This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1BD6D3D1184A97F513FD0A1CE0187272414B0D00.cer
File:                     1BD6D3D1184A97F513FD0A1CE0187272414B0D00.cer (raw, json)
Hash identifier:          un7Z2jMDwTCDFmhKgObBERhLr/7hTCHccS0otBq1fIg=
Subject key identifier:   1B:D6:D3:D1:18:4A:97:F5:13:FD:0A:1C:E0:18:72:72:41:4B:0D:00
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2CFFB6B81859FB58A172E536DA2A6F99DBDE66DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/1BD6D3D1184A97F513FD0A1CE0187272414B0D00.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Dec 2025 12:48:54 +0000
Certificate not after:    Mon 30 Nov 2026 12:53:54 +0000
Subordinate resources:    AS: 61790
                          IP: 200.24.80.0/21
                          IP: 2804:195c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ff:b6:b8:18:59:fb:58:a1:72:e5:36:da:2a:6f:99:db:de:66:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  1 12:48:54 2025 GMT
            Not After : Nov 30 12:53:54 2026 GMT
        Subject: CN=1BD6D3D1184A97F513FD0A1CE0187272414B0D00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:39:26:e1:ce:f0:c9:5d:f6:83:83:68:7e:86:
                    b2:e7:68:5c:a4:ad:f6:a9:f4:7b:fb:f1:75:9b:03:
                    c9:a3:9b:1a:c7:f7:66:11:f3:94:87:6b:67:21:74:
                    02:0d:a2:95:2d:d5:5f:13:f7:4c:f4:3c:45:77:aa:
                    78:dd:f4:03:81:76:58:da:a9:b8:31:31:e5:0c:c1:
                    ee:72:28:0c:6e:c6:df:c1:ce:27:64:c8:d5:40:30:
                    1e:84:b1:9c:01:e9:30:52:69:66:ed:36:8d:46:3b:
                    b7:0a:b2:96:6d:ef:6a:c7:88:5a:68:77:ae:e3:1b:
                    0d:88:6a:dc:36:fb:d2:da:19:ca:ca:d9:b7:56:d7:
                    9a:83:a1:17:d8:01:1b:f5:b3:cf:9a:85:e5:37:5b:
                    bc:5d:03:80:32:4b:39:5e:a9:5b:35:09:e0:c0:c8:
                    02:2c:bd:0a:ab:5b:3f:e7:4b:eb:3a:a8:a2:e5:1c:
                    d3:63:40:4c:0e:77:44:33:77:37:c8:ce:45:e3:00:
                    30:7a:58:08:47:27:2a:92:57:67:7f:8e:77:fb:d1:
                    a6:b1:40:51:bd:d7:7b:fa:0f:c0:97:38:59:30:23:
                    ea:ee:35:f8:79:5e:ff:49:e2:2f:9b:47:03:c3:99:
                    a5:3e:08:74:d0:18:8f:c5:bd:fb:1e:03:20:6c:83:
                    83:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:D6:D3:D1:18:4A:97:F5:13:FD:0A:1C:E0:18:72:72:41:4B:0D:00
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/1BD6D3D1184A97F513FD0A1CE0187272414B0D00.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.80.0/21
                IPv6:
                  2804:195c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61790

    Signature Algorithm: sha256WithRSAEncryption
         0f:a4:a0:ee:fd:ac:b8:ba:36:ad:0e:a4:70:aa:ee:52:4f:d0:
         0f:f4:f1:aa:5e:c7:f1:9d:60:23:6a:a7:99:aa:b1:ec:9f:a7:
         86:59:66:4c:6b:f5:97:20:19:a5:fb:2a:b4:15:71:cb:16:d7:
         d8:52:b5:12:e4:f4:54:ad:83:78:dc:44:be:c9:61:e1:bf:26:
         0d:fe:1f:0c:68:85:86:00:08:09:74:b9:03:ed:6f:29:75:f9:
         be:24:4a:2e:01:52:91:72:0f:c8:46:f4:9a:f0:67:c6:d1:82:
         56:76:f4:6d:30:f1:98:22:a0:2a:f5:f3:96:f7:3a:b6:19:4d:
         ac:c4:13:12:fa:7a:a4:9d:7c:b7:a6:03:b7:72:76:ed:ff:47:
         5b:0a:06:8b:6e:69:ba:18:67:12:f0:e2:da:ef:4b:0c:04:fd:
         43:3e:0d:08:1e:a9:1c:b6:3c:0f:77:1d:27:a9:f4:0c:32:06:
         5e:1a:9b:a5:2a:0d:46:b1:32:db:62:e8:ba:29:3f:aa:74:5b:
         ee:dd:fe:52:ed:89:cf:e3:d0:77:1b:75:23:86:12:c3:72:c7:
         d8:19:86:ed:7c:af:cf:0b:91:5f:54:bf:6a:0b:51:d0:e3:25:
         4f:7d:f2:09:99:3e:ff:de:0a:87:f7:10:bb:5a:d6:7f:fb:60:
         7c:e3:52:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:37:01 2025 by rpki-client