This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0C879DC3244B49B0FBB56845F2C560A92F9852B6.cer
File:                     0C879DC3244B49B0FBB56845F2C560A92F9852B6.cer (raw, json)
Hash identifier:          IM0/wokBIpi2IdJ/tXunWaACbB75GMDyC82Qzl0OLdE=
Subject key identifier:   0C:87:9D:C3:24:4B:49:B0:FB:B5:68:45:F2:C5:60:A9:2F:98:52:B6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       05BDAF5F1763B0E4C4D99936B7F653D809C4F770
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/0C879DC3244B49B0FBB56845F2C560A92F9852B6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Dec 2025 15:38:04 +0000
Certificate not after:    Fri 04 Dec 2026 15:43:04 +0000
Subordinate resources:    AS: 266319
                          IP: 170.238.128.0/22
                          IP: 2804:35fc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:bd:af:5f:17:63:b0:e4:c4:d9:99:36:b7:f6:53:d8:09:c4:f7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  5 15:38:04 2025 GMT
            Not After : Dec  4 15:43:04 2026 GMT
        Subject: CN=0C879DC3244B49B0FBB56845F2C560A92F9852B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d6:fd:f6:ec:b1:61:13:4a:e2:77:d8:6a:a7:
                    50:2c:ae:4d:ae:7d:94:3e:2a:a6:97:80:f0:22:c4:
                    10:c6:45:4b:e1:b6:ac:75:f5:c9:b3:02:fb:2c:fc:
                    1e:28:69:b4:a6:f6:f0:1a:d0:d0:d8:55:0b:a5:c7:
                    d4:b6:bf:f3:c6:65:c5:89:02:18:cb:43:eb:13:da:
                    01:30:5d:f0:87:c8:fc:ae:40:dd:cf:e8:c2:1f:da:
                    e1:cf:76:d7:e8:80:38:02:c8:5f:0a:dc:3b:d3:bf:
                    a8:eb:cf:d1:2e:1b:1d:59:26:4f:a5:64:1c:e9:cb:
                    23:51:a5:a4:c3:e9:0d:c4:50:9f:7f:f9:82:ba:a6:
                    ff:54:fd:e7:46:07:7c:10:99:0c:96:7f:09:ac:48:
                    50:32:17:af:10:a9:91:61:74:d0:29:ee:d6:a3:38:
                    e1:43:06:f7:98:f4:53:34:6f:81:34:c1:4d:10:17:
                    ba:f7:76:0d:8d:2c:43:10:1e:97:04:3d:69:09:2d:
                    d9:57:31:a6:25:b9:1e:8a:5a:ec:7a:27:2d:4e:29:
                    44:c7:08:1e:a4:51:dc:68:a6:06:4b:7c:ee:70:1f:
                    5d:3b:e0:55:cc:83:88:ce:3f:3f:cb:24:a2:07:d0:
                    01:9e:6b:8d:33:ff:a3:d3:19:a7:dd:4a:eb:8d:95:
                    2a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:87:9D:C3:24:4B:49:B0:FB:B5:68:45:F2:C5:60:A9:2F:98:52:B6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/0C879DC3244B49B0FBB56845F2C560A92F9852B6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.128.0/22
                IPv6:
                  2804:35fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266319

    Signature Algorithm: sha256WithRSAEncryption
         d0:ab:7f:a9:15:c4:1c:65:8c:ae:3f:59:52:fa:54:d6:29:62:
         86:19:64:57:ac:ba:12:3d:6d:b4:98:f4:80:bf:06:8a:fc:23:
         9e:c9:a1:ee:b0:1e:45:d2:31:5d:97:fd:8a:67:b9:57:0b:a2:
         c3:60:9f:14:95:d5:c4:9f:ab:44:b7:8e:05:9d:ff:50:1f:1a:
         4d:ad:1d:35:95:34:86:ea:f9:dc:36:7c:6e:35:77:7e:55:94:
         37:9a:2a:6b:85:eb:67:9b:38:81:dc:57:0c:3f:59:d0:e6:12:
         47:51:fc:0a:cf:9e:ae:2d:8f:92:bd:63:9d:31:23:05:a0:46:
         d3:3c:f0:50:b9:c5:d2:f6:47:19:f0:3e:a4:40:72:22:fc:b4:
         64:23:e8:3c:5e:1b:da:28:29:58:15:0c:7f:5e:a3:34:65:3f:
         09:62:d6:75:b2:84:9f:23:e1:de:e0:72:01:82:69:4d:0e:29:
         6c:40:a4:81:90:90:b6:2f:8a:53:d7:26:50:17:fe:82:63:0b:
         ad:d0:4d:03:40:59:89:bb:89:a1:b5:26:ec:ca:b9:0e:3a:9b:
         28:b5:0a:0a:67:f7:58:87:0b:b8:a2:b1:78:04:69:e8:7e:74:
         1c:55:b8:89:86:67:6c:b8:21:fc:38:c2:a4:54:2e:0b:86:7e:
         d6:20:85:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----