This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer
File:                     8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer (raw, json)
Hash identifier:          p++WOdVth7OgEPx3kgMsLb84s0uJ7AMQjcjJ0dyhTlM=
Subject key identifier:   80:69:EE:AD:CE:E9:DD:92:B1:95:E5:0F:9F:CB:35:A0:36:26:D9:CC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1811504E9CB1182B0C325B78F46C2EF0411E6D90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Dec 2025 16:44:37 +0000
Certificate not after:    Tue 08 Dec 2026 16:49:37 +0000
Subordinate resources:    AS: 264999
                          IP: 170.84.76.0/22
                          IP: 2804:3130::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 02:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:11:50:4e:9c:b1:18:2b:0c:32:5b:78:f4:6c:2e:f0:41:1e:6d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  9 16:44:37 2025 GMT
            Not After : Dec  8 16:49:37 2026 GMT
        Subject: CN=8069EEADCEE9DD92B195E50F9FCB35A03626D9CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d2:8e:56:18:75:75:77:d8:b2:14:1c:b0:24:
                    52:97:de:b2:0f:6b:1f:69:12:e4:ea:36:17:03:67:
                    ed:af:1d:d7:11:cc:c2:a0:99:40:b9:75:3d:7a:38:
                    33:28:02:46:04:92:e0:57:72:8d:a8:a7:dd:43:ed:
                    8e:a3:69:6e:5e:1f:10:b8:37:cd:f4:66:a3:22:ae:
                    f1:60:ff:60:12:9d:49:a4:13:f9:bf:fd:5d:ac:95:
                    ae:4a:29:17:e2:22:2b:e5:24:42:36:06:c7:fb:6b:
                    b9:e9:7c:84:f3:e9:77:ca:1c:da:8f:98:97:ad:d8:
                    64:2a:be:af:69:3e:af:e0:44:4b:f7:91:45:be:0e:
                    20:03:3a:df:83:cf:4d:2e:f9:ea:07:8b:04:3e:84:
                    19:45:45:4a:e0:e3:33:f0:2d:95:f7:5e:1c:87:77:
                    61:1b:73:40:6f:40:42:bf:e9:74:59:4e:1b:49:10:
                    54:81:ff:6a:b4:fb:25:9d:08:c2:b4:3e:a2:bf:35:
                    4b:85:2b:d1:92:bb:dd:8f:5a:d9:9c:0c:7c:ff:05:
                    da:e4:8d:a8:63:e3:ca:7f:96:49:c2:ed:37:88:88:
                    c4:49:25:e8:05:69:36:b6:06:d1:18:7c:87:fa:c1:
                    6f:74:40:02:5b:22:8a:a2:87:6e:3b:1a:6a:a2:6b:
                    09:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                80:69:EE:AD:CE:E9:DD:92:B1:95:E5:0F:9F:CB:35:A0:36:26:D9:CC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.76.0/22
                IPv6:
                  2804:3130::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264999

    Signature Algorithm: sha256WithRSAEncryption
         5d:38:e3:d4:be:4c:c5:b6:e9:3f:9c:31:2a:66:4d:2f:34:62:
         2c:4e:ac:10:d3:11:60:a4:83:11:fa:89:3b:97:22:67:8b:9f:
         3e:30:0d:d5:60:9c:b1:90:ae:99:9b:d8:b6:86:01:3c:1d:1d:
         b7:e9:22:c8:af:90:76:07:b1:40:fb:78:e1:6d:8b:01:1a:22:
         b4:f6:21:e6:3c:0b:a2:ad:ff:ba:17:06:4e:36:31:cd:1b:38:
         c2:13:dc:95:aa:03:03:21:cd:aa:29:f2:47:75:d3:dd:1a:a3:
         bf:8d:65:a5:78:53:cf:8a:6f:5f:d3:99:69:93:c2:d9:11:cc:
         3c:fb:6d:84:de:2c:1b:82:ec:78:95:98:6c:09:d9:66:53:a9:
         c8:f7:0b:52:af:e8:e7:d4:9c:2b:1b:b9:b4:6a:07:93:b0:38:
         cf:22:5e:fe:d9:01:43:bb:2e:29:54:fd:5a:e4:a9:3c:46:03:
         87:d8:e9:50:aa:90:0c:ab:6d:a1:bf:38:7c:5b:60:1b:0c:f5:
         a7:6f:2b:ec:1b:7a:16:55:17:1d:d0:3a:d4:c3:d2:e6:ce:27:
         a4:d8:32:c9:81:dc:c3:fa:19:ba:a4:c7:6e:2f:15:f9:26:00:
         e8:4e:bd:c7:b3:c4:8c:28:a1:a9:05:a1:44:23:97:91:f5:3d:
         da:44:b4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----