This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
File:                     62542D04D7B086689C6E3FE7D77F27061824D478.cer (raw, json)
Hash identifier:          1DUAQgnkIWqMGAIyC6iSzCx8vgdzBhU05DZ3j6FW//U=
Subject key identifier:   62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5BB0614BAFCB671846EC7F173C22507FBC0B6FFC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Dec 2025 12:10:45 +0000
Certificate not after:    Fri 18 Dec 2026 12:15:45 +0000
Subordinate resources:    AS: 268793
                          IP: 45.173.48.0/22
                          IP: 2804:5ac0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 17:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b0:61:4b:af:cb:67:18:46:ec:7f:17:3c:22:50:7f:bc:0b:6f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 19 12:10:45 2025 GMT
            Not After : Dec 18 12:15:45 2026 GMT
        Subject: CN=62542D04D7B086689C6E3FE7D77F27061824D478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:13:d5:7a:3f:52:d4:a4:06:03:9c:ea:c5:75:
                    52:8c:22:95:df:72:aa:c5:d2:27:cf:ec:2f:c7:c4:
                    28:83:e6:9d:b7:a1:2a:be:e4:0d:6d:91:5d:73:86:
                    1c:f2:17:47:d1:13:67:7e:2c:e3:e7:96:e4:ec:52:
                    a2:bb:ee:16:f5:1d:60:7c:eb:38:45:6b:86:18:da:
                    d7:82:74:75:f4:03:07:8b:85:93:a3:61:78:6d:60:
                    4b:63:bf:88:6d:11:8e:1d:70:41:20:df:3b:bc:09:
                    00:f9:11:85:6d:3f:55:0b:f3:a5:d5:87:fd:40:4a:
                    a6:a4:4c:ba:4e:b6:75:fe:f8:8d:da:56:af:7b:02:
                    ef:88:7d:81:76:b6:97:01:47:01:af:99:dd:02:08:
                    c6:12:de:3f:84:d3:ca:6f:3e:49:54:eb:5b:86:2d:
                    c8:f8:44:43:39:13:77:47:38:97:50:cd:03:0d:cb:
                    89:76:75:11:7a:a7:bf:9c:a1:1f:31:38:be:76:10:
                    3a:1b:e5:b9:c6:be:76:c4:e3:24:26:01:12:fd:c8:
                    77:e8:40:c2:2d:2d:c6:3f:30:84:0d:a8:51:0c:80:
                    f6:eb:97:1c:cc:f5:8f:71:d4:1c:cb:bb:76:de:07:
                    2a:2f:5e:50:3d:89:65:2a:b7:f2:4c:63:cf:65:e6:
                    ae:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.48.0/22
                IPv6:
                  2804:5ac0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268793

    Signature Algorithm: sha256WithRSAEncryption
         ba:09:78:8a:ed:9a:0a:87:90:99:c2:12:6f:98:ac:94:32:ee:
         6c:76:63:a9:fb:32:4b:96:53:34:53:bd:c0:2b:9f:fd:1a:e7:
         37:e2:12:cc:75:4c:ee:07:79:73:8d:83:82:60:18:b8:18:40:
         3c:56:2f:2b:8a:6c:3c:a3:bd:12:ba:dd:63:c2:b0:d0:e4:b8:
         6d:3d:5d:a6:a2:39:5a:bf:1f:37:f1:32:a5:28:24:52:32:46:
         0d:cf:47:8b:62:be:65:db:f4:fd:2e:4a:55:11:03:29:9c:92:
         98:b2:6f:b8:4d:3c:59:9f:88:25:c9:ca:85:65:ca:96:79:dc:
         82:d8:93:7b:de:15:76:7e:9e:74:61:70:17:77:b3:55:4d:d4:
         6e:92:07:e9:a9:f2:84:48:44:71:b7:6e:ca:2b:a9:69:57:d2:
         b1:fc:b7:f7:24:bc:f6:47:c7:13:f4:d1:35:e0:ad:d4:49:01:
         e0:f9:b4:aa:6e:81:b5:d5:ec:f5:2d:9a:eb:f5:f6:ab:93:ff:
         d5:f3:bd:69:2c:db:00:1f:59:28:9f:24:49:e8:a4:7d:56:61:
         00:fe:f5:a6:08:1e:7a:10:a0:9f:5f:7c:34:18:c0:92:a2:e4:
         9c:ca:42:a6:0d:3c:e7:41:ce:17:bf:ea:98:af:d7:c7:ad:de:
         78:63:eb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 14:54:20 2025 by rpki-client