This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0B302D978198636085D3E247B598AC1275D02145.cer
File:                     0B302D978198636085D3E247B598AC1275D02145.cer (raw, json)
Hash identifier:          pqZCl+4OHaKKXayrCq4haRvcr7DUh2Kh+qgOoRcpNjA=
Subject key identifier:   0B:30:2D:97:81:98:63:60:85:D3:E2:47:B5:98:AC:12:75:D0:21:45
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       67AEDABF0FDF5B15299F7D12F9D102A367213ACD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/0B302D978198636085D3E247B598AC1275D02145.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Nov 2025 04:00:32 +0000
Certificate not after:    Tue 24 Nov 2026 04:05:32 +0000
Subordinate resources:    AS: 273381
                          IP: 2804:8dcc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 18:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ae:da:bf:0f:df:5b:15:29:9f:7d:12:f9:d1:02:a3:67:21:3a:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 25 04:00:32 2025 GMT
            Not After : Nov 24 04:05:32 2026 GMT
        Subject: CN=0B302D978198636085D3E247B598AC1275D02145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:82:e9:87:bf:d7:8d:41:68:6d:96:8d:dc:fe:
                    f3:33:31:00:8e:09:11:9d:b3:c1:20:cf:8d:12:d2:
                    fc:a8:14:7f:d7:70:63:d6:71:a5:2f:33:7b:b1:f8:
                    ec:35:26:41:16:ff:21:be:be:a7:9f:4f:7f:f3:7b:
                    c5:63:6e:96:94:16:94:56:5d:1a:40:fa:21:21:53:
                    a0:2c:ff:67:78:0e:c6:6d:2b:8a:e6:2e:0f:4f:50:
                    d7:60:34:1f:62:6c:64:80:71:ee:e3:ea:9d:9a:fd:
                    8f:65:f9:6b:10:0c:02:91:65:e6:ff:d6:b6:07:c8:
                    c7:46:c2:d8:c7:f5:f1:84:7a:2d:74:db:c5:7b:e5:
                    07:1f:d8:25:14:94:94:08:49:09:bf:b9:12:30:0f:
                    58:2b:49:f5:f6:19:54:51:27:3c:b6:24:b5:2b:7d:
                    f4:d7:3f:5c:03:4c:65:c3:49:4c:b4:76:cb:7b:90:
                    c8:4f:51:17:16:33:e6:4b:8f:1e:97:6b:86:75:3e:
                    0e:85:21:59:dc:2c:75:7d:f9:81:01:e5:fd:e1:eb:
                    aa:ca:18:24:34:5d:88:6d:60:b9:70:5f:1c:05:48:
                    88:a5:4a:9d:ad:6f:d1:54:03:c4:b9:75:5c:8c:94:
                    3d:68:1e:c6:05:a2:83:84:b3:73:59:a8:1c:68:47:
                    7a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:30:2D:97:81:98:63:60:85:D3:E2:47:B5:98:AC:12:75:D0:21:45
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/0B302D978198636085D3E247B598AC1275D02145.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8dcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273381

    Signature Algorithm: sha256WithRSAEncryption
         35:89:67:e2:a9:a9:b6:b5:52:f0:2f:d0:ba:2d:33:32:1e:fb:
         7c:f9:2b:3e:0f:cd:74:e3:37:50:31:c5:b8:88:4e:ef:c2:cf:
         28:bc:c3:f8:5c:38:95:96:ba:0c:67:45:0c:06:13:5d:84:8f:
         6e:d5:ae:aa:c5:f0:71:65:0d:1d:a4:1a:87:4e:83:cc:df:bb:
         b0:57:bf:72:24:1d:27:a1:f2:51:e7:0e:6e:ea:59:4c:e4:61:
         86:c2:22:e7:28:4d:3b:4b:dc:60:c1:df:cd:f3:fd:55:9b:67:
         7c:ff:eb:79:6e:df:e6:1e:60:fa:da:f7:1e:60:5f:d5:52:5a:
         5a:1a:f9:80:d4:39:ee:93:0b:1a:bd:18:45:bc:d6:ed:33:5c:
         d5:27:01:99:20:f3:34:79:01:4d:30:69:a4:86:d1:3d:9f:27:
         74:ad:7e:f2:67:55:24:45:da:1d:43:ef:95:df:eb:5c:cd:7f:
         1b:5b:4d:29:9a:c9:d7:f1:1e:2e:56:9e:80:46:21:3f:35:21:
         eb:3b:66:1e:73:e3:1e:4f:35:36:fd:21:49:d4:8a:d3:97:dc:
         f1:f7:14:70:6d:dd:0b:b5:05:5f:2f:df:a8:b1:6b:d4:5d:1d:
         d8:f7:8c:1d:40:08:6d:93:fc:17:2a:1b:ec:d2:db:e4:0b:f0:
         b8:1c:59:81
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUZ67avw/fWxUpn30S+dECo2chOs0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTExMjUwNDAwMzJaFw0yNjExMjQwNDA1MzJaMDMxMTAvBgNV
BAMTKDBCMzAyRDk3ODE5ODYzNjA4NUQzRTI0N0I1OThBQzEyNzVEMDIxNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJgumHv9eNQWhtlo3c/vMzMQCO
CRGds8Egz40S0vyoFH/XcGPWcaUvM3ux+Ow1JkEW/yG+vqefT3/ze8VjbpaUFpRW
XRpA+iEhU6As/2d4DsZtK4rmLg9PUNdgNB9ibGSAce7j6p2a/Y9l+WsQDAKRZeb/
1rYHyMdGwtjH9fGEei1028V75Qcf2CUUlJQISQm/uRIwD1grSfX2GVRRJzy2JLUr
ffTXP1wDTGXDSUy0dst7kMhPURcWM+ZLjx6Xa4Z1Pg6FIVncLHV9+YEB5f3h66rK
GCQ0XYhtYLlwXxwFSIilSp2tb9FUA8S5dVyMlD1oHsYFooOEs3NZqBxoR3r1AgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQLMC2XgZhjYIXT
4ke1mKwSddAhRTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEZr
QUFkUmU2SEdRZ29uUUtEZnVtSndiUTlpYlN1U0E1THo3OHJUSnZIc0cvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRG
a0FBZFJlNkhHUWdvblFLRGZ1bUp3YlE5aWJTdVNBNUx6NzhyVEp2SHNHLzAvMEIz
MDJEOTc4MTk4NjM2MDg1RDNFMjQ3QjU5OEFDMTI3NUQwMjE0NS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASNzDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
K+UwDQYJKoZIhvcNAQELBQADggEBADWJZ+Kpqba1UvAv0LotMzIe+3z5Kz4PzXTj
N1AxxbiITu/Czyi8w/hcOJWWugxnRQwGE12Ej27VrqrF8HFlDR2kGodOg8zfu7BX
v3IkHSeh8lHnDm7qWUzkYYbCIucoTTtL3GDB383z/VWbZ3z/63lu3+YeYPra9x5g
X9VSWloa+YDUOe6TCxq9GEW81u0zXNUnAZkg8zR5AU0waaSG0T2fJ3StfvJnVSRF
2h1D75Xf61zNfxtbTSmaydfxHi5WnoBGIT81Ies7Zh5z4x5PNTb9IUnUitOX3PH3
FHBt3Qu1BV8v36ixa9RdHdj3jB1ACG2T/BcqG+zS2+QL8LgcWYE=
-----END CERTIFICATE-----