This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2489F1FF97AF22D681753C8939AAAD3DB5781A11.cer
File:                     2489F1FF97AF22D681753C8939AAAD3DB5781A11.cer (raw, json)
Hash identifier:          Buh9jdsVWlU2kYwDyiwRx/q6Lj2kVf6RoF1A4456Wz0=
Subject key identifier:   24:89:F1:FF:97:AF:22:D6:81:75:3C:89:39:AA:AD:3D:B5:78:1A:11
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1FD4771F317F5DAEAC9BC70CA53E52281742C1F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/2489F1FF97AF22D681753C8939AAAD3DB5781A11.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Dec 2025 22:32:35 +0000
Certificate not after:    Tue 22 Dec 2026 22:37:35 +0000
Subordinate resources:    AS: 266545
                          IP: 45.6.192.0/22
                          IP: 2804:3da8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 13:36:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d4:77:1f:31:7f:5d:ae:ac:9b:c7:0c:a5:3e:52:28:17:42:c1:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 23 22:32:35 2025 GMT
            Not After : Dec 22 22:37:35 2026 GMT
        Subject: CN=2489F1FF97AF22D681753C8939AAAD3DB5781A11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4c:64:e3:17:50:e0:3b:44:90:c7:72:d1:03:
                    36:67:3d:3c:2e:a3:25:54:b4:41:f7:d6:d2:59:c2:
                    23:7b:94:ba:7d:28:c7:cd:37:ed:73:ef:cb:a8:87:
                    c8:d6:94:f4:12:75:f4:5d:bc:db:96:5a:19:67:41:
                    4f:c4:de:5e:7f:04:60:06:34:2d:75:ec:17:62:54:
                    24:85:24:b0:36:42:01:cb:71:1e:42:ba:52:f0:60:
                    1c:ec:a2:73:f6:0d:83:cc:10:92:b9:56:3c:da:c4:
                    10:0f:17:81:3d:21:88:f5:29:5c:86:b9:ea:2a:36:
                    1d:2e:4a:7c:0c:f1:f4:03:94:77:3a:4f:1f:17:f4:
                    f0:2d:bf:ae:63:7d:49:29:ae:76:37:45:ab:64:3e:
                    32:12:34:31:2d:0f:7f:05:ba:b1:cd:98:0a:e4:e0:
                    76:7b:fc:18:d0:1c:33:a0:74:db:ab:97:4d:36:fc:
                    23:da:49:d9:d0:fa:16:42:b8:88:c2:39:ed:f3:4b:
                    9c:1d:c0:12:f8:f0:8e:86:e8:41:9a:ce:b2:78:1f:
                    6d:0b:a4:20:00:fa:82:87:e9:b4:3d:fe:e6:20:6f:
                    a8:43:80:d7:1c:93:3f:8f:9c:38:c6:d7:24:c3:dc:
                    7a:f1:df:ec:ac:0f:70:be:b0:f1:8c:fa:33:53:40:
                    77:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                24:89:F1:FF:97:AF:22:D6:81:75:3C:89:39:AA:AD:3D:B5:78:1A:11
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/2489F1FF97AF22D681753C8939AAAD3DB5781A11.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.192.0/22
                IPv6:
                  2804:3da8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266545

    Signature Algorithm: sha256WithRSAEncryption
         0a:11:87:90:64:64:62:7e:ca:0d:51:da:03:16:22:3f:16:56:
         d8:aa:6e:f7:51:03:36:86:d0:19:88:ee:9d:ae:cf:de:1f:97:
         f3:56:04:7d:6b:d2:18:3f:c9:81:5f:29:95:db:60:c6:17:0f:
         fd:b7:54:4d:25:54:63:b6:fb:d2:ec:e7:a7:73:68:5a:12:95:
         88:9c:83:b7:d3:c5:3b:05:59:85:b4:1f:d6:05:a6:fc:7e:2e:
         6f:29:3d:ac:3d:28:6b:66:4c:75:12:0f:71:99:1a:0e:f8:83:
         84:f7:29:74:f4:ed:68:1d:a3:8e:57:68:f8:ee:2d:e6:a8:ed:
         f6:57:4e:95:27:43:cd:92:ce:f4:9a:3a:6f:26:69:cf:ae:df:
         b6:77:af:70:b3:bd:42:d7:9d:7d:75:ac:1d:aa:65:7d:c2:4f:
         39:f5:86:2e:10:cd:70:bc:43:06:b3:a6:f0:d7:5a:d0:2f:da:
         d3:5f:b4:e4:1d:56:c2:09:fd:36:38:54:34:e6:d9:66:04:84:
         43:24:34:ad:b5:af:ad:74:e6:68:d8:d6:83:23:24:d8:55:e1:
         9b:a8:02:91:34:1d:e9:e1:13:0c:ab:b0:f3:31:5b:2b:b7:71:
         28:27:0c:86:a0:8f:d9:da:fb:f4:ac:70:dd:0f:db:12:3f:44:
         4f:39:ce:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----