This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0E1B21C62DBFAE7BD33B349D9657A3C90147B837.cer
File:                     0E1B21C62DBFAE7BD33B349D9657A3C90147B837.cer (raw, json)
Hash identifier:          /Tk16Q7sjv3v4TAaa8aIafd/sxNNJC2eomDH8++7ryQ=
Subject key identifier:   0E:1B:21:C6:2D:BF:AE:7B:D3:3B:34:9D:96:57:A3:C9:01:47:B8:37
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       372CCE1E21BB1E839BBCE505BECB7FECD66D108B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/0E1B21C62DBFAE7BD33B349D9657A3C90147B837.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Nov 2025 18:16:12 +0000
Certificate not after:    Thu 05 Nov 2026 18:21:12 +0000
Subordinate resources:    AS: 263324
                          IP: 170.247.20.0/22
                          IP: 177.86.156.0/22
                          IP: 2804:1448::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:2c:ce:1e:21:bb:1e:83:9b:bc:e5:05:be:cb:7f:ec:d6:6d:10:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  6 18:16:12 2025 GMT
            Not After : Nov  5 18:21:12 2026 GMT
        Subject: CN=0E1B21C62DBFAE7BD33B349D9657A3C90147B837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4c:29:83:11:e9:48:58:25:b6:b5:66:5c:c1:
                    b0:1d:65:ef:b4:2e:be:27:75:e4:6c:f8:24:ef:56:
                    83:5e:8e:f1:d6:bd:60:20:04:2b:e7:44:1b:b7:c9:
                    fd:8e:03:58:d0:a9:85:ac:e1:86:6f:70:bb:71:58:
                    ca:9d:fd:45:be:af:32:29:9e:51:dd:23:08:82:d8:
                    8d:a3:ee:74:86:a1:98:f4:41:04:2a:5d:ae:5e:c6:
                    05:f0:5b:e2:70:8e:79:7b:61:f8:35:c4:c9:54:a3:
                    67:1e:5c:55:dd:df:7c:ec:d2:cf:12:83:be:56:b4:
                    1d:ed:91:bc:16:07:75:70:6f:5a:f4:d5:04:d4:57:
                    76:c3:f5:0a:3d:48:6d:3c:da:d7:3d:a0:3f:f1:6e:
                    e1:7a:cf:53:c7:d0:89:fb:0b:fa:93:64:38:e3:85:
                    34:47:39:13:b4:f4:67:73:df:5d:07:0a:7a:27:10:
                    fb:b3:5c:08:82:6a:f0:d5:02:4d:8b:f3:46:d3:39:
                    1c:29:4b:69:f9:2e:96:0a:3a:2f:eb:61:33:e4:d1:
                    8b:14:db:5a:aa:46:38:b4:d2:30:f3:c3:8c:cb:9a:
                    dc:eb:24:71:59:ca:4e:d9:6b:67:7b:7e:16:44:a7:
                    00:a0:b9:a7:62:14:d3:23:24:9b:2a:c3:aa:62:26:
                    2d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:1B:21:C6:2D:BF:AE:7B:D3:3B:34:9D:96:57:A3:C9:01:47:B8:37
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/0E1B21C62DBFAE7BD33B349D9657A3C90147B837.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.20.0/22
                  177.86.156.0/22
                IPv6:
                  2804:1448::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263324

    Signature Algorithm: sha256WithRSAEncryption
         81:be:44:42:87:f5:3e:7e:3a:df:0e:95:a7:b9:39:fc:7f:4c:
         f6:92:b9:1b:07:12:b2:d4:7b:df:49:cb:ef:72:c6:c4:9f:81:
         77:21:34:dc:42:c0:72:36:7e:c1:13:f7:aa:34:da:61:10:d3:
         66:2e:7b:bf:6f:94:ad:d7:f1:92:37:1a:14:ff:a9:89:c2:f6:
         eb:59:94:bd:7d:27:30:ba:3c:bf:35:33:51:07:1e:0e:5e:21:
         67:64:4d:b4:41:ff:03:a6:23:37:6d:8a:98:3a:d2:1f:0d:7b:
         1d:d0:5f:0f:5e:02:bc:3d:24:4e:7f:24:f7:80:26:35:cd:37:
         41:3d:79:c2:e7:5b:b3:e4:34:e1:8d:75:5c:de:3e:25:76:19:
         0f:38:56:3b:b0:d9:b4:2b:be:d4:91:85:fe:5b:ff:18:88:d8:
         ec:c8:05:02:ce:b1:c5:84:3d:cb:e0:b9:44:80:e0:62:13:fe:
         bf:29:50:0b:a9:b3:8d:48:0b:52:19:32:b9:25:b9:43:58:24:
         03:79:49:54:0c:48:3a:c4:f6:62:b5:b5:f9:ca:fa:1c:a4:af:
         d5:21:09:f4:6a:d8:80:91:08:bd:6f:39:f4:60:83:0c:4e:2b:
         33:1d:71:02:b8:d9:b2:c6:3c:78:8e:34:40:ae:6a:97:bf:6d:
         f6:6b:55:46
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUNyzOHiG7HoObvOUFvst/7NZtEIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTExMDYxODE2MTJaFw0yNjExMDUxODIxMTJaMDMxMTAvBgNV
BAMTKDBFMUIyMUM2MkRCRkFFN0JEMzNCMzQ5RDk2NTdBM0M5MDE0N0I4MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvTCmDEelIWCW2tWZcwbAdZe+0
Lr4ndeRs+CTvVoNejvHWvWAgBCvnRBu3yf2OA1jQqYWs4YZvcLtxWMqd/UW+rzIp
nlHdIwiC2I2j7nSGoZj0QQQqXa5exgXwW+Jwjnl7Yfg1xMlUo2ceXFXd33zs0s8S
g75WtB3tkbwWB3Vwb1r01QTUV3bD9Qo9SG082tc9oD/xbuF6z1PH0In7C/qTZDjj
hTRHORO09Gdz310HCnonEPuzXAiCavDVAk2L80bTORwpS2n5LpYKOi/rYTPk0YsU
21qqRji00jDzw4zLmtzrJHFZyk7Za2d7fhZEpwCguadiFNMjJJsqw6piJi21AgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQOGyHGLb+ue9M7
NJ2WV6PJAUe4NzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR3Vq
alRScm83cWRWRjZ5Vjd0aWhBUXphc2Q3Rlg3eHdrMjRZc2V1R1NKclkvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0d1
ampUUnJvN3FkVkY2eVY3dGloQVF6YXNkN0ZYN3h3azI0WXNldUdTSnJZLzAvMEUx
QjIxQzYyREJGQUU3QkQzM0IzNDlEOTY1N0EzQzkwMTQ3QjgzNy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCqvcUAwQCsVacMA0EAgACMAcDBQAoBBRIMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQEnDANBgkqhkiG9w0BAQsFAAOCAQEAgb5EQof1
Pn463w6Vp7k5/H9M9pK5GwcSstR730nL73LGxJ+BdyE03ELAcjZ+wRP3qjTaYRDT
Zi57v2+UrdfxkjcaFP+picL261mUvX0nMLo8vzUzUQceDl4hZ2RNtEH/A6YjN22K
mDrSHw17HdBfD14CvD0kTn8k94AmNc03QT15wudbs+Q04Y11XN4+JXYZDzhWO7DZ
tCu+1JGF/lv/GIjY7MgFAs6xxYQ9y+C5RIDgYhP+vylQC6mzjUgLUhkyuSW5Q1gk
A3lJVAxIOsT2YrW1+cr6HKSv1SEJ9GrYgJEIvW859GCDDE4rMx1xArjZssY8eI40
QK5ql79t9mtVRg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 06:37:00 2025 by rpki-client