This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B314917F1BC8CD321336C2D44EF8E783D4576716.cer
File:                     B314917F1BC8CD321336C2D44EF8E783D4576716.cer (raw, json)
Hash identifier:          ApqW14pJPXXi2TMdVIF0KZoBdT4jR60R0Moi9IUQeyA=
Subject key identifier:   B3:14:91:7F:1B:C8:CD:32:13:36:C2:D4:4E:F8:E7:83:D4:57:67:16
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       55D4FCC3D54101780B62D32AFD97CEDAB7353C9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/B314917F1BC8CD321336C2D44EF8E783D4576716.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Dec 2025 18:01:23 +0000
Certificate not after:    Fri 11 Dec 2026 18:06:23 +0000
Subordinate resources:    AS: 264479
                          IP: 45.165.90.0/23
                          IP: 131.255.120.0/22
                          IP: 138.117.32.0/22
                          IP: 2804:203c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Dec 2025 07:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d4:fc:c3:d5:41:01:78:0b:62:d3:2a:fd:97:ce:da:b7:35:3c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 12 18:01:23 2025 GMT
            Not After : Dec 11 18:06:23 2026 GMT
        Subject: CN=B314917F1BC8CD321336C2D44EF8E783D4576716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:85:4f:47:74:c0:8f:b2:f9:ae:5f:ef:20:c8:
                    73:da:6a:da:8e:e7:ad:ba:58:c4:73:b7:0d:59:e4:
                    47:79:72:cd:f5:89:67:1d:f5:de:b1:fd:e7:36:b8:
                    de:26:2b:ee:de:3a:dc:2b:9d:a8:05:65:fc:3d:15:
                    d9:b1:91:cd:e8:a6:13:9f:f5:c8:d6:71:8c:fe:0b:
                    80:f5:17:bc:25:35:a1:01:b4:7f:93:4a:15:30:f8:
                    53:71:43:64:a4:00:c4:2c:da:e9:77:8b:cc:54:60:
                    f6:6d:76:6d:55:b4:c9:21:da:c2:a6:ea:bb:4f:65:
                    8a:a1:8a:0c:81:eb:7a:b7:9f:3c:69:33:37:fa:d1:
                    fd:2e:85:3a:6d:06:b1:d3:82:b4:37:5d:7e:15:13:
                    f4:e8:e3:c8:b0:57:7c:39:46:65:71:24:b6:5a:14:
                    35:c4:64:98:15:9a:93:1a:aa:ed:04:c3:47:c1:08:
                    fb:8d:29:51:ed:b7:bf:11:d1:3e:85:fc:22:43:40:
                    6e:df:c6:d9:42:bc:59:01:b1:45:0b:90:66:66:d3:
                    67:a5:6b:c5:35:11:d3:32:b7:47:f3:44:ac:a6:6b:
                    75:d2:d8:ab:fa:ae:8a:d9:a8:ee:84:6f:1c:65:0c:
                    a7:fd:d4:b9:b6:6f:27:e3:c2:cd:10:20:91:a6:6b:
                    f8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:14:91:7F:1B:C8:CD:32:13:36:C2:D4:4E:F8:E7:83:D4:57:67:16
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/B314917F1BC8CD321336C2D44EF8E783D4576716.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.90.0/23
                  131.255.120.0/22
                  138.117.32.0/22
                IPv6:
                  2804:203c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264479

    Signature Algorithm: sha256WithRSAEncryption
         8e:c9:1e:bb:92:1f:d9:48:88:e5:2b:79:77:41:7e:46:c9:af:
         3b:14:97:8b:53:c1:4f:1d:a4:df:81:5a:84:c3:61:39:e2:75:
         e8:37:ab:eb:b0:c7:4a:33:15:ed:e2:83:fa:ca:1c:c8:7e:12:
         08:4a:11:37:16:ff:1a:4c:8e:df:1c:f1:83:5f:36:1e:26:2f:
         e1:1e:c7:a1:5e:ed:0c:cc:91:8b:06:76:32:ad:9d:37:70:56:
         3e:30:73:16:24:21:79:c5:7e:62:a9:fa:b0:7e:a1:bd:ee:87:
         92:8a:6c:1d:31:eb:97:5d:f1:f5:de:f9:77:69:d9:14:5d:a5:
         3d:b0:db:8c:cf:25:cf:77:2b:75:14:6b:1f:aa:ec:0e:f6:fb:
         28:34:2f:29:47:53:fc:48:74:f9:18:76:d5:af:7d:0a:23:c0:
         e5:8f:e1:b0:9b:7d:26:c5:d3:53:03:31:cf:a7:66:6c:8e:8e:
         3f:40:50:8a:7a:d2:86:89:ef:c9:eb:4c:ec:73:71:f4:59:bb:
         dd:6f:57:b3:23:e6:26:b3:66:91:94:76:9a:42:4c:4b:f2:fa:
         9e:cf:97:6d:b4:5b:4a:2f:a9:bd:b1:2f:22:e8:fa:08:04:2b:
         38:bb:cc:5f:60:a8:07:13:cd:a2:19:5b:53:58:8c:5d:48:b0:
         2c:07:af:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 08:39:11 2025 by rpki-client