This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CD55D0C61680775C21D421A2DF19A828BB887C41.cer
File:                     CD55D0C61680775C21D421A2DF19A828BB887C41.cer (raw, json)
Hash identifier:          I/8K645BamPxtWvegTnfWgjPJvmbk3JcGTCo/OQLeNM=
Subject key identifier:   CD:55:D0:C6:16:80:77:5C:21:D4:21:A2:DF:19:A8:28:BB:88:7C:41
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       74F9DBC70EC43E4D3603D0DC4CC9DAE43E1C448C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/CD55D0C61680775C21D421A2DF19A828BB887C41.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Dec 2025 18:59:48 +0000
Certificate not after:    Fri 18 Dec 2026 19:04:48 +0000
Subordinate resources:    AS: 269668
                          IP: 45.191.28.0/22
                          IP: 2804:6814::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f9:db:c7:0e:c4:3e:4d:36:03:d0:dc:4c:c9:da:e4:3e:1c:44:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 19 18:59:48 2025 GMT
            Not After : Dec 18 19:04:48 2026 GMT
        Subject: CN=CD55D0C61680775C21D421A2DF19A828BB887C41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:23:df:ec:93:81:9b:eb:fe:d5:3c:ef:32:e9:
                    80:73:5a:a7:fb:03:95:be:dc:8b:21:da:9d:5a:d2:
                    f8:3f:ac:fd:ef:6e:80:e5:a5:7e:ec:19:06:a5:7e:
                    ec:90:9e:b9:5e:ed:62:1e:a6:a8:ab:3d:19:d2:9e:
                    91:3c:b2:ce:55:69:83:ad:2d:bc:da:1e:9c:75:dd:
                    99:64:8e:5e:a2:7b:e3:52:cb:1a:55:8e:c2:f7:3a:
                    8d:30:c4:64:b3:65:a4:2a:39:79:91:61:91:56:53:
                    3b:cd:e6:9a:c3:7c:0f:03:0b:d3:ec:f6:f3:52:13:
                    4a:55:ae:8d:be:de:c0:36:96:81:e6:2c:b8:d9:98:
                    5b:2b:60:82:37:66:d1:d4:28:4b:de:49:e3:fe:53:
                    c2:f5:f9:98:d5:80:f6:6a:c9:01:15:49:a0:8f:cd:
                    9a:89:b4:ce:52:a1:0b:c1:c5:53:e7:cf:c7:e0:e0:
                    aa:6b:9d:a6:b6:d4:f2:4b:2c:f5:3c:5e:91:90:46:
                    f8:ee:d9:17:b6:07:78:9d:0a:e2:9b:ee:f5:c0:3b:
                    ee:a7:1c:83:9a:00:c0:b6:f6:58:61:79:0a:7b:6b:
                    e6:6b:05:65:c0:b3:47:5d:cd:54:88:6c:88:1d:d7:
                    a7:77:f4:6c:01:c9:bf:2b:fc:e7:4b:a3:39:59:d5:
                    aa:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:55:D0:C6:16:80:77:5C:21:D4:21:A2:DF:19:A8:28:BB:88:7C:41
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/CD55D0C61680775C21D421A2DF19A828BB887C41.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.28.0/22
                IPv6:
                  2804:6814::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269668

    Signature Algorithm: sha256WithRSAEncryption
         38:b7:17:a9:4c:c3:53:a9:b6:22:04:2b:3a:95:c9:7f:fb:90:
         37:18:8b:7d:f6:77:44:7c:cb:78:22:c3:a1:e1:53:07:ef:e6:
         b8:b1:70:ea:bc:8d:5f:82:b1:1f:3f:40:15:e4:93:e2:d0:78:
         84:23:fa:d4:a0:9d:39:9b:0e:03:84:1d:f6:45:0b:fb:a8:e1:
         0a:1f:2c:e2:f1:54:e4:b3:3b:7c:1f:99:23:83:b3:43:2f:a1:
         e9:ba:f7:38:38:5a:ce:1a:b9:15:be:d0:fa:bc:35:6e:47:4c:
         82:10:03:36:c6:5b:e6:70:a9:d5:f0:e7:34:f5:5b:05:65:42:
         82:e6:50:8c:08:23:a0:81:c7:fa:ed:33:a0:5f:49:13:3b:d5:
         33:fd:48:5c:c0:b4:d7:e6:5c:8c:8f:d6:28:fa:82:09:dc:f7:
         19:0e:a1:98:f1:28:0b:15:dd:99:e4:16:5b:cf:a6:bd:ea:d2:
         d7:d6:83:47:3b:b0:85:5a:bd:80:87:90:df:c9:d8:af:f1:4c:
         e1:ea:d7:96:57:95:78:1f:c5:ec:5e:d7:18:a7:eb:ce:64:12:
         b7:f9:53:77:36:b6:f5:93:b9:fd:8c:f7:a2:43:9c:80:a3:30:
         16:e9:a1:b1:57:d9:01:b9:65:f6:9f:2b:22:86:e1:e0:e3:ed:
         c7:61:dc:1e
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUdPnbxw7EPk02A9DcTMna5D4cRIwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEyMTkxODU5NDhaFw0yNjEyMTgxOTA0NDhaMDMxMTAvBgNV
BAMTKENENTVEMEM2MTY4MDc3NUMyMUQ0MjFBMkRGMTlBODI4QkI4ODdDNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLI9/sk4Gb6/7VPO8y6YBzWqf7
A5W+3Ish2p1a0vg/rP3vboDlpX7sGQalfuyQnrle7WIepqirPRnSnpE8ss5VaYOt
LbzaHpx13Zlkjl6ie+NSyxpVjsL3Oo0wxGSzZaQqOXmRYZFWUzvN5prDfA8DC9Ps
9vNSE0pVro2+3sA2loHmLLjZmFsrYII3ZtHUKEveSeP+U8L1+ZjVgPZqyQEVSaCP
zZqJtM5SoQvBxVPnz8fg4Kprnaa21PJLLPU8XpGQRvju2Re2B3idCuKb7vXAO+6n
HIOaAMC29lhheQp7a+ZrBWXAs0ddzVSIbIgd16d39GwByb8r/OdLozlZ1aq1AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTNVdDGFoB3XCHU
IaLfGagou4h8QTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRnQ4
aWlhMndlNDRaVU5hWFAxNnM3VlE3YlRDUnVxVWs0VG5uUjQzaFRzZDgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z0
OGlpYTJ3ZTQ0WlVOYVhQMTZzN1ZRN2JUQ1J1cVVrNFRublI0M2hUc2Q4LzAvQ0Q1
NUQwQzYxNjgwNzc1QzIxRDQyMUEyREYxOUE4MjhCQjg4N0M0MS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLb8cMA0EAgACMAcDBQAoBGgUMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQdZDANBgkqhkiG9w0BAQsFAAOCAQEAOLcXqUzDU6m2IgQr
OpXJf/uQNxiLffZ3RHzLeCLDoeFTB+/muLFw6ryNX4KxHz9AFeST4tB4hCP61KCd
OZsOA4Qd9kUL+6jhCh8s4vFU5LM7fB+ZI4OzQy+h6br3ODhazhq5Fb7Q+rw1bkdM
ghADNsZb5nCp1fDnNPVbBWVCguZQjAgjoIHH+u0zoF9JEzvVM/1IXMC01+ZcjI/W
KPqCCdz3GQ6hmPEoCxXdmeQWW8+mverS19aDRzuwhVq9gIeQ38nYr/FM4erXlleV
eB/F7F7XGKfrzmQSt/lTdza29ZO5/Yz3okOcgKMwFumhsVfZAbll9p8rIobh4OPt
x2HcHg==
-----END CERTIFICATE-----