dc:47:27:77:80:e8:11:43:15:b2:97:ca:fe:b1:ad:
         b4:03:ff:83:92:54:2c:51:57:19:6f:af:3e:ad:35:71:88:e2:
         38:96:05:69:65:7d:7c:79:75:2f:87:e0:c9:15:b9:75:9d:e5:
         bc:39:7d:0a:e7:4a:36:4c:b3:d6:3d:38:d9:df:93:2f:88:07:
         e7:d0:cd:93:a6:fa:06:b6:d1:fe:a8:f5:e9:9e:22:c2:85:a9:
         19:6e:fa:11:14:e6:45:33:23:dc:94:12:83:e4:93:f3:dd:6a:
         02:f7:79:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:37:42 2025 by rpki-client