This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.cer
File:                     2E3E3C7985BC3380A11795444EADAFC865E9A8E4.cer (raw, json)
Hash identifier:          E/A7B/ef1mzR7DAOAJVw4TJDcWlt0af2DLcIOBICmQ0=
Subject key identifier:   2E:3E:3C:79:85:BC:33:80:A1:17:95:44:4E:AD:AF:C8:65:E9:A8:E4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6DC9CD408D2264B70500804188E0CCF140ACE9EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Dec 2025 14:12:53 +0000
Certificate not after:    Thu 17 Dec 2026 14:17:53 +0000
Subordinate resources:    AS: 269015
                          IP: 45.178.20.0/22
                          IP: 2804:5e28::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c9:cd:40:8d:22:64:b7:05:00:80:41:88:e0:cc:f1:40:ac:e9:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 18 14:12:53 2025 GMT
            Not After : Dec 17 14:17:53 2026 GMT
        Subject: CN=2E3E3C7985BC3380A11795444EADAFC865E9A8E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1d:4f:9a:3a:34:31:9f:26:54:70:03:3e:82:
                    b5:a2:bc:e0:bf:0f:44:a7:12:44:45:01:01:b7:4a:
                    03:f6:75:b3:e0:d9:b0:8c:ae:4a:ee:c1:0f:8c:94:
                    a5:14:bf:e2:9d:c9:d8:0c:33:cb:8f:6a:15:1f:9d:
                    9d:ca:42:a1:41:84:8b:b9:b7:51:c7:32:14:ab:53:
                    08:aa:57:44:09:88:ef:6a:78:cc:49:52:45:14:61:
                    80:c2:df:31:5b:e5:c0:61:42:71:1d:ee:71:43:7c:
                    95:52:74:1c:fe:03:70:80:99:c5:14:1d:da:82:51:
                    cc:51:50:0d:2d:32:ed:34:15:ee:f5:7e:f1:b8:47:
                    fd:58:30:ea:ed:84:27:b9:4c:2b:bc:7b:2c:69:55:
                    e3:e2:26:5f:be:86:3c:e0:91:3c:d8:5a:e6:36:dc:
                    60:9d:3b:cc:62:80:70:3e:8a:18:40:2f:69:12:53:
                    9e:df:d2:88:99:b1:6b:18:1c:ac:70:b2:08:c3:f7:
                    8b:ff:0d:7c:45:41:54:8e:d9:18:30:9a:77:63:09:
                    83:cf:7e:27:eb:d1:12:2c:01:33:7f:16:91:f2:9d:
                    71:54:2e:0f:04:60:bf:3c:ec:42:25:9c:63:c2:58:
                    68:26:c4:b3:c4:50:8f:76:3a:64:4f:bf:94:46:e6:
                    63:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:3E:3C:79:85:BC:33:80:A1:17:95:44:4E:AD:AF:C8:65:E9:A8:E4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.20.0/22
                IPv6:
                  2804:5e28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269015

    Signature Algorithm: sha256WithRSAEncryption
         17:b4:2a:d9:b9:94:91:19:5a:c1:1a:cb:90:be:a5:25:1d:96:
         94:09:2a:93:69:50:51:28:46:89:36:75:1e:a4:c5:d3:35:00:
         16:07:94:5c:23:05:b0:1f:c2:10:06:50:1f:77:59:bb:66:aa:
         78:ac:7b:ee:82:2a:66:29:c4:82:fb:74:da:d1:af:59:84:5b:
         c7:ad:7a:f1:21:a6:fa:77:15:5d:9d:a6:11:4d:30:8c:7c:b3:
         7e:9c:e6:19:22:80:82:6e:28:69:64:59:e5:f8:44:0c:9e:c5:
         26:7f:21:b6:45:da:bd:53:47:1e:21:73:1c:ae:ba:88:d6:57:
         b7:59:d5:db:95:eb:b0:00:9d:52:03:6e:65:8a:02:a4:84:f2:
         ec:79:b9:ca:e4:e3:4f:9c:d9:ed:32:ac:ed:b3:08:79:d8:7e:
         4f:bc:47:e7:94:71:e7:2f:fc:8c:b7:6a:d9:50:f4:1e:da:7a:
         be:6f:21:6a:de:b1:12:ee:2b:b5:68:21:36:18:20:6d:6e:0e:
         c5:81:8a:16:85:f6:87:00:eb:cb:d8:85:ec:4c:f1:00:ce:18:
         34:e3:40:8a:a8:39:28:57:2a:d0:ef:e1:ae:75:1e:32:90:59:
         30:6c:d4:bd:f3:3b:f3:07:1f:9a:10:cc:de:df:b0:87:7d:b4:
         bf:09:cb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----