This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5ADB0CCE28CFEE2881898DF0F00D83D39B64AFC5.cer
File:                     5ADB0CCE28CFEE2881898DF0F00D83D39B64AFC5.cer (raw, json)
Hash identifier:          hw8SOZ16NQTPLT8RQS/tvZXgxiIjCG3EKzoprZPhaVw=
Subject key identifier:   5A:DB:0C:CE:28:CF:EE:28:81:89:8D:F0:F0:0D:83:D3:9B:64:AF:C5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4E1C354189E6B965CF3F547D609414F9A953918B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/5ADB0CCE28CFEE2881898DF0F00D83D39B64AFC5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Dec 2025 22:21:51 +0000
Certificate not after:    Mon 21 Dec 2026 22:26:51 +0000
Subordinate resources:    AS: 269025
                          IP: 45.178.128.0/22
                          IP: 2804:5e50::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 19:49:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1c:35:41:89:e6:b9:65:cf:3f:54:7d:60:94:14:f9:a9:53:91:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 22 22:21:51 2025 GMT
            Not After : Dec 21 22:26:51 2026 GMT
        Subject: CN=5ADB0CCE28CFEE2881898DF0F00D83D39B64AFC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4c:23:0b:bb:b8:11:8d:b8:30:35:c5:76:a9:
                    98:c3:57:36:9f:49:32:e5:a7:c5:b9:8f:cd:e4:c0:
                    f6:3e:5e:c4:fb:29:0d:89:1d:97:e4:2e:83:ad:20:
                    4b:0f:b8:85:7f:9b:eb:5e:f2:18:52:a8:05:66:e1:
                    2a:e0:67:a5:72:55:e4:34:de:39:b1:9d:bb:94:1e:
                    c3:a2:6e:7d:ec:8b:81:48:bc:96:11:9d:7e:a3:f1:
                    29:ba:2b:77:cf:a9:46:a3:36:76:5e:22:b2:c7:26:
                    3b:0b:a0:97:85:31:e4:54:3f:43:d0:e0:36:27:93:
                    7d:83:36:a2:0b:29:78:ea:c2:b8:dd:86:e3:7b:5a:
                    e8:0e:2c:b2:f4:d0:3e:c4:a2:00:0e:eb:c9:81:52:
                    c4:50:8d:d5:95:17:84:15:24:7f:4b:fd:49:31:11:
                    3f:45:bc:24:1a:65:6d:63:71:83:fe:5c:fe:4a:9d:
                    25:55:c4:ba:9c:2a:d8:00:02:a5:70:eb:af:57:74:
                    5e:87:31:ca:7d:0f:a3:7b:be:d2:03:63:17:dc:7e:
                    a2:d4:81:64:ba:1d:a8:9b:b0:11:b4:95:40:af:06:
                    80:57:31:6a:33:7f:20:e8:a9:f1:39:e8:ef:ee:d9:
                    f8:9b:0c:de:5e:c2:c8:99:b6:a5:e3:05:45:fc:29:
                    68:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:DB:0C:CE:28:CF:EE:28:81:89:8D:F0:F0:0D:83:D3:9B:64:AF:C5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/5ADB0CCE28CFEE2881898DF0F00D83D39B64AFC5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.128.0/22
                IPv6:
                  2804:5e50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269025

    Signature Algorithm: sha256WithRSAEncryption
         03:05:e0:cd:14:db:da:16:3c:ed:2d:78:71:01:cf:7d:0a:c4:
         79:65:26:4e:3f:36:0f:1d:27:85:52:ea:6f:88:22:98:c1:7e:
         26:14:a2:57:7c:67:eb:5c:b5:67:ad:77:9a:64:58:71:f0:f1:
         46:7f:17:f8:e9:bf:65:cd:05:57:ba:ac:e9:7e:0d:0d:a3:1d:
         ff:f4:39:d1:25:a6:c3:f2:53:ae:a7:46:aa:57:dc:b2:49:17:
         f3:59:50:5e:c2:0d:ca:4a:f8:21:bf:82:fa:ed:76:c3:a7:47:
         92:67:e5:ba:6f:26:b1:10:1d:2b:47:c6:4d:bd:a6:ea:b0:d8:
         12:84:dc:0b:d1:a1:df:56:3f:ef:45:f5:90:c1:d1:50:81:57:
         7f:1c:e8:df:cd:b6:b4:0f:47:87:96:eb:5f:de:1f:e9:e4:5b:
         6c:9c:d6:c3:de:ab:01:51:f3:54:89:cc:b7:ac:a3:01:31:76:
         83:a2:4f:85:29:21:0d:b5:77:6f:6f:89:fd:be:93:39:9e:ae:
         01:ce:1d:e9:f6:16:eb:5e:c7:32:f7:b8:0d:c2:1f:73:e9:d4:
         1d:89:a3:3b:4d:24:6b:4c:c3:9d:3c:63:5c:5d:d4:00:77:50:
         06:37:0b:43:92:4d:5b:b7:42:5e:32:41:33:0c:ab:b4:71:be:
         5d:e6:9a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----