This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1011573AA94A527E7C77C596D7EF50759DCDD62A.cer
File:                     1011573AA94A527E7C77C596D7EF50759DCDD62A.cer (raw, json)
Hash identifier:          VN1i6yLDUJ0L1pBkLsIL0ljPVzRTDJ61+TATx2PTPqA=
Subject key identifier:   10:11:57:3A:A9:4A:52:7E:7C:77:C5:96:D7:EF:50:75:9D:CD:D6:2A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       42F3695A8A5C10E6CB50D32DFFDBE9AE0A54D929
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/1011573AA94A527E7C77C596D7EF50759DCDD62A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Nov 2025 17:51:31 +0000
Certificate not after:    Tue 10 Nov 2026 17:56:31 +0000
Subordinate resources:    AS: 263015
                          IP: 170.0.212.0/22
                          IP: 170.81.112.0/22
                          IP: 170.83.252.0/22
                          IP: 177.137.120.0/21
                          IP: 186.227.176.0/21
                          IP: 2804:14e8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f3:69:5a:8a:5c:10:e6:cb:50:d3:2d:ff:db:e9:ae:0a:54:d9:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 11 17:51:31 2025 GMT
            Not After : Nov 10 17:56:31 2026 GMT
        Subject: CN=1011573AA94A527E7C77C596D7EF50759DCDD62A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ae:3d:b0:da:26:b0:bc:f3:85:74:b7:60:9d:
                    85:44:4b:ee:d2:e1:05:02:c7:a5:76:37:39:c1:3b:
                    bc:1b:5a:cd:2f:ac:36:14:4f:3f:7f:f3:bd:3b:2f:
                    0b:77:1a:86:89:81:9e:2b:d9:34:a6:62:24:4c:04:
                    ce:84:e8:02:0a:d2:c3:a2:d0:6f:b7:e9:6a:3a:51:
                    44:b1:28:44:3b:48:b2:c1:6f:c6:67:9f:7f:af:f6:
                    ad:87:26:7f:32:f4:a8:4f:60:09:cf:9b:2d:37:df:
                    f9:43:45:ca:37:7d:e1:6f:5d:52:1c:ea:0f:be:af:
                    ff:e6:d8:dd:87:ac:bb:7c:a9:28:4f:39:c4:bd:47:
                    4c:f9:06:d9:63:95:46:ec:20:f6:69:a7:40:0d:7f:
                    6b:97:da:5e:d0:cb:16:42:ef:83:7e:12:3a:0b:69:
                    63:f0:8c:19:6d:70:4e:aa:3e:41:8f:b1:8e:c2:80:
                    97:35:52:d0:0b:5e:0d:ce:56:97:b0:69:fc:2b:84:
                    95:80:db:af:0c:60:ed:aa:6b:9f:e0:d8:f5:48:88:
                    c0:7d:ab:b2:3d:de:22:ba:b1:bf:73:e9:4f:1e:44:
                    c4:e9:ad:de:74:e5:d4:b6:f2:05:59:f3:23:93:12:
                    88:0f:4f:13:e1:64:47:1c:e7:cc:b1:e0:19:08:c9:
                    7d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:11:57:3A:A9:4A:52:7E:7C:77:C5:96:D7:EF:50:75:9D:CD:D6:2A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/1011573AA94A527E7C77C596D7EF50759DCDD62A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.212.0/22
                  170.81.112.0/22
                  170.83.252.0/22
                  177.137.120.0/21
                  186.227.176.0/21
                IPv6:
                  2804:14e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263015

    Signature Algorithm: sha256WithRSAEncryption
         bc:54:90:71:08:c5:7c:07:1e:a4:00:a6:b7:b8:06:7e:73:8d:
         35:d0:e6:cb:cc:2e:0a:a6:77:57:4a:9a:df:97:e0:22:90:3e:
         78:58:af:d9:73:66:c2:60:72:ae:9b:ec:02:42:f5:b1:b5:22:
         1e:eb:5f:90:60:45:8e:e8:49:b6:2e:29:a9:70:fd:d6:80:c1:
         f3:74:ac:68:9e:7a:fb:c0:12:24:d7:26:4f:3b:cd:2f:c5:89:
         dc:9a:a6:68:d3:15:e6:0d:76:af:a9:e4:e9:89:d5:b5:d3:74:
         4c:e0:7c:dc:1a:f6:12:4c:c3:ba:de:ae:ab:c7:02:65:f9:f6:
         43:ae:d5:50:5c:14:13:2d:cc:22:5b:c4:ad:bf:e1:00:e6:6e:
         91:0c:83:c8:98:23:e9:ff:c1:22:cd:5e:08:fc:42:a9:59:61:
         19:21:23:f7:e5:fc:38:aa:a6:53:77:f4:69:78:9e:b5:e7:0e:
         d2:4e:60:9a:58:29:56:0d:25:24:13:2f:22:63:f2:bd:ef:ce:
         cc:f0:08:67:f8:b2:c3:23:8d:03:36:10:6c:76:2f:61:fb:60:
         51:39:20:dd:5d:58:2c:4e:98:fc:ab:6c:88:08:5c:8e:39:33:
         c5:27:ab:76:fb:9c:c2:72:6d:0c:21:f9:f7:ef:70:7e:57:3e:
         68:1a:3e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:46:25 2025 by rpki-client