This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EFBFF18693AA724D3ACD35EE8D27150D4F9A897C.cer
File:                     EFBFF18693AA724D3ACD35EE8D27150D4F9A897C.cer (raw, json)
Hash identifier:          lLhrDu6yedAn9EgOapaLncUHPE8+oIzlvEGNlJTY+uE=
Subject key identifier:   EF:BF:F1:86:93:AA:72:4D:3A:CD:35:EE:8D:27:15:0D:4F:9A:89:7C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       02F88506CC2E23D192EC6C8F76E5CBFA39B3FA0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/EFBFF18693AA724D3ACD35EE8D27150D4F9A897C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Dec 2025 12:26:42 +0000
Certificate not after:    Mon 30 Nov 2026 12:31:42 +0000
Subordinate resources:    AS: 262529
                          IP: 45.224.248.0/22
                          IP: 2804:452c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f8:85:06:cc:2e:23:d1:92:ec:6c:8f:76:e5:cb:fa:39:b3:fa:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  1 12:26:42 2025 GMT
            Not After : Nov 30 12:31:42 2026 GMT
        Subject: CN=EFBFF18693AA724D3ACD35EE8D27150D4F9A897C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a7:c2:fb:3b:c3:b9:c7:25:04:2b:3d:69:a0:
                    5e:55:ed:c5:11:79:61:dc:95:8e:0b:51:e2:f0:36:
                    7e:73:8b:6e:87:be:f2:f6:b1:f2:6c:72:6d:73:fb:
                    60:02:36:2f:a4:ae:1d:22:68:71:6b:36:3b:00:26:
                    f4:2f:5f:74:09:88:f7:97:78:0a:1b:d9:c6:73:26:
                    a3:58:36:0e:90:f3:f6:ad:7b:c0:50:fd:5e:3b:3e:
                    ce:b0:f3:36:10:1e:68:a8:e8:e1:b3:4d:2a:e5:70:
                    eb:b1:83:f2:eb:fa:b2:e5:3a:e5:1b:9b:be:67:79:
                    f0:a4:32:be:b2:fb:e1:d5:8a:cd:98:0b:11:32:4d:
                    b0:58:6b:05:8c:28:e7:bf:99:45:83:d0:0f:b9:01:
                    74:84:f9:85:28:fa:ec:54:c7:8a:12:c9:dd:2c:21:
                    a9:93:01:6e:d5:04:ab:7a:7c:3d:cf:c5:16:c3:b0:
                    18:74:dc:b4:b0:4d:7f:9d:8f:04:72:f3:0c:a8:fd:
                    d4:2a:d8:15:d5:f6:90:4b:a6:a9:d8:20:dc:68:8a:
                    5c:01:33:ef:e1:d0:d6:7d:74:93:67:74:16:6b:cc:
                    33:b7:ae:0a:67:bf:d6:13:3e:54:27:0e:d6:e5:1a:
                    55:bb:75:43:ca:81:ae:bc:06:6e:30:65:90:f6:48:
                    72:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EF:BF:F1:86:93:AA:72:4D:3A:CD:35:EE:8D:27:15:0D:4F:9A:89:7C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FcMKU1VVCCFXoFQ32intEULUQhkNBqyKXcvvp4GwiHGk/0/EFBFF18693AA724D3ACD35EE8D27150D4F9A897C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.248.0/22
                IPv6:
                  2804:452c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262529

    Signature Algorithm: sha256WithRSAEncryption
         35:33:62:b4:c7:88:1a:28:4c:f0:ee:fb:b0:d9:ae:1e:14:50:
         95:e5:c0:32:5c:35:10:87:51:ca:bf:f5:3c:ad:60:b1:8c:60:
         5c:53:b2:85:6e:66:e9:1b:d6:d1:63:87:19:60:e6:ca:07:71:
         f1:f0:fa:49:40:c1:21:49:92:1d:4d:d8:21:b1:54:0b:3c:de:
         36:15:9d:f4:58:0f:70:4f:8e:58:57:c2:04:ca:02:2c:f4:5f:
         4c:c4:2b:61:be:1c:5c:b2:c6:7b:56:66:7b:3a:e9:3b:de:da:
         24:5d:f3:cd:45:e1:fd:55:2a:1e:e9:57:88:0f:0b:54:1f:ac:
         bc:46:45:28:ce:d9:da:b5:f0:73:30:e6:03:00:91:31:0c:84:
         6c:0b:bb:5b:61:c0:84:6a:65:48:94:66:a1:1b:4c:b3:62:8f:
         9e:bb:f0:1a:11:f0:75:5e:db:66:e2:a4:61:16:bf:00:0b:fe:
         87:d8:fb:ae:71:0b:d3:ce:d9:1d:07:77:20:05:f8:84:ca:14:
         97:5c:5d:9c:77:bc:ee:72:7a:d1:61:68:68:bc:92:0a:4d:6e:
         b7:4d:a6:67:9e:14:f0:cc:24:a5:a2:94:6e:c9:77:52:bb:c6:
         52:a6:05:a8:e7:a5:dd:3e:bd:33:ae:b0:9c:f5:77:f5:56:7f:
         d1:15:fd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----