This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.cer
File:                     120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.cer (raw, json)
Hash identifier:          LbBMfqCywhIKXvkIiNCijeEjgOPI5mwRrjssW4tOAHM=
Subject key identifier:   12:0F:03:9C:87:2F:A2:AE:7F:DC:D1:D4:49:9C:40:11:CE:1A:5B:9E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       593F35A93955E69270CA110F1639FF7DD25EBEE1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Nov 2025 14:43:16 +0000
Certificate not after:    Fri 13 Nov 2026 14:48:16 +0000
Subordinate resources:    AS: 272753
                          IP: 187.109.112.0/22
                          IP: 2804:8824::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:52:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:3f:35:a9:39:55:e6:92:70:ca:11:0f:16:39:ff:7d:d2:5e:be:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 14 14:43:16 2025 GMT
            Not After : Nov 13 14:48:16 2026 GMT
        Subject: CN=120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fc:50:5c:98:c8:ce:eb:63:2f:e2:ef:08:13:
                    de:f4:84:e9:01:59:07:5a:17:85:f5:6e:74:60:8e:
                    1c:cc:5f:a3:27:cc:46:d6:76:ce:cf:c7:f2:5a:ea:
                    4f:15:e4:9e:76:db:42:3c:a7:ec:a9:02:4c:93:ab:
                    e0:f5:66:55:fd:bc:60:bf:6b:da:e0:5d:f2:0c:89:
                    6e:11:e5:70:2e:ef:94:75:36:29:5e:1c:b0:6f:ae:
                    92:d1:83:76:69:10:1f:67:dc:32:99:ed:5d:3f:f0:
                    72:6d:2f:9c:76:61:8d:43:bc:2b:10:28:60:e2:db:
                    1e:d2:bd:49:1b:87:52:d6:24:0b:cd:f1:df:d8:c1:
                    83:be:f4:b2:36:9f:a7:4c:fa:ae:6e:f4:04:4e:77:
                    b7:3f:88:7d:08:4b:cb:0e:47:c4:96:8d:02:2c:a3:
                    dd:25:c9:a1:6d:5f:b3:c3:fe:bb:06:ef:cf:3d:55:
                    c2:c6:47:05:75:b5:4a:27:ed:f2:d2:59:40:68:e6:
                    33:17:79:a4:e1:f2:68:ea:24:fc:92:98:3b:d9:96:
                    88:ea:ec:82:a2:34:68:ae:f3:cb:04:69:10:d9:b4:
                    b8:44:94:4a:b7:73:4e:b7:02:75:e1:55:97:c2:82:
                    6d:e2:30:96:0f:42:7a:93:7c:71:cb:29:78:7a:2d:
                    6e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:0F:03:9C:87:2F:A2:AE:7F:DC:D1:D4:49:9C:40:11:CE:1A:5B:9E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.112.0/22
                IPv6:
                  2804:8824::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272753

    Signature Algorithm: sha256WithRSAEncryption
         d4:5c:0f:15:a0:6d:24:b0:e6:5a:fe:e5:d9:26:0d:79:f3:7d:
         63:68:46:80:f7:b6:d6:20:79:e8:57:56:f2:bb:5a:24:5d:ee:
         f4:79:55:f3:b3:35:78:db:11:24:de:2a:5b:82:ee:17:13:84:
         81:79:67:62:e7:2d:d0:4a:a5:a7:10:0c:5f:a4:67:23:e1:b4:
         9d:e4:4c:99:49:66:66:65:19:f3:c8:db:14:c0:e2:64:21:25:
         a0:99:bf:5d:0e:ce:b4:bd:34:fe:bf:a2:a1:fb:79:1a:44:cc:
         76:5c:a5:3b:de:de:18:4e:07:d8:00:e1:13:05:a8:90:f5:7c:
         db:9d:6b:cf:98:19:27:f1:79:03:41:e4:c0:3a:6c:5b:72:39:
         66:8b:d4:81:b4:47:c1:36:3b:a3:af:fd:fb:15:39:d1:42:6d:
         1f:c8:e5:a0:a3:70:da:f9:6a:61:59:8e:dd:e9:ba:c6:b6:0d:
         e6:ea:ac:b2:da:0c:8c:f1:ab:4a:73:70:f3:8a:ef:b8:d1:8e:
         1b:23:3e:b7:fd:8c:f6:02:cc:35:41:54:dc:a4:1e:70:b8:54:
         ab:6d:63:47:65:3a:f6:e7:48:55:18:ec:de:a6:51:d4:85:46:
         d8:e4:49:4d:dc:b1:cd:76:6d:86:51:7a:9a:f7:d4:e8:06:b6:
         e6:a9:b9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----