This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/19F89038A7A3090DD5630155A9CB3A62F9A8F8CA.cer
File:                     19F89038A7A3090DD5630155A9CB3A62F9A8F8CA.cer (raw, json)
Hash identifier:          b+NWGFC7YVoE95PF3aXI4z/5YsONeMdj+lfMP78KLpc=
Subject key identifier:   19:F8:90:38:A7:A3:09:0D:D5:63:01:55:A9:CB:3A:62:F9:A8:F8:CA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       56CEE6BA1A61C0B28E4747A6D6CA15B4C976176C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/19F89038A7A3090DD5630155A9CB3A62F9A8F8CA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Dec 2025 20:21:18 +0000
Certificate not after:    Thu 17 Dec 2026 20:26:18 +0000
Subordinate resources:    AS: 269130
                          IP: 45.180.40.0/22
                          IP: 2804:5fe4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ce:e6:ba:1a:61:c0:b2:8e:47:47:a6:d6:ca:15:b4:c9:76:17:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 18 20:21:18 2025 GMT
            Not After : Dec 17 20:26:18 2026 GMT
        Subject: CN=19F89038A7A3090DD5630155A9CB3A62F9A8F8CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ff:ee:b1:0f:77:3c:01:8a:be:fb:f8:c0:d5:
                    64:3b:bd:b7:81:e8:72:21:1f:0b:60:53:75:44:14:
                    ec:0d:03:21:ad:18:83:c0:a5:fc:6d:53:ae:af:00:
                    54:70:d6:84:68:da:a6:ea:d8:ac:44:96:0e:ff:f2:
                    79:0c:00:0c:7f:62:e8:41:28:e9:75:34:87:b4:91:
                    f6:25:d0:26:14:d9:2a:3a:9f:3b:7d:89:49:b8:dd:
                    37:0e:c9:19:a0:9d:2a:61:6c:5e:38:6f:9f:56:ca:
                    b8:89:64:d7:67:f6:a0:6a:d6:13:8d:96:0f:5d:c6:
                    9c:68:67:4a:c3:12:71:2b:33:48:d8:e4:fa:0e:4d:
                    6c:88:87:c6:ab:da:ca:e0:11:a6:26:d5:8a:87:57:
                    70:b9:19:6a:50:01:ec:99:90:85:44:42:3a:54:c9:
                    3f:c4:80:5e:cf:5c:c2:84:89:6a:69:48:e5:f8:6a:
                    1a:8f:31:b7:76:bd:93:23:ed:a4:4d:c3:7d:a0:64:
                    63:58:74:b2:6f:98:5e:16:5f:94:f7:f4:5e:32:7e:
                    40:9a:c6:07:f0:08:59:09:17:d2:74:a1:bb:c7:52:
                    20:dd:8b:b9:f7:1d:68:d8:e8:c7:25:82:5c:2d:84:
                    15:7c:0b:9b:51:f9:0a:3f:49:97:ff:ee:d3:38:99:
                    ab:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:F8:90:38:A7:A3:09:0D:D5:63:01:55:A9:CB:3A:62:F9:A8:F8:CA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/19F89038A7A3090DD5630155A9CB3A62F9A8F8CA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.40.0/22
                IPv6:
                  2804:5fe4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269130

    Signature Algorithm: sha256WithRSAEncryption
         ae:19:d1:dc:92:ea:0c:1a:5d:2c:12:7e:a8:18:21:7f:1a:ce:
         05:ec:e9:96:2b:44:d0:4b:aa:4d:60:1c:1b:cd:39:96:12:74:
         fb:fa:bc:e3:45:72:a5:b4:fb:03:20:4a:31:88:40:da:35:37:
         d8:60:e0:ef:bf:51:f3:d1:e5:0a:fe:81:0a:53:6b:7e:a8:95:
         0d:88:49:cb:f0:e7:31:87:1e:cd:00:a8:60:94:66:8b:01:64:
         7c:27:08:f2:e2:15:37:03:d7:23:a7:42:1d:e6:37:d2:19:aa:
         e0:c2:a9:ea:57:ae:d7:34:10:c9:2d:41:41:1c:5e:bf:73:03:
         eb:01:0c:fe:be:3f:29:0e:91:f3:dc:cb:b4:97:9c:5f:bb:0b:
         e9:fe:fd:16:01:fb:2c:f1:a3:e5:7a:cf:e0:a1:14:96:ce:e4:
         1d:d5:e9:f6:cd:b9:09:ca:87:6f:1d:8a:62:0a:77:9f:e4:cc:
         95:df:84:76:e2:01:a2:cc:bb:a3:17:86:17:2d:6b:fb:42:9c:
         7e:dd:28:5e:87:70:fc:a4:e1:24:3e:5e:f3:8b:f6:61:bd:94:
         c8:f0:69:57:ac:f8:aa:9d:a6:57:78:b5:c4:c4:47:53:ab:4c:
         d0:98:3b:8a:93:2e:f9:6e:59:d4:c7:0f:6f:7f:4f:62:92:77:
         d6:d3:3c:b6
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUVs7muhphwLKOR0em1soVtMl2F2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEyMTgyMDIxMThaFw0yNjEyMTcyMDI2MThaMDMxMTAvBgNV
BAMTKDE5Rjg5MDM4QTdBMzA5MERENTYzMDE1NUE5Q0IzQTYyRjlBOEY4Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2/+6xD3c8AYq++/jA1WQ7vbeB
6HIhHwtgU3VEFOwNAyGtGIPApfxtU66vAFRw1oRo2qbq2KxElg7/8nkMAAx/YuhB
KOl1NIe0kfYl0CYU2So6nzt9iUm43TcOyRmgnSphbF44b59WyriJZNdn9qBq1hON
lg9dxpxoZ0rDEnErM0jY5PoOTWyIh8ar2srgEaYm1YqHV3C5GWpQAeyZkIVEQjpU
yT/EgF7PXMKEiWppSOX4ahqPMbd2vZMj7aRNw32gZGNYdLJvmF4WX5T39F4yfkCa
xgfwCFkJF9J0obvHUiDdi7n3HWjY6MclglwthBV8C5tR+Qo/SZf/7tM4mau5AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQZ+JA4p6MJDdVj
AVWpyzpi+aj4yjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2Qz
clh0Q1Nnc3ljYVVNYkFWN3lUdHcxY01OSDN0YWlHelZXaVlSaHdQRnYvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dk
M3JYdENTZ3N5Y2FVTWJBVjd5VHR3MWNNTkgzdGFpR3pWV2lZUmh3UEZ2LzAvMTlG
ODkwMzhBN0EzMDkwREQ1NjMwMTU1QTlDQjNBNjJGOUE4RjhDQS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbQoMA0EAgACMAcDBQAoBF/kMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQbSjANBgkqhkiG9w0BAQsFAAOCAQEArhnR3JLqDBpdLBJ+
qBghfxrOBezplitE0EuqTWAcG805lhJ0+/q840VypbT7AyBKMYhA2jU32GDg779R
89HlCv6BClNrfqiVDYhJy/DnMYcezQCoYJRmiwFkfCcI8uIVNwPXI6dCHeY30hmq
4MKp6leu1zQQyS1BQRxev3MD6wEM/r4/KQ6R89zLtJecX7sL6f79FgH7LPGj5XrP
4KEUls7kHdXp9s25CcqHbx2KYgp3n+TMld+EduIBosy7oxeGFy1r+0Kcft0oXodw
/KThJD5e84v2Yb2UyPBpV6z4qp2mV3i1xMRHU6tM0Jg7ipMu+W5Z1McPb39PYpJ3
1tM8tg==
-----END CERTIFICATE-----