This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer
File:                     43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer (raw, json)
Hash identifier:          Qb4tosPAteJjfZRHE9dIT9yJyVwokI2dX/XMNaIPpec=
Subject key identifier:   43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       75ED0B50B167420D3C44DDCE026DE863A847C881
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Dec 2025 15:05:13 +0000
Certificate not after:    Fri 11 Dec 2026 15:10:13 +0000
Subordinate resources:    AS: 269609
                          IP: 45.189.84.0/22
                          IP: 2804:672c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ed:0b:50:b1:67:42:0d:3c:44:dd:ce:02:6d:e8:63:a8:47:c8:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 12 15:05:13 2025 GMT
            Not After : Dec 11 15:10:13 2026 GMT
        Subject: CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:77:19:4b:60:0c:2a:bd:e3:f5:aa:3d:61:23:
                    b8:ad:93:e7:bd:dc:a8:71:79:4b:e6:88:4c:ae:c9:
                    56:16:8c:01:cd:04:b0:12:58:64:c1:08:bf:89:9f:
                    2f:68:2a:e4:48:1c:52:fa:0e:f8:5b:9f:fe:8c:c0:
                    50:1a:e4:67:60:ae:da:6b:a9:2b:e5:a8:19:c4:ce:
                    3a:3c:57:4e:a8:f1:3e:76:61:26:c8:2d:9a:7f:44:
                    13:86:18:f8:23:fc:c1:7b:da:0a:0f:a6:c2:8d:71:
                    ef:c7:b2:1b:53:9b:9a:08:b5:bd:8e:90:e7:da:97:
                    0b:2d:bd:86:c1:f5:01:b2:35:63:4d:41:e0:a7:68:
                    70:e1:d2:03:59:ee:21:34:79:0d:dd:c9:8c:82:e9:
                    4a:15:f6:3e:98:0b:dc:6c:4b:87:a0:bb:23:f0:94:
                    a3:98:6c:64:c8:8c:03:7c:cf:4f:bf:20:52:3b:cb:
                    39:c9:61:b0:00:d3:7a:85:93:27:d3:f8:93:ff:08:
                    3a:b8:8d:87:f8:ff:70:d2:95:ce:d9:dd:8f:42:50:
                    11:ae:b3:4c:b6:94:2e:2e:9d:a5:8a:c7:57:a2:e8:
                    b7:94:0d:e5:2c:d8:6d:fa:45:b3:aa:7e:05:3d:7e:
                    d6:ba:c9:42:cb:b5:84:4b:6a:a5:90:79:52:8c:da:
                    96:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.84.0/22
                IPv6:
                  2804:672c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269609

    Signature Algorithm: sha256WithRSAEncryption
         97:59:1c:82:4d:21:dc:e2:ca:31:24:d5:32:26:10:7f:7a:ad:
         a8:f1:9e:bf:63:ae:50:75:d7:9a:3d:fc:4d:c9:bf:a0:39:e6:
         5e:3e:15:e2:7d:b9:71:25:d3:ee:11:e2:17:03:8a:ac:b6:af:
         59:ff:7b:2b:ed:23:5c:64:02:c2:8e:74:16:bf:25:d4:a1:43:
         e6:49:ef:70:b2:b6:b7:1b:a8:68:6d:4d:f5:71:19:0a:02:63:
         3c:b8:b9:de:89:47:e7:05:f3:ca:34:71:76:8f:fe:09:81:b6:
         b3:13:33:0a:7b:34:d4:f1:f7:1b:53:28:30:b1:19:57:fc:45:
         d6:85:98:38:f1:f0:9c:88:98:79:52:1a:2d:88:44:83:e9:23:
         0a:4a:12:23:9d:4a:7b:78:89:bb:bc:c9:44:c9:40:9c:6c:13:
         5b:bc:ed:4b:a6:9d:7d:12:c5:da:dc:81:d9:8b:d5:ed:b0:ae:
         e5:dd:75:de:9a:37:92:0b:dd:c3:2f:86:53:1b:d0:f0:19:df:
         25:3f:a9:a0:96:e5:16:f5:e4:41:6f:0b:8f:2a:3f:bb:2f:ff:
         07:30:cf:31:37:87:b5:e1:fa:22:2b:6c:6e:92:52:2f:29:64:
         88:7f:a9:60:1b:ae:5b:ec:3b:77:af:56:cc:72:d4:93:30:ec:
         fb:60:9b:77
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUde0LULFnQg08RN3OAm3oY6hHyIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEyMTIxNTA1MTNaFw0yNjEyMTExNTEwMTNaMDMxMTAvBgNV
BAMTKDQzRUE4Q0RDNDEwNUI4N0VEOUMyRkM4Q0E0MUNBMUQzNUMxODdCMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJdxlLYAwqveP1qj1hI7itk+e9
3KhxeUvmiEyuyVYWjAHNBLASWGTBCL+Jny9oKuRIHFL6Dvhbn/6MwFAa5Gdgrtpr
qSvlqBnEzjo8V06o8T52YSbILZp/RBOGGPgj/MF72goPpsKNce/HshtTm5oItb2O
kOfalwstvYbB9QGyNWNNQeCnaHDh0gNZ7iE0eQ3dyYyC6UoV9j6YC9xsS4eguyPw
lKOYbGTIjAN8z0+/IFI7yznJYbAA03qFkyfT+JP/CDq4jYf4/3DSlc7Z3Y9CUBGu
s0y2lC4unaWKx1ei6LeUDeUs2G36RbOqfgU9fta6yULLtYRLaqWQeVKM2pY1AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRD6ozcQQW4ftnC
/IykHKHTXBh7KTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRE44
emlCbmY2bnpVUkJkSEtWaVZRelpNUVZwVWVld1hBdXhTU0NQWmliSEgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RO
OHppQm5mNm56VVJCZEhLVmlWUXpaTVFWcFVlZXdYQXV4U1NDUFppYkhILzAvNDNF
QThDREM0MTA1Qjg3RUQ5QzJGQzhDQTQxQ0ExRDM1QzE4N0IyOS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLb1UMA0EAgACMAcDBQAoBGcsMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQdKTANBgkqhkiG9w0BAQsFAAOCAQEAl1kcgk0h3OLKMSTV
MiYQf3qtqPGev2OuUHXXmj38Tcm/oDnmXj4V4n25cSXT7hHiFwOKrLavWf97K+0j
XGQCwo50Fr8l1KFD5knvcLK2txuoaG1N9XEZCgJjPLi53olH5wXzyjRxdo/+CYG2
sxMzCns01PH3G1MoMLEZV/xF1oWYOPHwnIiYeVIaLYhEg+kjCkoSI51Ke3iJu7zJ
RMlAnGwTW7ztS6adfRLF2tyB2YvV7bCu5d113po3kgvdwy+GUxvQ8BnfJT+poJbl
FvXkQW8Ljyo/uy//BzDPMTeHteH6IitsbpJSLylkiH+pYBuuW+w7d69WzHLUkzDs
+2Cbdw==
-----END CERTIFICATE-----