This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CE0E887EF61F71B4438C48E64615124DF0463AF5.cer
File:                     CE0E887EF61F71B4438C48E64615124DF0463AF5.cer (raw, json)
Hash identifier:          TQWRoAknSdgsUiMadWelGfhDctyPlxWKvyOL5kAWQ/A=
Subject key identifier:   CE:0E:88:7E:F6:1F:71:B4:43:8C:48:E6:46:15:12:4D:F0:46:3A:F5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0399EC192583EF730B43E83D0F0499FAD7CC64B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/CE0E887EF61F71B4438C48E64615124DF0463AF5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 Dec 2025 13:50:28 +0000
Certificate not after:    Fri 25 Dec 2026 13:55:28 +0000
Subordinate resources:    AS: 262989
                          IP: 186.216.208.0/21
                          IP: 189.84.136.0/21
                          IP: 190.103.160.0/20
                          IP: 2804:9c0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jan 2026 07:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:99:ec:19:25:83:ef:73:0b:43:e8:3d:0f:04:99:fa:d7:cc:64:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 26 13:50:28 2025 GMT
            Not After : Dec 25 13:55:28 2026 GMT
        Subject: CN=CE0E887EF61F71B4438C48E64615124DF0463AF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e6:8f:a9:ce:4a:db:9f:3d:53:72:da:bc:84:
                    84:2a:9b:5a:57:ee:aa:29:c4:b0:c3:55:ea:49:44:
                    c1:83:c4:15:34:87:44:2e:fd:18:2c:34:99:12:58:
                    db:38:b9:40:47:ac:84:be:bf:c3:4f:c4:b3:8d:01:
                    a1:48:58:01:e6:d7:a2:30:c6:87:61:41:08:ea:93:
                    df:66:bf:77:a5:79:8d:13:47:6c:fe:c2:4b:f0:a8:
                    46:c3:d9:8f:23:41:64:b0:86:d6:ba:68:8f:ed:6e:
                    de:5c:79:ea:21:ac:6a:19:a7:ba:20:bb:23:b4:49:
                    8f:c1:1e:d9:80:1f:58:61:d4:d9:6e:3e:7d:2c:a4:
                    89:46:27:5c:1a:89:4e:eb:fc:1d:77:10:3a:4b:c1:
                    02:30:bc:8b:32:48:77:54:b6:24:cd:45:05:e8:15:
                    13:67:26:2b:dd:01:e6:34:41:90:5a:14:87:0d:74:
                    48:67:d3:75:29:39:fe:cf:83:91:82:91:58:bd:11:
                    01:6f:d4:9d:be:be:c5:e3:4a:b3:1f:16:b5:9b:7f:
                    a3:ef:a1:de:58:fa:8e:d1:a7:4a:c7:97:49:b5:db:
                    76:18:71:3d:81:f7:b0:29:7c:cc:67:e1:b3:53:ec:
                    a9:6c:5c:78:7d:3e:e0:55:14:1d:66:f0:c6:c7:fa:
                    e0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CE:0E:88:7E:F6:1F:71:B4:43:8C:48:E6:46:15:12:4D:F0:46:3A:F5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/CE0E887EF61F71B4438C48E64615124DF0463AF5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.208.0/21
                  189.84.136.0/21
                  190.103.160.0/20
                IPv6:
                  2804:9c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262989

    Signature Algorithm: sha256WithRSAEncryption
         0c:7b:a8:d5:fc:a6:f5:e5:9f:d9:42:2e:cf:7b:01:e5:d2:17:
         71:a4:0a:b2:49:94:b7:34:17:29:11:dd:b1:99:5a:79:26:15:
         ac:80:8a:43:4d:0c:84:ee:7a:da:f8:d3:a2:f3:d4:fd:7f:48:
         bc:d1:5b:92:41:bf:65:aa:4f:50:dc:8a:30:e2:cc:f7:b9:9e:
         e3:0f:fe:4d:39:b9:34:bd:50:ac:45:8f:47:57:1c:fc:2d:d5:
         a5:1e:4f:46:f4:a5:31:53:d6:11:07:eb:1d:d9:52:c7:84:7d:
         82:b5:03:b7:6d:d7:c6:51:4c:58:1b:4d:26:b9:31:8c:f3:9d:
         d8:21:98:84:7f:04:b3:c5:ca:e7:53:4e:64:ea:f7:1f:61:d6:
         95:a5:af:fe:27:28:4f:83:d7:10:3d:d7:c5:4d:31:6c:43:12:
         93:52:d0:1e:20:18:24:b9:f2:5c:47:5e:99:50:31:51:c6:f9:
         d7:ce:2d:eb:ab:c3:da:58:c0:ea:28:27:0c:b4:9f:db:80:54:
         eb:9c:31:3a:41:8b:aa:9d:ea:43:50:f5:5a:99:74:23:9a:2e:
         42:b3:a7:71:40:37:5b:c6:27:1a:26:5d:e4:a8:47:18:cb:70:
         12:a2:69:df:25:f3:e7:68:f1:42:c2:2e:33:6c:99:ce:24:c0:
         cc:22:b7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 08:56:04 2026 by rpki-client