This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1B091E04D4F6A99431893FC7D67B71130256727C.cer
File:                     1B091E04D4F6A99431893FC7D67B71130256727C.cer (raw, json)
Hash identifier:          ip/sFlrkjjAhYyY9JH06HA+yQ2wAOJdu+kXlTe6J1Ok=
Subject key identifier:   1B:09:1E:04:D4:F6:A9:94:31:89:3F:C7:D6:7B:71:13:02:56:72:7C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       75504784C2A6C2A5C6F79DC2C5A8513E2AA83E8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8qjkxpnghjFfeWn88vvECBJGWGu5tZEc24jW3vSvZqsw/0/1B091E04D4F6A99431893FC7D67B71130256727C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8qjkxpnghjFfeWn88vvECBJGWGu5tZEc24jW3vSvZqsw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 07 Dec 2025 20:15:48 +0000
Certificate not after:    Sun 06 Dec 2026 20:20:48 +0000
Subordinate resources:    AS: 268582
                          IP: 45.162.232.0/22
                          IP: 2804:5368::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:50:47:84:c2:a6:c2:a5:c6:f7:9d:c2:c5:a8:51:3e:2a:a8:3e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  7 20:15:48 2025 GMT
            Not After : Dec  6 20:20:48 2026 GMT
        Subject: CN=1B091E04D4F6A99431893FC7D67B71130256727C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8b:5f:80:e5:f8:9e:38:6e:c0:bb:88:77:e7:
                    91:52:b0:52:9c:19:9e:00:3e:d2:29:49:c5:4f:29:
                    82:7c:c4:b8:d8:00:17:a9:38:57:97:57:87:28:da:
                    e7:bb:69:30:10:f5:9e:fd:a2:14:62:89:c9:53:f3:
                    c6:4b:b9:d9:29:ac:b8:46:0d:bc:1f:a0:ca:f1:15:
                    3e:86:5b:bc:8c:28:24:50:7f:d8:ac:b4:a4:d2:91:
                    32:a0:06:16:88:67:13:e1:eb:7c:00:c2:a7:2e:fd:
                    08:de:1b:1c:f3:c1:3a:09:ea:d9:8b:83:f4:c0:10:
                    f6:74:1b:6e:33:27:f8:85:68:77:1c:21:48:f5:15:
                    f4:ac:89:6d:e7:84:09:a8:5e:cc:6e:92:65:32:60:
                    13:5d:2c:0c:bc:98:ae:2c:37:e4:2b:1a:63:ce:93:
                    b6:32:da:94:23:64:58:65:67:86:da:f0:fd:dc:b1:
                    d5:85:9f:08:6e:fa:11:f0:ac:09:c9:ff:7e:36:4d:
                    16:b4:5a:be:93:d3:03:ac:da:c5:58:8e:a1:eb:34:
                    96:94:fa:1b:38:86:81:9a:79:1b:bc:c1:af:cc:dc:
                    4e:a1:6c:9d:30:32:1a:14:d4:7e:dc:c1:97:54:9b:
                    ee:39:b5:ce:4a:e1:ff:21:96:39:df:98:fd:15:a7:
                    22:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:09:1E:04:D4:F6:A9:94:31:89:3F:C7:D6:7B:71:13:02:56:72:7C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8qjkxpnghjFfeWn88vvECBJGWGu5tZEc24jW3vSvZqsw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8qjkxpnghjFfeWn88vvECBJGWGu5tZEc24jW3vSvZqsw/0/1B091E04D4F6A99431893FC7D67B71130256727C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.232.0/22
                IPv6:
                  2804:5368::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268582

    Signature Algorithm: sha256WithRSAEncryption
         93:4b:8c:10:ba:1f:06:5a:a0:f0:62:74:cd:cb:74:c1:df:da:
         f1:cf:25:89:1b:67:76:63:80:08:72:c1:39:ab:7e:ab:21:1d:
         66:35:77:ee:24:21:d0:cf:92:29:bd:48:49:3d:4d:e1:0a:50:
         72:20:0e:83:a2:3f:ea:2c:7f:f9:9d:4e:b2:6a:74:ca:60:86:
         10:1b:a9:c9:45:98:21:9c:12:2a:23:8f:b2:d5:fc:f2:fb:48:
         7d:f6:82:d7:64:1a:d9:a6:41:44:a9:94:0b:bc:98:0d:4c:5f:
         ef:9f:4d:1b:0e:a6:7c:3f:ac:89:f5:ce:a4:e3:8d:06:3e:e1:
         22:3a:c9:e5:8a:c6:4e:4f:ce:f7:71:e1:a6:57:8b:7a:b7:46:
         03:a4:b3:ca:bc:bd:fe:59:0e:19:8e:87:ea:6b:9e:06:65:a8:
         7a:09:87:b5:27:2f:75:ec:b1:93:38:d2:c6:ff:25:ad:12:90:
         c0:51:57:e0:a5:32:b5:98:30:8d:58:56:34:5b:53:f2:5f:db:
         99:04:79:f4:31:43:36:ff:2f:d7:37:64:f8:42:db:1c:dd:a6:
         9d:91:02:ac:85:12:d6:10:c7:8e:0c:9e:40:4d:96:55:64:c3:
         5e:1f:cd:d2:e6:26:67:7d:15:6c:4c:f7:4f:3e:61:0f:78:41:
         5e:a6:74:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----