This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E454ADE3005B4CE63E3A29A397CA2235D54821E2.cer
File:                     E454ADE3005B4CE63E3A29A397CA2235D54821E2.cer (raw, json)
Hash identifier:          FORjLTlSaCcMKPceTmkwMhXCKBkxMalTuXgRhv5QKMc=
Subject key identifier:   E4:54:AD:E3:00:5B:4C:E6:3E:3A:29:A3:97:CA:22:35:D5:48:21:E2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       193E4E8E9779A567D52BA363DF111BAF450774DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/E454ADE3005B4CE63E3A29A397CA2235D54821E2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Dec 2025 17:32:12 +0000
Certificate not after:    Mon 28 Dec 2026 17:37:12 +0000
Subordinate resources:    AS: 28202
                          IP: 177.44.0.0/17
                          IP: 177.130.128.0/18
                          IP: 179.189.160.0/19
                          IP: 186.216.64.0/18
                          IP: 187.44.0.0/18
                          IP: 187.120.64.0/18
                          IP: 189.91.0.0/19
                          IP: 191.53.0.0/16
                          IP: 191.240.0.0/17
                          IP: 2804:87c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jan 2026 08:26:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:3e:4e:8e:97:79:a5:67:d5:2b:a3:63:df:11:1b:af:45:07:74:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 29 17:32:12 2025 GMT
            Not After : Dec 28 17:37:12 2026 GMT
        Subject: CN=E454ADE3005B4CE63E3A29A397CA2235D54821E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:84:e9:db:dd:59:48:6d:dc:c5:b0:fa:73:47:
                    f5:0d:53:9d:47:21:bb:20:40:da:66:68:58:e1:b6:
                    11:40:b8:e2:eb:a1:44:e6:d0:6d:d9:49:3f:68:2c:
                    11:b7:58:12:d3:8f:1a:96:df:ce:15:5c:0f:88:84:
                    50:9e:25:48:67:29:ac:b9:3d:a1:8c:47:d0:a1:70:
                    52:3f:83:e2:d7:5f:cb:88:96:fa:04:63:49:6c:b8:
                    57:ea:0e:93:ef:6a:ae:e1:8e:d0:71:5b:7d:76:57:
                    df:ff:5b:68:2e:f5:02:3e:6f:f8:9c:91:a5:ec:74:
                    2f:b1:22:11:73:6f:08:ed:e6:3a:85:51:f7:59:2e:
                    d1:ee:3a:72:66:6a:15:f7:52:cb:c9:b8:82:93:b3:
                    70:89:e2:86:99:87:9b:13:8e:cd:ef:7d:0b:e3:9d:
                    05:40:a4:e6:67:2c:1e:bc:b9:f9:5f:96:2d:51:e4:
                    b0:aa:2c:5f:08:06:c1:31:ec:81:39:94:85:62:ae:
                    e5:fc:8d:a3:19:8b:ce:3a:b4:c7:ae:54:45:4b:b1:
                    c8:03:a8:4f:3d:46:e4:fb:61:2d:8e:07:46:c4:2f:
                    76:35:f5:e9:3d:50:9a:dd:54:71:74:9c:9f:fc:ce:
                    c2:91:0f:84:16:2c:b9:5d:d7:33:5c:97:b1:75:fe:
                    c8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E4:54:AD:E3:00:5B:4C:E6:3E:3A:29:A3:97:CA:22:35:D5:48:21:E2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/E454ADE3005B4CE63E3A29A397CA2235D54821E2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.0.0/17
                  177.130.128.0/18
                  179.189.160.0/19
                  186.216.64.0/18
                  187.44.0.0/18
                  187.120.64.0/18
                  189.91.0.0/19
                  191.53.0.0/16
                  191.240.0.0/17
                IPv6:
                  2804:87c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28202

    Signature Algorithm: sha256WithRSAEncryption
         2f:05:ce:19:0f:41:49:2f:8b:08:45:8d:47:10:e3:30:16:d5:
         f3:30:83:c4:6b:5c:de:e3:7b:e3:8a:9b:37:57:bd:1d:23:9d:
         b4:cd:78:95:11:b4:63:c3:2f:c2:52:ee:46:2a:eb:11:f8:87:
         f6:c0:a0:df:9f:0b:f5:64:59:0f:6f:15:94:67:2e:9e:24:4b:
         a2:61:dc:48:1a:68:da:57:bc:59:ef:77:70:ef:2a:a2:fa:97:
         06:cd:12:ae:78:f7:5a:6a:53:bf:f1:3d:e6:2f:4d:e5:c4:ea:
         61:99:09:33:40:93:de:91:1a:3d:d6:34:6f:b6:00:eb:e9:a7:
         cb:e0:17:85:43:fa:ba:bb:eb:da:d8:76:84:79:b7:b6:bd:81:
         16:56:6e:e8:a5:00:0a:22:98:fd:c7:a5:66:8e:2c:f8:db:70:
         d4:b3:11:fb:24:1f:8f:0f:64:42:49:89:fc:3f:0b:97:c7:41:
         5b:7b:8d:9b:a3:7a:e1:be:73:50:45:ff:de:23:bd:8a:5a:1a:
         2a:dc:8c:5b:05:ca:f0:71:76:a9:fc:02:4a:64:46:5b:91:50:
         b9:94:04:e1:91:e6:ea:76:b2:2f:24:ba:66:20:36:8a:ce:56:
         89:bd:cb:fc:d8:fa:d1:42:6d:1d:d1:10:07:e4:f7:e7:c0:65:
         f8:67:ca:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 08:58:28 2026 by rpki-client