This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BFD1B48163880A40D5FF0CE06FB607766AD48C79.cer
File:                     BFD1B48163880A40D5FF0CE06FB607766AD48C79.cer (raw, json)
Hash identifier:          lU1NTSAe+psQOGuCaC4302vdPJzXsjb9nhVz1Mu5VZY=
Subject key identifier:   BF:D1:B4:81:63:88:0A:40:D5:FF:0C:E0:6F:B6:07:76:6A:D4:8C:79
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7D7C197909B5A889117DB5D2FB0499B0C255649C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6mTKQRNbbHFW4ybF8tbEMmNbhEsoMPb1D2vWhi1dXavm/0/BFD1B48163880A40D5FF0CE06FB607766AD48C79.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6mTKQRNbbHFW4ybF8tbEMmNbhEsoMPb1D2vWhi1dXavm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 Dec 2025 19:41:40 +0000
Certificate not after:    Tue 15 Dec 2026 19:46:40 +0000
Subordinate resources:    AS: 268336
                          IP: 45.238.184.0/22
                          IP: 2804:4f94::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:7c:19:79:09:b5:a8:89:11:7d:b5:d2:fb:04:99:b0:c2:55:64:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 16 19:41:40 2025 GMT
            Not After : Dec 15 19:46:40 2026 GMT
        Subject: CN=BFD1B48163880A40D5FF0CE06FB607766AD48C79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b8:37:60:ad:2e:d3:ad:45:10:8b:9b:ad:f9:
                    31:9e:80:84:77:01:81:46:cf:83:2b:f9:d6:5a:a2:
                    70:b1:f6:48:d2:53:a7:0b:4d:cc:d4:d9:4b:6f:bc:
                    69:3c:79:f4:a2:79:87:cb:a0:0f:ac:85:af:a5:06:
                    28:8f:e9:dd:68:63:bd:ce:3c:05:1f:f6:75:38:36:
                    cb:12:b9:d3:25:c6:26:bb:62:d7:59:6e:42:2b:f1:
                    45:4b:e7:31:b2:75:14:e2:1c:4d:c9:ee:ed:fc:b1:
                    12:0b:a6:c1:6a:34:b9:f9:88:18:04:31:82:98:cc:
                    0b:68:bc:78:22:b1:e5:32:5c:db:2f:6f:38:08:93:
                    69:91:5e:52:a9:4f:8a:90:e9:38:8e:b0:89:1a:fa:
                    ea:2a:4f:a4:e7:e3:f5:29:1d:be:be:56:81:72:9b:
                    c0:cf:2e:5f:a9:b4:ed:1f:0e:a4:8c:2e:b4:1f:2c:
                    0b:67:20:d4:a7:5c:23:34:d2:8c:b8:08:b7:80:45:
                    cb:60:32:54:f3:9a:2b:ff:71:aa:f0:1a:01:c8:8c:
                    9a:d6:dc:f0:f9:2c:a8:4d:13:20:a1:2f:93:84:04:
                    bc:6a:d3:e0:c0:6f:fc:5c:95:58:22:6b:45:50:2b:
                    fb:3e:f0:96:cb:c0:97:75:87:49:ce:92:e3:d7:27:
                    6c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:D1:B4:81:63:88:0A:40:D5:FF:0C:E0:6F:B6:07:76:6A:D4:8C:79
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6mTKQRNbbHFW4ybF8tbEMmNbhEsoMPb1D2vWhi1dXavm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6mTKQRNbbHFW4ybF8tbEMmNbhEsoMPb1D2vWhi1dXavm/0/BFD1B48163880A40D5FF0CE06FB607766AD48C79.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.184.0/22
                IPv6:
                  2804:4f94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268336

    Signature Algorithm: sha256WithRSAEncryption
         c7:64:7a:e3:89:f6:74:b6:68:ff:82:84:24:18:1f:b6:ab:22:
         b8:e4:0e:63:66:3b:8b:c0:4a:5e:31:86:0d:e3:ac:f9:e4:f9:
         c3:04:6a:f4:bb:0c:e1:cc:1d:c4:7f:3c:87:52:04:99:ed:25:
         69:25:40:65:b0:ad:66:78:85:b6:7c:9f:f7:96:b5:dc:62:cf:
         43:5b:f6:d4:7a:2f:60:1d:69:db:9f:89:53:23:7e:c9:97:e6:
         78:fe:54:b0:95:5e:f9:5d:3b:2f:ce:c9:5d:7f:46:34:2a:3e:
         05:71:d8:7b:23:12:48:9c:05:3c:b7:9a:1f:f8:ff:0a:dd:07:
         87:0b:87:fd:09:1d:9f:f2:e6:e2:ae:3c:d3:37:b0:6f:45:aa:
         a5:86:bd:e8:24:00:b4:48:1b:34:da:d5:31:98:3e:45:c7:0e:
         f7:5c:27:33:93:c4:ee:c9:82:6d:85:8b:19:94:02:21:8f:53:
         5f:25:2f:f4:a2:3d:99:a8:26:23:3d:df:63:4c:f9:df:aa:0e:
         16:97:6c:86:be:bc:43:68:eb:42:7a:71:64:32:2a:5c:89:88:
         7d:84:00:b2:ec:b3:0e:57:3f:b0:20:46:ce:29:b5:1b:7a:0c:
         26:71:1d:2c:a9:2b:f1:ae:c5:ae:9e:20:33:76:b7:eb:af:71:
         2c:43:64:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----