This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0.cer
File:                     6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0.cer (raw, json)
Hash identifier:          6R8B3a1YyRGO+MDaGpdf/1qpOukDCCeopGsp5dWBglA=
Subject key identifier:   6A:8D:AE:34:7D:81:21:EA:D9:2B:21:8E:BB:47:C1:F7:6D:2E:B5:F0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5FD467C599C31867EC9382054DBCA37D5F97564C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 Jan 2026 14:59:08 +0000
Certificate not after:    Fri 01 Jan 2027 15:04:08 +0000
Subordinate resources:    AS: 269457
                          IP: 45.187.60.0/22
                          IP: 2804:64e8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jan 2026 08:26:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d4:67:c5:99:c3:18:67:ec:93:82:05:4d:bc:a3:7d:5f:97:56:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  2 14:59:08 2026 GMT
            Not After : Jan  1 15:04:08 2027 GMT
        Subject: CN=6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c0:6a:e2:54:f8:df:fa:9a:79:98:93:a6:c1:
                    d8:79:04:ff:e4:31:71:d0:9e:d1:2b:b1:d5:bb:89:
                    04:02:04:ad:af:28:47:10:31:7b:33:ef:d0:2f:9b:
                    c0:8a:d1:7c:39:4f:a4:bc:fb:3d:43:c6:f3:1b:4f:
                    d0:a8:6e:6c:aa:a8:cb:32:29:7b:3a:8c:9e:64:8b:
                    72:8c:8e:ad:17:be:b8:47:ff:45:5f:6e:a5:01:64:
                    d3:57:d8:1a:5c:0b:17:b5:51:26:92:38:1b:b3:5b:
                    e4:1b:ff:8c:ca:f8:71:b2:3a:36:e4:8f:23:e4:23:
                    41:d8:f5:6a:de:ff:b4:ff:41:e1:c0:0e:f5:52:55:
                    6c:64:2f:f6:b7:b6:64:af:ad:0b:f7:eb:70:96:88:
                    63:95:3a:5b:9d:99:a8:c8:95:5c:ee:31:52:4a:58:
                    cd:02:b5:b4:5f:23:96:95:49:f0:77:76:a6:88:12:
                    fc:8d:71:e3:94:c2:26:ad:87:1b:65:8c:3b:d3:de:
                    2d:06:e6:f9:dd:33:68:43:7d:7b:72:15:53:b2:da:
                    5e:a6:90:f8:fe:8c:55:5e:59:fe:8d:85:1d:17:75:
                    2f:9d:c2:79:52:d6:31:11:55:0e:9a:97:27:1b:13:
                    9f:bc:78:36:88:b2:83:4b:12:b2:4a:12:88:53:6f:
                    61:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:8D:AE:34:7D:81:21:EA:D9:2B:21:8E:BB:47:C1:F7:6D:2E:B5:F0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/6A8DAE347D8121EAD92B218EBB47C1F76D2EB5F0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.60.0/22
                IPv6:
                  2804:64e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269457

    Signature Algorithm: sha256WithRSAEncryption
         36:c6:4c:5a:79:92:4d:f0:e7:6f:e6:67:80:90:71:86:30:03:
         04:11:24:2c:c9:1a:f7:e1:3f:7f:97:c6:7f:e4:4f:82:41:66:
         b5:6d:af:ab:60:01:8c:9b:20:e8:08:e6:08:66:fd:ef:4f:66:
         fd:70:40:3d:44:73:35:c5:32:b6:03:1b:0a:22:04:a7:60:14:
         0e:21:53:af:11:a2:a9:08:27:67:93:39:03:64:53:02:6b:83:
         57:b4:be:a9:05:78:a9:a7:c6:a0:76:03:ca:16:d2:ee:26:c0:
         50:81:88:99:11:45:37:7f:dc:65:4e:e2:2d:1d:25:48:5c:33:
         52:2d:cb:23:00:29:ae:8c:3e:94:7a:7f:ad:84:f6:c6:f4:7b:
         14:53:c2:24:ee:f2:f5:64:28:bd:ef:87:6e:e7:ab:b9:ed:0e:
         73:7c:ce:c6:f7:49:25:ff:77:d9:fb:09:d4:2b:b1:6a:7b:88:
         89:01:31:86:36:d4:a7:d4:3a:ab:b2:8d:8e:5a:90:9c:15:57:
         4c:09:fb:8f:96:ea:82:d2:8f:7d:36:7e:74:c3:35:00:dc:8c:
         ab:a3:b9:76:10:b5:ed:52:fc:21:b4:e2:a3:d5:49:51:79:23:
         0e:1c:62:7f:f8:3e:d3:28:4a:db:97:0a:0e:88:c0:7d:79:e3:
         a4:4e:c1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----