This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6D116F9E3C733D36B8C998049E0A509BB6C59F78.cer
File:                     6D116F9E3C733D36B8C998049E0A509BB6C59F78.cer (raw, json)
Hash identifier:          NnCYsuRxYlRcU4+H6SEwz69EwQlIHVj+wQhohwVCXpY=
Subject key identifier:   6D:11:6F:9E:3C:73:3D:36:B8:C9:98:04:9E:0A:50:9B:B6:C5:9F:78
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       478B5495C17D8A602BF9C5910DF89D16529B445D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/0/6D116F9E3C733D36B8C998049E0A509BB6C59F78.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 20 Dec 2025 02:42:24 +0000
Certificate not after:    Sat 19 Dec 2026 02:47:24 +0000
Subordinate resources:    AS: 269136
                          IP: 45.180.136.0/22
                          IP: 2804:5ff4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8b:54:95:c1:7d:8a:60:2b:f9:c5:91:0d:f8:9d:16:52:9b:44:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 20 02:42:24 2025 GMT
            Not After : Dec 19 02:47:24 2026 GMT
        Subject: CN=6D116F9E3C733D36B8C998049E0A509BB6C59F78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b3:04:61:69:56:49:59:39:1c:7b:63:89:f2:
                    02:fb:a3:6c:b7:76:ec:c4:0a:60:7c:dc:2f:27:a7:
                    20:f0:37:d2:22:8f:4c:70:ce:fc:ac:a6:c0:8b:cf:
                    59:ad:46:3c:4d:96:e2:55:ee:34:ae:cf:8d:9d:dd:
                    df:23:e4:8b:1c:e8:f4:dc:aa:b9:66:37:72:7d:2a:
                    a8:fb:b9:65:dc:ac:b8:01:16:80:0b:b9:c2:46:83:
                    30:48:b3:23:c6:89:ca:11:31:f4:e5:fb:64:81:5d:
                    f4:ed:0e:37:e9:b1:5d:36:55:c8:d2:e8:7e:f4:df:
                    1a:01:83:9c:57:41:b8:66:06:b0:e7:b9:ed:a9:a4:
                    1c:b3:cd:95:bb:59:05:e5:b1:f0:56:ca:21:eb:61:
                    ee:82:ba:ae:d0:f6:00:19:9d:b0:6b:df:f6:cf:d7:
                    83:b4:fd:32:42:ae:5e:e7:c3:15:59:44:34:f2:d9:
                    37:16:16:ff:33:fd:ab:c9:5b:cb:e0:8b:98:bc:ba:
                    ba:7f:c4:30:7a:0e:cd:c1:48:07:b5:8b:91:7d:09:
                    c7:65:03:f8:16:c2:9b:3a:87:72:72:d6:66:cb:e0:
                    f0:c4:1c:80:d3:00:28:f6:98:f9:7d:53:81:38:07:
                    67:8c:cb:28:0a:7d:cd:4f:f2:ce:b0:68:79:97:86:
                    0b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:11:6F:9E:3C:73:3D:36:B8:C9:98:04:9E:0A:50:9B:B6:C5:9F:78
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BmEm8ExER7rrs7FrSJBP6DkKqwvkK65hVds3jU3GLrwX/0/6D116F9E3C733D36B8C998049E0A509BB6C59F78.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.136.0/22
                IPv6:
                  2804:5ff4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269136

    Signature Algorithm: sha256WithRSAEncryption
         2e:42:e4:84:7e:27:3c:62:76:7d:0c:51:f4:62:fb:f3:da:ca:
         93:a7:e2:72:40:22:1b:0c:d7:c7:3c:a5:2a:e5:ce:1f:51:a6:
         87:ab:0b:d4:2b:e8:40:2c:a6:8a:f7:76:2f:db:1d:dc:ac:f9:
         fd:d0:6f:84:31:8c:f2:e4:59:bf:aa:22:39:25:b2:c1:40:ca:
         bb:b5:49:2d:23:70:6e:7b:9e:da:e6:93:8b:ba:cf:40:4e:25:
         62:35:41:ea:a6:30:fd:a9:a9:11:0e:d1:90:91:49:ae:1a:71:
         a5:2e:fc:e8:c0:67:c3:42:82:ae:8c:e3:b9:c8:69:39:9b:d4:
         f8:aa:bf:98:6f:90:5b:80:3f:05:f9:e1:d2:85:4d:5d:fb:0d:
         90:5d:08:0b:c3:c3:bb:07:6a:bd:82:37:a5:f3:27:f0:b0:1c:
         7f:92:32:c5:01:97:13:a0:df:34:3a:d7:1a:80:59:4b:4f:06:
         d6:0e:3c:51:dd:f2:b6:bf:f0:64:f3:bf:3b:60:da:26:04:5a:
         89:06:3f:b5:fb:16:63:12:d3:c8:bb:47:0f:38:2e:b3:7c:6d:
         8f:53:ec:4b:9d:44:3a:db:4d:a0:80:80:88:4d:e4:a5:3c:c0:
         c8:4f:af:d0:11:f7:36:e2:61:0e:ee:de:cb:e4:0b:3a:87:d7:
         2f:7f:cf:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:09:16 2025 by rpki-client