This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E9D70132186E718BADCF6045080D069DC88D24AB.cer
File:                     E9D70132186E718BADCF6045080D069DC88D24AB.cer (raw, json)
Hash identifier:          fTleezV+AYkfcp1LD53d13r9HKVUXftPGIZ+/5c55ZI=
Subject key identifier:   E9:D7:01:32:18:6E:71:8B:AD:CF:60:45:08:0D:06:9D:C8:8D:24:AB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       34D63D4E9B963A984506475F3500E247786DAB8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/E9D70132186E718BADCF6045080D069DC88D24AB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Dec 2025 12:35:10 +0000
Certificate not after:    Fri 11 Dec 2026 12:40:10 +0000
Subordinate resources:    AS: 270430
                          IP: 190.111.156.0/22
                          IP: 2804:6bdc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 22:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d6:3d:4e:9b:96:3a:98:45:06:47:5f:35:00:e2:47:78:6d:ab:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 12 12:35:10 2025 GMT
            Not After : Dec 11 12:40:10 2026 GMT
        Subject: CN=E9D70132186E718BADCF6045080D069DC88D24AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:91:3b:5f:56:2d:d3:e1:62:d3:a2:42:27:0f:
                    c3:fd:91:03:21:0d:5f:43:fb:6b:69:a6:0d:be:d9:
                    9c:ca:2c:72:18:9c:90:fa:ea:e0:90:f7:8b:31:28:
                    28:98:1b:f5:3b:f4:cd:2f:be:16:05:71:a8:a9:ce:
                    03:f0:32:57:b3:88:b0:ff:e4:4e:20:7b:e2:35:d9:
                    e4:30:a7:db:b2:9a:7a:44:93:b6:69:46:48:fa:1e:
                    e3:e1:c6:3e:8d:5f:6d:c2:ca:b8:3f:01:fc:ca:fb:
                    fb:e4:4f:a9:c4:ab:68:c4:b5:09:9e:36:53:f9:60:
                    92:09:a8:21:d8:01:77:98:bb:d0:a1:9a:f0:33:8f:
                    87:72:3a:4f:ca:9e:69:f2:19:5d:5c:dd:99:88:ab:
                    12:f2:45:e6:cf:26:dc:74:27:eb:7e:3e:38:f1:96:
                    aa:45:22:8e:9c:36:f7:37:eb:38:8a:08:a9:07:a6:
                    6a:c6:e7:4d:c0:8f:02:3f:cb:8e:40:46:8e:1f:c3:
                    0d:0f:11:49:08:ea:d3:64:80:70:6a:18:0f:83:cc:
                    92:48:92:da:d3:ac:75:16:8a:8a:cf:10:af:58:b4:
                    ce:a4:31:53:46:bf:69:1c:3a:b5:1a:aa:7e:f0:5c:
                    20:da:9c:1a:c5:50:a3:44:7a:ab:7c:47:52:a2:a0:
                    1b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E9:D7:01:32:18:6E:71:8B:AD:CF:60:45:08:0D:06:9D:C8:8D:24:AB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/E9D70132186E718BADCF6045080D069DC88D24AB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.156.0/22
                IPv6:
                  2804:6bdc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270430

    Signature Algorithm: sha256WithRSAEncryption
         be:29:a2:be:b6:e3:32:eb:81:fb:6c:3c:0c:85:03:db:9b:71:
         fa:8a:83:19:2e:4a:e5:03:66:d2:71:16:74:a0:1e:d4:7b:84:
         90:4a:63:29:f2:74:94:e8:48:f0:bd:b6:be:c8:83:68:16:a3:
         1c:8d:2f:01:54:82:c3:df:a2:bd:68:f4:82:93:ad:cb:f4:2c:
         9f:6e:e2:56:7b:c8:64:30:74:84:65:c9:53:a1:77:7b:26:7a:
         bc:c7:f9:c1:6b:c6:ac:9a:ad:11:eb:78:5b:16:d7:df:d6:d0:
         a9:b5:19:61:3f:7a:a8:3a:a5:e2:d5:1d:a4:13:2b:f8:28:d8:
         4e:0b:86:74:f9:ed:2c:84:49:30:9e:7b:10:1b:da:e6:f9:37:
         1b:9b:38:45:f3:35:24:b7:58:63:ef:44:9c:fc:f1:47:7d:a8:
         99:bb:92:ce:b8:b7:3b:f5:63:15:24:38:cc:82:81:f3:42:fb:
         39:37:f3:12:c9:bc:8f:19:cc:36:6a:96:1f:a7:1c:b8:f9:7e:
         8d:0e:62:32:a4:ba:7f:01:58:08:4f:78:db:53:f8:96:eb:eb:
         7b:84:e3:56:9e:91:76:87:3e:1b:7c:37:4c:16:d5:8f:df:56:
         2d:ef:84:0d:1b:fe:6e:65:7e:af:79:f6:be:79:0d:f8:ce:25:
         d9:5b:7f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----