This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/100F27F00733C62054313D63AD987B719CB0A7C2.cer
File:                     100F27F00733C62054313D63AD987B719CB0A7C2.cer (raw, json)
Hash identifier:          2neYt2QZiKm9E/idbUrfToUs0LLpRLldplse0Q2H1DU=
Subject key identifier:   10:0F:27:F0:07:33:C6:20:54:31:3D:63:AD:98:7B:71:9C:B0:A7:C2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       62EA0B5FE44535C8D8F25300CA5A061657B4AFE5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/0/100F27F00733C62054313D63AD987B719CB0A7C2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 Dec 2025 12:30:25 +0000
Certificate not after:    Wed 09 Dec 2026 12:35:25 +0000
Subordinate resources:    AS: 267448
                          IP: 192.141.60.0/22
                          IP: 2804:41a8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Dec 2025 04:57:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ea:0b:5f:e4:45:35:c8:d8:f2:53:00:ca:5a:06:16:57:b4:af:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 10 12:30:25 2025 GMT
            Not After : Dec  9 12:35:25 2026 GMT
        Subject: CN=100F27F00733C62054313D63AD987B719CB0A7C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8d:0a:fb:e2:06:52:af:84:e4:eb:9e:cf:10:
                    f6:47:9e:b3:48:3a:98:1e:24:f7:cc:9f:a6:52:3e:
                    e4:64:09:1b:d3:c1:17:a6:7d:7e:3d:3e:b0:4c:0d:
                    f7:81:da:fb:08:c9:5e:a4:df:c0:2f:af:4a:47:16:
                    e7:ce:99:70:58:21:b2:22:1f:6f:f3:09:0f:f3:f8:
                    eb:52:80:79:3f:13:7d:b6:7b:b8:c6:03:98:38:4e:
                    e4:2e:50:bc:46:b8:8a:1d:df:27:9b:ae:aa:00:9b:
                    42:a1:7b:12:d8:7f:a1:e6:ab:e6:87:41:99:dc:d9:
                    5c:41:af:f9:10:03:ae:7c:fc:4e:d9:3d:ed:de:d0:
                    94:48:21:a0:05:25:a0:ed:28:49:d1:79:5a:7f:de:
                    b9:4e:7f:5e:91:bf:3e:f2:f8:04:7b:73:05:45:c2:
                    fc:92:37:17:5c:d1:dd:ec:e4:f2:e8:8e:32:d3:3a:
                    72:e2:9a:14:a5:57:c1:f4:43:09:42:62:f5:c0:11:
                    e5:70:be:f7:f3:55:a6:76:58:3d:de:61:40:2f:54:
                    7c:52:e0:96:b1:46:9b:d8:6a:db:17:66:18:5e:97:
                    23:dd:16:eb:ce:60:21:d5:70:79:16:74:3a:c3:f9:
                    2e:d0:7c:8e:95:cb:80:ef:f4:76:25:5f:0c:16:86:
                    e0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:0F:27:F0:07:33:C6:20:54:31:3D:63:AD:98:7B:71:9C:B0:A7:C2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/0/100F27F00733C62054313D63AD987B719CB0A7C2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.60.0/22
                IPv6:
                  2804:41a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267448

    Signature Algorithm: sha256WithRSAEncryption
         8e:14:9f:1d:7f:43:46:db:e6:f5:3c:77:83:af:93:b0:41:ba:
         c6:b7:d5:0d:81:89:31:3b:bb:94:83:a1:a5:1e:44:63:62:d5:
         20:56:3e:e2:08:13:b7:63:10:fc:1e:3d:ce:05:40:80:6f:15:
         1d:1a:50:fa:6e:d5:24:06:08:e1:14:44:8d:87:16:c8:6a:ed:
         47:f2:99:56:ac:73:8c:e7:71:4f:f3:15:90:ff:19:40:0c:1e:
         ea:a9:09:4f:48:35:43:cc:34:2c:7f:e3:4a:04:f7:1e:19:e2:
         19:51:67:0f:be:ae:a1:88:77:c5:39:16:78:4b:6d:d4:38:be:
         85:9b:7e:d2:db:26:d0:6b:3e:91:0f:9b:8c:4c:96:d4:b0:d8:
         41:5b:af:a4:f1:7f:c2:35:18:3a:31:a0:20:08:19:b4:7d:89:
         bc:16:ce:e3:26:38:80:17:8c:c0:4f:21:2b:73:51:0a:b9:a9:
         a8:54:31:8c:c9:5b:cf:eb:e3:e6:14:03:59:18:36:b5:06:9b:
         fd:f4:b6:c0:15:84:da:f4:b8:28:9c:b9:0c:90:37:20:b2:e2:
         a7:c6:39:f4:e7:4d:cd:02:49:65:69:c7:f8:46:ce:ab:d0:0c:
         2d:83:98:3b:73:5c:44:9e:08:ce:b4:e3:14:48:36:34:6b:a7:
         e7:65:e2:72
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUYuoLX+RFNcjY8lMAyloGFle0r+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEyMTAxMjMwMjVaFw0yNjEyMDkxMjM1MjVaMDMxMTAvBgNV
BAMTKDEwMEYyN0YwMDczM0M2MjA1NDMxM0Q2M0FEOTg3QjcxOUNCMEE3QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+jQr74gZSr4Tk657PEPZHnrNI
OpgeJPfMn6ZSPuRkCRvTwRemfX49PrBMDfeB2vsIyV6k38Avr0pHFufOmXBYIbIi
H2/zCQ/z+OtSgHk/E322e7jGA5g4TuQuULxGuIod3yebrqoAm0KhexLYf6Hmq+aH
QZnc2VxBr/kQA658/E7ZPe3e0JRIIaAFJaDtKEnReVp/3rlOf16Rvz7y+AR7cwVF
wvySNxdc0d3s5PLojjLTOnLimhSlV8H0QwlCYvXAEeVwvvfzVaZ2WD3eYUAvVHxS
4JaxRpvYatsXZhhelyPdFuvOYCHVcHkWdDrD+S7QfI6Vy4Dv9HYlXwwWhuD1AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQQDyfwBzPGIFQx
PWOtmHtxnLCnwjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRnFv
NzhYM1A0VWJtajdjZlBRV1JMYnRUQWJLN0RHdGNCVjlnQUNIRTJrY0ovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zx
bzc4WDNQNFVibWo3Y2ZQUVdSTGJ0VEFiSzdER3RjQlY5Z0FDSEUya2NKLzAvMTAw
RjI3RjAwNzMzQzYyMDU0MzEzRDYzQUQ5ODdCNzE5Q0IwQTdDMi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCwI08MA0EAgACMAcDBQAoBEGoMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQUuDANBgkqhkiG9w0BAQsFAAOCAQEAjhSfHX9DRtvm9Tx3
g6+TsEG6xrfVDYGJMTu7lIOhpR5EY2LVIFY+4ggTt2MQ/B49zgVAgG8VHRpQ+m7V
JAYI4RREjYcWyGrtR/KZVqxzjOdxT/MVkP8ZQAwe6qkJT0g1Q8w0LH/jSgT3Hhni
GVFnD76uoYh3xTkWeEtt1Di+hZt+0tsm0Gs+kQ+bjEyW1LDYQVuvpPF/wjUYOjGg
IAgZtH2JvBbO4yY4gBeMwE8hK3NRCrmpqFQxjMlbz+vj5hQDWRg2tQab/fS2wBWE
2vS4KJy5DJA3ILLip8Y59OdNzQJJZWnH+EbOq9AMLYOYO3NcRJ4IzrTjFEg2NGun
52Xicg==
-----END CERTIFICATE-----