This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E1150EE28057B73789BBB07AA39FC373B568668D.cer
File:                     E1150EE28057B73789BBB07AA39FC373B568668D.cer (raw, json)
Hash identifier:          bmFoyqRX2p8MzaKu3pJHc4MuW4UcCagvsNNtQqeQX8U=
Subject key identifier:   E1:15:0E:E2:80:57:B7:37:89:BB:B0:7A:A3:9F:C3:73:B5:68:66:8D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0CDA2FDF541639178763CB195AA2C6D14F396D28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/E1150EE28057B73789BBB07AA39FC373B568668D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 28 Dec 2025 18:34:20 +0000
Certificate not after:    Sun 27 Dec 2026 18:39:20 +0000
Subordinate resources:    AS: 266999
                          IP: 45.226.244.0/22
                          IP: 2804:4698::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jan 2026 08:26:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:da:2f:df:54:16:39:17:87:63:cb:19:5a:a2:c6:d1:4f:39:6d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 28 18:34:20 2025 GMT
            Not After : Dec 27 18:39:20 2026 GMT
        Subject: CN=E1150EE28057B73789BBB07AA39FC373B568668D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:93:6a:fc:4c:81:f1:25:c5:93:5a:6c:a5:49:
                    41:39:ef:a9:89:f1:3c:63:5d:6f:a3:fa:29:42:13:
                    41:08:85:a6:91:11:20:8c:d8:3b:bb:ce:6a:b0:12:
                    67:7b:32:f6:0a:5b:90:41:9b:c0:8a:d3:09:05:37:
                    08:e1:db:9e:f5:51:3c:9a:f1:64:58:e5:1c:f1:95:
                    f4:07:67:23:7a:87:bd:ec:7a:ab:1a:e5:ef:72:80:
                    29:b3:87:06:95:cc:a2:c7:f9:46:22:93:66:07:dc:
                    3d:6a:68:72:c2:21:a8:b3:fb:89:89:a7:56:6d:a0:
                    cb:9a:5e:78:7a:53:ad:83:d9:9a:b6:e9:1c:a0:67:
                    9a:4b:0e:f0:c8:f2:83:52:db:57:27:2e:82:ff:25:
                    01:bc:bf:96:15:cf:ba:34:52:8c:62:5d:07:25:96:
                    1f:41:4f:e5:ce:71:d7:a6:fb:4f:2e:d7:53:7a:f2:
                    87:ed:d1:36:84:00:90:63:7a:58:12:be:75:3f:7d:
                    94:a9:53:6a:01:17:07:cf:5b:e5:ee:92:7a:04:c4:
                    f4:23:3a:9e:87:04:79:50:18:48:eb:d7:e8:46:ff:
                    09:d3:21:9f:2c:6e:31:54:ab:46:dc:43:5c:d9:e1:
                    bc:67:74:0a:88:3e:4b:e1:55:62:2a:bd:b8:83:cb:
                    4e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:15:0E:E2:80:57:B7:37:89:BB:B0:7A:A3:9F:C3:73:B5:68:66:8D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/E1150EE28057B73789BBB07AA39FC373B568668D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.244.0/22
                IPv6:
                  2804:4698::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266999

    Signature Algorithm: sha256WithRSAEncryption
         d7:83:6a:54:d8:6e:b0:03:89:5c:73:ac:21:60:2b:de:38:6d:
         76:3c:9b:6b:0b:7e:0d:58:3e:31:c8:63:55:8c:1d:54:f8:96:
         bb:18:93:88:61:d9:de:06:ed:a5:59:4e:4d:36:81:b3:aa:af:
         5a:44:91:2c:39:b5:ab:61:dc:f0:f3:0c:59:f1:59:f0:2c:fa:
         ef:01:13:f1:02:ee:20:1c:fc:f7:ea:23:0e:d6:2e:be:77:ed:
         9d:06:f8:29:21:23:f8:bb:94:a7:4f:8e:43:b0:a2:f0:3e:48:
         e2:36:24:8b:e2:14:60:73:45:c1:33:09:f4:bf:61:03:89:81:
         12:5c:de:f4:47:4e:2e:08:8a:c1:65:f4:2f:72:af:c6:e0:83:
         0f:42:9f:50:f9:13:1f:3b:68:5d:d3:8d:10:ac:11:49:37:3d:
         d8:7a:ca:d3:89:4d:8b:87:d0:80:e0:0c:d5:7a:bb:0c:b6:0c:
         38:37:50:33:a1:eb:2d:1b:ae:c4:4c:d9:c8:80:4c:e7:14:f7:
         0e:90:85:0e:27:07:18:de:cb:08:4b:e7:8b:d8:38:6f:3c:f0:
         4c:57:b0:76:f0:94:b9:ab:a3:24:a1:59:7b:a7:73:1c:34:e6:
         17:84:74:b9:79:66:b2:a5:fa:8d:2f:bc:ce:ff:92:a2:f9:2f:
         3e:04:23:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----