This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/50C2292B12049D6ACB2039DB2D8BD765B7EE5F50.cer
File:                     50C2292B12049D6ACB2039DB2D8BD765B7EE5F50.cer (raw, json)
Hash identifier:          pedx7ekH+NfWRhPumQjuH7ZtGwAhxU3fiHK+aceW0h0=
Subject key identifier:   50:C2:29:2B:12:04:9D:6A:CB:20:39:DB:2D:8B:D7:65:B7:EE:5F:50
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2B8FA63CE04AE9F050F5E788ADEAA838BB15E4A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C1z4zAvaJdyARMjeprC96Bov2gd886omcGyEcH21Z9fM/0/50C2292B12049D6ACB2039DB2D8BD765B7EE5F50.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C1z4zAvaJdyARMjeprC96Bov2gd886omcGyEcH21Z9fM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Dec 2025 16:54:38 +0000
Certificate not after:    Thu 10 Dec 2026 16:59:38 +0000
Subordinate resources:    AS: 269634
                          IP: 45.190.120.0/22
                          IP: 181.224.216.0/22
                          IP: 2804:6788::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 04:19:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:8f:a6:3c:e0:4a:e9:f0:50:f5:e7:88:ad:ea:a8:38:bb:15:e4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 11 16:54:38 2025 GMT
            Not After : Dec 10 16:59:38 2026 GMT
        Subject: CN=50C2292B12049D6ACB2039DB2D8BD765B7EE5F50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c3:ec:04:c5:d5:8f:5c:ef:07:53:b2:67:b2:
                    eb:69:48:bf:4f:ad:d9:43:d7:3a:f1:33:b2:aa:78:
                    cc:4e:61:b0:1b:13:95:19:ff:03:7b:5a:17:70:dc:
                    43:86:37:94:e4:82:75:71:8e:a9:0a:27:59:5b:25:
                    00:b2:98:16:30:57:c4:ba:e1:ae:30:cf:b7:a1:49:
                    69:34:1e:9c:7d:f8:84:2c:1f:45:bd:3f:58:9d:f1:
                    1b:63:6b:6a:33:4b:01:62:36:fb:80:d0:35:ef:d5:
                    1b:e2:41:2a:70:62:44:8d:ff:64:fa:22:8e:3a:ee:
                    ec:d6:55:cc:12:3a:3e:4a:bd:c5:ce:fb:06:89:01:
                    1e:3c:6a:0e:7f:e9:0e:18:2a:4c:36:0c:7c:10:60:
                    d9:03:67:87:7c:6e:c4:47:fc:84:cf:a3:e1:42:0e:
                    c4:a9:c4:f7:e7:9b:0f:ba:0e:f3:dc:26:46:88:d5:
                    18:7d:d1:9b:69:82:79:94:ef:09:8a:6e:51:8e:ea:
                    4a:ae:71:09:e5:f7:b4:16:55:6b:ca:a8:03:66:cd:
                    27:9f:fb:b2:49:1e:0f:43:1f:87:54:08:18:e8:02:
                    d3:9f:9e:0d:3f:3e:16:64:96:e5:d7:ba:de:37:87:
                    2e:ac:88:87:7f:90:62:d4:c3:aa:0f:29:db:61:06:
                    32:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                50:C2:29:2B:12:04:9D:6A:CB:20:39:DB:2D:8B:D7:65:B7:EE:5F:50
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C1z4zAvaJdyARMjeprC96Bov2gd886omcGyEcH21Z9fM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C1z4zAvaJdyARMjeprC96Bov2gd886omcGyEcH21Z9fM/0/50C2292B12049D6ACB2039DB2D8BD765B7EE5F50.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.120.0/22
                  181.224.216.0/22
                IPv6:
                  2804:6788::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269634

    Signature Algorithm: sha256WithRSAEncryption
         da:a7:9c:04:2f:fa:09:81:b4:f3:ff:e4:29:ce:4b:a8:94:72:
         bc:af:1f:9d:fd:18:a6:25:4e:90:9c:05:5b:fc:ce:e7:a3:cd:
         94:86:23:14:e6:6f:da:37:bb:85:7c:70:f9:96:e9:a9:f2:bf:
         f6:39:f1:d5:47:5f:9b:30:18:df:ff:c8:5b:84:96:77:ff:f8:
         98:7e:70:c5:67:86:77:72:0f:8e:6f:9f:5d:45:c8:19:80:08:
         1e:3b:32:1a:63:d8:f8:19:d9:6d:32:a4:af:3b:c0:f7:01:94:
         4d:b4:96:1e:82:92:be:a7:df:12:23:74:80:c4:5a:10:2a:5d:
         d8:be:97:b6:04:dc:5b:ff:82:45:85:3f:2b:33:5d:6d:dc:70:
         e9:06:15:72:eb:a5:e4:f1:59:8a:0a:6c:89:45:bf:ce:85:b5:
         f1:ad:96:49:59:e4:1d:1b:82:cd:79:81:3a:cd:81:13:7c:5b:
         0b:e0:96:be:81:a2:78:54:93:e8:41:e2:2a:1b:ad:d1:61:67:
         d6:ef:8d:ea:00:ba:a8:fc:44:f1:84:4a:db:90:bd:60:e1:ae:
         79:28:c4:1c:ef:2c:94:22:48:13:bf:2b:e8:16:f0:3d:80:1e:
         50:28:98:30:06:25:f3:50:4d:77:74:ec:ea:68:d9:95:3c:66:
         34:16:ae:91
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUK4+mPOBK6fBQ9eeIreqoOLsV5KAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEyMTExNjU0MzhaFw0yNjEyMTAxNjU5MzhaMDMxMTAvBgNV
BAMTKDUwQzIyOTJCMTIwNDlENkFDQjIwMzlEQjJEOEJENzY1QjdFRTVGNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6w+wExdWPXO8HU7JnsutpSL9P
rdlD1zrxM7KqeMxOYbAbE5UZ/wN7Whdw3EOGN5TkgnVxjqkKJ1lbJQCymBYwV8S6
4a4wz7ehSWk0Hpx9+IQsH0W9P1id8Rtja2ozSwFiNvuA0DXv1RviQSpwYkSN/2T6
Io467uzWVcwSOj5KvcXO+waJAR48ag5/6Q4YKkw2DHwQYNkDZ4d8bsRH/ITPo+FC
DsSpxPfnmw+6DvPcJkaI1Rh90ZtpgnmU7wmKblGO6kqucQnl97QWVWvKqANmzSef
+7JJHg9DH4dUCBjoAtOfng0/PhZkluXXut43hy6siId/kGLUw6oPKdthBjK7AgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRQwikrEgSdassg
Odsti9dlt+5fUDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQzF6
NHpBdmFKZHlBUk1qZXByQzk2Qm92MmdkODg2b21jR3lFY0gyMVo5Zk0vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Mx
ejR6QXZhSmR5QVJNamVwckM5NkJvdjJnZDg4Nm9tY0d5RWNIMjFaOWZNLzAvNTBD
MjI5MkIxMjA0OUQ2QUNCMjAzOURCMkQ4QkQ3NjVCN0VFNUY1MC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCLb54AwQCteDYMA0EAgACMAcDBQAoBGeIMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQdQjANBgkqhkiG9w0BAQsFAAOCAQEA2qecBC/6
CYG08//kKc5LqJRyvK8fnf0YpiVOkJwFW/zO56PNlIYjFOZv2je7hXxw+ZbpqfK/
9jnx1UdfmzAY3//IW4SWd//4mH5wxWeGd3IPjm+fXUXIGYAIHjsyGmPY+BnZbTKk
rzvA9wGUTbSWHoKSvqffEiN0gMRaECpd2L6XtgTcW/+CRYU/KzNdbdxw6QYVcuul
5PFZigpsiUW/zoW18a2WSVnkHRuCzXmBOs2BE3xbC+CWvoGieFST6EHiKhut0WFn
1u+N6gC6qPxE8YRK25C9YOGueSjEHO8slCJIE78r6BbwPYAeUCiYMAYl81BNd3Ts
6mjZlTxmNBaukQ==
-----END CERTIFICATE-----
Generated at Sat Dec 20 04:20:33 2025 by rpki-client