This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
File:                     0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer (raw, json)
Hash identifier:          XDuso83ttBH0/kx/RWzdL2FREvihSdjS3mmCMXuBUxA=
Subject key identifier:   03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3FA49FDB9036C0EDE7A725ED87F6157867A3363C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Nov 2025 04:08:06 +0000
Certificate not after:    Fri 06 Nov 2026 04:13:06 +0000
Subordinate resources:    AS: 271110
                          IP: 160.20.176.0/22
                          IP: 2804:7668::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:52:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a4:9f:db:90:36:c0:ed:e7:a7:25:ed:87:f6:15:78:67:a3:36:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  7 04:08:06 2025 GMT
            Not After : Nov  6 04:13:06 2026 GMT
        Subject: CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c9:27:f7:23:9e:41:4a:04:3d:24:23:15:82:
                    f3:a5:bf:14:15:0f:35:92:9e:2e:de:36:8b:dd:91:
                    b9:4b:86:fa:a4:0c:f5:42:c9:1b:21:d6:a7:fa:43:
                    08:a7:35:6b:a8:e8:9f:72:b7:62:6e:92:a0:d9:20:
                    db:41:6c:f2:5c:70:70:c9:74:69:06:8e:04:27:f4:
                    94:19:42:ab:c8:06:ba:66:8d:e8:ed:8d:6f:7f:59:
                    06:fe:7e:fb:da:6a:89:08:77:45:e7:6e:26:01:28:
                    2d:df:73:8c:1f:95:e7:b0:4b:57:a8:4d:81:6d:2d:
                    c9:71:67:d4:8f:b0:f3:66:80:39:8a:06:2d:c8:fb:
                    c2:37:76:c5:16:7e:b1:a8:ec:62:cf:0e:75:1b:d1:
                    d7:6d:a1:00:73:97:2d:9a:1b:1d:69:95:c6:e5:8c:
                    17:52:a7:d2:f7:e8:38:ca:91:fc:d6:c4:ac:c2:be:
                    d8:c0:d1:3f:08:da:43:7a:b6:00:36:9b:0a:67:a7:
                    80:1e:e2:04:ea:21:1d:dd:55:1d:cf:af:50:da:ca:
                    f5:4e:7f:64:90:31:76:40:c6:5f:31:41:40:32:a7:
                    27:86:6d:eb:55:c6:b1:65:2a:cc:5f:79:0b:f7:35:
                    2f:86:1e:0c:68:75:3b:96:5a:5c:91:e4:24:ab:3b:
                    9d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.176.0/22
                IPv6:
                  2804:7668::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271110

    Signature Algorithm: sha256WithRSAEncryption
         1e:18:b1:35:aa:75:98:61:25:5f:8c:75:e1:79:74:c7:71:14:
         67:84:96:e3:88:e9:f6:25:92:66:42:dd:09:d8:df:be:ef:7a:
         4c:bc:45:83:ba:10:e2:c7:c7:3a:40:0f:a8:a9:df:de:4c:90:
         95:45:5e:9e:ab:83:04:08:23:05:a4:71:2b:41:da:c9:a7:5c:
         21:02:03:60:a1:ca:d2:a8:70:73:bb:15:8a:16:74:fa:86:f3:
         5d:9e:a3:f2:36:6c:0a:34:14:f7:7d:67:d2:08:56:4c:d2:5c:
         49:66:78:d6:59:fa:a0:b6:3d:ef:ab:b4:25:de:44:64:12:25:
         27:19:88:f8:1a:72:57:fd:dc:04:c2:aa:65:a8:a1:85:1a:99:
         0e:67:61:5f:5c:ed:cf:1c:74:db:b1:9c:ec:9d:0f:ef:99:1f:
         b3:4b:f3:53:e5:fb:ab:6a:74:49:03:5a:65:1d:fd:e7:87:cf:
         95:d6:39:7e:09:98:a0:f2:ed:41:b5:33:9e:ed:08:22:2c:e0:
         10:06:c8:d5:2d:94:40:4e:c7:27:e7:9c:a8:ab:a7:2c:e9:a5:
         81:a4:c1:60:5b:ec:54:74:b1:dd:19:22:72:a8:5d:f1:05:51:
         78:a6:36:ed:cd:8b:98:70:31:cb:eb:b0:a2:1d:50:3e:54:4c:
         fd:1c:58:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----