This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/497D5F7ED6F421F88A03409BAE2F2CAC5EC1A50E.cer
File:                     497D5F7ED6F421F88A03409BAE2F2CAC5EC1A50E.cer (raw, json)
Hash identifier:          Z1CJtkB/3D/rPSKZVRFKUxitCVZQX7qb1Nss22sFwBg=
Subject key identifier:   49:7D:5F:7E:D6:F4:21:F8:8A:03:40:9B:AE:2F:2C:AC:5E:C1:A5:0E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       30B5270C2F5BA4A14DE99940B47592F1819133AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/1/497D5F7ED6F421F88A03409BAE2F2CAC5EC1A50E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Dec 2025 13:15:06 +0000
Certificate not after:    Wed 16 Dec 2026 13:20:06 +0000
Subordinate resources:    AS: 262649
                          IP: 138.219.204.0/22
                          IP: 170.238.92.0/22
                          IP: 177.105.176.0/20
                          IP: 2804:770::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 04:19:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b5:27:0c:2f:5b:a4:a1:4d:e9:99:40:b4:75:92:f1:81:91:33:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 17 13:15:06 2025 GMT
            Not After : Dec 16 13:20:06 2026 GMT
        Subject: CN=497D5F7ED6F421F88A03409BAE2F2CAC5EC1A50E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5a:c8:2b:91:18:00:40:4d:e5:33:f9:3a:73:
                    53:42:e6:b1:70:ab:f5:6f:ab:d1:01:00:69:ca:10:
                    29:3e:8b:fd:8b:c8:2b:3e:ce:5b:f9:58:c4:f5:da:
                    04:a8:0b:2a:17:74:65:e5:87:f4:1e:1e:87:da:bc:
                    95:88:29:f7:29:00:be:d4:62:7c:25:ca:4d:47:2a:
                    99:91:dc:03:0a:fa:24:1e:39:ae:5a:ad:b1:fe:5f:
                    a4:a9:d2:15:76:6e:01:63:a5:63:14:ec:87:d3:0c:
                    f1:72:9f:50:a4:b1:84:ed:85:16:9c:7e:70:c0:f9:
                    ce:f8:52:86:42:82:f1:11:a2:95:f0:8b:59:3f:cc:
                    47:e7:98:51:63:ca:42:20:df:31:04:c8:0f:ae:74:
                    aa:64:36:bd:d0:7a:8a:f2:fa:50:48:5b:0b:44:e1:
                    0f:e9:be:07:cd:44:59:80:36:9e:87:58:cc:ab:b6:
                    2b:f7:35:53:54:0b:6e:a4:36:e2:b6:91:4a:71:28:
                    c5:fe:14:73:05:84:95:54:a5:2e:49:e8:fe:a5:cf:
                    be:4c:c2:e5:18:4b:9c:f2:d7:3a:d9:9d:3f:f7:bb:
                    aa:16:08:b9:59:65:01:3f:20:78:a3:67:a4:33:f8:
                    a9:e6:bc:1b:f0:62:1a:71:52:c0:fc:e1:e3:42:12:
                    cd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:7D:5F:7E:D6:F4:21:F8:8A:03:40:9B:AE:2F:2C:AC:5E:C1:A5:0E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/1/497D5F7ED6F421F88A03409BAE2F2CAC5EC1A50E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.204.0/22
                  170.238.92.0/22
                  177.105.176.0/20
                IPv6:
                  2804:770::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262649

    Signature Algorithm: sha256WithRSAEncryption
         11:9e:19:e2:ae:3a:a9:5f:39:e4:13:18:65:8f:fe:95:65:3e:
         77:db:b4:69:1c:99:59:23:34:fc:11:1c:9d:b7:0b:bc:83:c2:
         f5:a6:d4:34:0f:de:58:16:e8:fb:1c:45:34:2a:1e:c2:1c:d0:
         a3:f1:ba:f6:b0:78:31:90:db:57:fd:27:69:2f:b8:18:e1:5b:
         a8:ad:21:13:fe:69:f4:1e:29:ac:5c:8c:e7:3a:88:c6:da:c0:
         45:27:f8:0f:61:95:04:fe:6a:6f:3e:fc:ec:02:11:5d:1f:f8:
         c3:5e:3e:a6:18:37:36:6c:c8:46:e0:91:34:ce:ea:b0:4a:a3:
         73:3e:8a:91:26:5e:78:0a:01:0a:80:69:dc:bf:5c:7c:6f:a9:
         88:3c:ca:f3:c4:51:f9:6f:f2:91:a2:7e:8a:87:6d:72:ef:99:
         49:a8:bb:c7:d4:29:f4:0b:24:28:52:39:68:15:28:da:16:91:
         2d:b1:be:ef:7a:4a:53:81:36:2d:ab:77:21:3b:01:cf:d0:83:
         81:2f:5d:be:a7:ea:d4:29:20:dc:21:78:a9:95:54:89:fb:b9:
         bb:35:9d:17:33:31:d1:72:c7:3a:a3:0e:a0:32:5a:ff:73:47:
         a6:6f:c0:de:71:1c:93:c1:e8:25:84:30:66:ae:03:12:c5:c1:
         10:40:ad:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 04:20:06 2025 by rpki-client