This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/44B54D2555E4ED03AEFAFC0B4B4563635A9FBA39.cer
File:                     44B54D2555E4ED03AEFAFC0B4B4563635A9FBA39.cer (raw, json)
Hash identifier:          Ny1lLhKLBdqYaJxYPtBvJYOawa4jCQN/v5+m/3jjEt4=
Subject key identifier:   44:B5:4D:25:55:E4:ED:03:AE:FA:FC:0B:4B:45:63:63:5A:9F:BA:39
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       79F00B60B4A570CE53EC338B3F2E9C187291DEFA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/44B54D2555E4ED03AEFAFC0B4B4563635A9FBA39.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 Jan 2026 18:24:40 +0000
Certificate not after:    Fri 01 Jan 2027 18:29:40 +0000
Subordinate resources:    AS: 273311
                          IP: 45.170.137.0/24
                          IP: 2804:8c88::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jan 2026 08:26:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f0:0b:60:b4:a5:70:ce:53:ec:33:8b:3f:2e:9c:18:72:91:de:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  2 18:24:40 2026 GMT
            Not After : Jan  1 18:29:40 2027 GMT
        Subject: CN=44B54D2555E4ED03AEFAFC0B4B4563635A9FBA39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bc:cb:1f:31:af:8f:0a:fb:16:94:ee:29:e2:
                    ea:be:f9:9e:e1:b4:0a:be:f2:0a:20:38:1e:0a:5d:
                    24:09:2f:4a:f5:72:19:96:5f:e8:cf:33:2c:ab:9a:
                    d1:37:df:b2:76:74:31:ad:02:f9:a2:5d:98:6e:c8:
                    22:d6:61:81:70:29:0a:3c:eb:99:3d:c6:55:e6:14:
                    cb:19:c6:fa:f3:be:48:b0:4e:ee:15:90:48:b9:4a:
                    bf:35:bc:3e:ad:e8:6c:15:08:7e:97:e4:03:ee:fc:
                    e9:b3:21:e1:b0:a1:27:0d:c6:10:27:3c:fd:1a:ad:
                    23:ff:fa:33:dc:17:5d:0f:d1:9e:93:32:2a:3f:37:
                    84:e2:30:e1:d3:99:6a:04:b9:ac:f7:a3:cd:78:b8:
                    50:fa:a1:36:b6:f2:25:53:0f:25:1f:34:2d:49:c7:
                    61:5e:cd:09:e5:75:8d:2d:91:ee:69:64:b8:b3:01:
                    c4:65:83:85:91:73:0a:00:47:5e:7d:34:dc:ad:8b:
                    68:ec:39:c0:56:a5:62:d5:dd:0d:01:92:e3:96:bc:
                    12:87:62:5e:54:f6:d2:f6:a9:00:96:63:0a:60:5a:
                    dd:50:fd:4a:d8:e0:c6:40:1b:a0:65:9d:45:14:5e:
                    d3:bf:3a:17:a2:34:5a:22:0c:59:e1:da:da:84:a0:
                    14:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:B5:4D:25:55:E4:ED:03:AE:FA:FC:0B:4B:45:63:63:5A:9F:BA:39
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/44B54D2555E4ED03AEFAFC0B4B4563635A9FBA39.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.137.0/24
                IPv6:
                  2804:8c88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273311

    Signature Algorithm: sha256WithRSAEncryption
         b9:bd:01:7b:9c:fe:28:64:ea:c3:2f:db:b8:51:38:ee:5c:26:
         3a:d1:25:a3:47:72:82:85:7c:47:66:df:6a:ab:cf:ed:17:27:
         da:04:38:9e:c7:9d:02:e8:52:85:9f:a7:b5:15:4e:43:75:3f:
         2f:1c:9f:20:17:a5:5e:27:c9:58:56:9f:93:9d:09:de:01:32:
         cc:ab:e7:f9:53:a5:18:ec:a8:c7:48:f5:11:00:b8:ba:00:01:
         09:97:ae:e4:dc:9a:68:78:cb:14:1a:80:fa:a0:8f:a5:b8:c4:
         5f:c8:da:91:9c:f9:bc:40:63:47:a5:bb:23:94:ca:43:e6:14:
         41:d4:e9:77:b5:d1:61:8f:a1:b3:75:7b:f9:47:b7:6b:de:6b:
         8b:3a:5a:aa:3f:61:49:70:d9:f5:19:23:00:fd:c7:22:f9:32:
         28:77:1e:bd:2a:f6:53:9f:af:2d:53:e2:e6:ce:7f:9c:30:f1:
         5d:ae:fd:04:c3:72:7b:5d:c6:74:8f:dd:cc:4e:f9:e1:da:a2:
         6b:08:d7:15:c8:63:5d:72:94:8b:e2:10:1c:9b:b3:73:4c:d7:
         74:bc:d4:43:4c:77:86:4c:b9:55:6c:13:f0:fd:21:71:16:e9:
         ac:fc:15:3c:76:e2:97:34:0b:5a:05:64:a8:10:2d:1b:80:f4:
         28:d9:cb:c0
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUefALYLSlcM5T7DOLPy6cGHKR3vowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAxMDIxODI0NDBaFw0yNzAxMDExODI5NDBaMDMxMTAvBgNV
BAMTKDQ0QjU0RDI1NTVFNEVEMDNBRUZBRkMwQjRCNDU2MzYzNUE5RkJBMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6vMsfMa+PCvsWlO4p4uq++Z7h
tAq+8gogOB4KXSQJL0r1chmWX+jPMyyrmtE337J2dDGtAvmiXZhuyCLWYYFwKQo8
65k9xlXmFMsZxvrzvkiwTu4VkEi5Sr81vD6t6GwVCH6X5APu/OmzIeGwoScNxhAn
PP0arSP/+jPcF10P0Z6TMio/N4TiMOHTmWoEuaz3o814uFD6oTa28iVTDyUfNC1J
x2FezQnldY0tke5pZLizAcRlg4WRcwoAR159NNyti2jsOcBWpWLV3Q0BkuOWvBKH
Yl5U9tL2qQCWYwpgWt1Q/UrY4MZAG6BlnUUUXtO/OheiNFoiDFnh2tqEoBSHAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBREtU0lVeTtA676
/AtLRWNjWp+6OTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNHoz
eWlqRDFCQmhpU0ZQN2RXOEZzR2hzTTNGckZ2RW1ETDljQmFtSlJIVEMvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzR6
M3lpakQxQkJoaVNGUDdkVzhGc0doc00zRnJGdkVtREw5Y0JhbUpSSFRDLzAvNDRC
NTREMjU1NUU0RUQwM0FFRkFGQzBCNEI0NTYzNjM1QTlGQkEzOS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQALaqJMA0EAgACMAcDBQAoBIyIMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQrnzANBgkqhkiG9w0BAQsFAAOCAQEAub0Be5z+KGTqwy/b
uFE47lwmOtElo0dygoV8R2bfaqvP7Rcn2gQ4nsedAuhShZ+ntRVOQ3U/LxyfIBel
XifJWFafk50J3gEyzKvn+VOlGOyox0j1EQC4ugABCZeu5NyaaHjLFBqA+qCPpbjE
X8jakZz5vEBjR6W7I5TKQ+YUQdTpd7XRYY+hs3V7+Ue3a95rizpaqj9hSXDZ9Rkj
AP3HIvkyKHcevSr2U5+vLVPi5s5/nDDxXa79BMNye13GdI/dzE754dqiawjXFchj
XXKUi+IQHJuzc0zXdLzUQ0x3hky5VWwT8P0hcRbprPwVPHbilzQLWgVkqBAtG4D0
KNnLwA==
-----END CERTIFICATE-----