This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.cer
File:                     1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.cer (raw, json)
Hash identifier:          G/iy8KjQ/k+b/422FgZeAEcoqZucLxVxv/ZDAHqTdUs=
Subject key identifier:   1C:E1:AC:D1:F8:52:9B:05:4D:A7:8D:1B:59:74:B8:D5:E8:46:FA:35
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5D6FB290AF513E720BED2E080A08A0899D2BA568
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Nov 2025 11:48:32 +0000
Certificate not after:    Tue 10 Nov 2026 11:53:32 +0000
Subordinate resources:    AS: 263142
                          IP: 177.93.80.0/21
                          IP: 2804:1760::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:6f:b2:90:af:51:3e:72:0b:ed:2e:08:0a:08:a0:89:9d:2b:a5:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 11 11:48:32 2025 GMT
            Not After : Nov 10 11:53:32 2026 GMT
        Subject: CN=1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:be:48:78:bf:d5:48:66:a9:f9:d5:36:84:92:
                    e0:72:9e:8f:2a:45:07:79:1c:24:6e:33:6f:9e:11:
                    55:b7:c5:c9:bb:ab:f2:8a:d7:f2:55:98:57:28:79:
                    f7:6a:14:23:dd:99:8f:9f:3d:b6:58:22:54:2d:41:
                    ac:6a:a7:59:91:e5:2c:73:63:fd:43:ea:c3:7d:09:
                    9d:8b:f4:40:28:a0:4c:76:99:46:fb:c5:fc:6b:eb:
                    a0:28:1b:6d:06:b6:4c:f6:60:40:a5:e6:23:fd:e6:
                    50:81:39:18:9b:60:ae:1e:dc:13:33:97:01:42:0f:
                    db:06:0f:a3:22:cb:ff:ff:c7:a5:66:5c:fc:37:70:
                    88:35:4b:8c:dc:f4:06:ea:02:13:41:2f:08:d7:36:
                    b1:7d:a0:9b:37:d4:e2:97:b2:47:35:85:68:89:19:
                    e4:8a:f3:07:89:31:16:00:e1:07:cc:ea:14:71:65:
                    1e:39:a8:91:b8:a4:b5:55:d5:e1:6e:77:f5:93:c6:
                    64:e6:e9:b5:20:63:d3:f3:b5:92:c5:5e:b0:b2:16:
                    aa:f8:18:33:62:07:16:ae:c7:67:2b:8b:6d:85:09:
                    c0:96:fa:10:85:b8:ab:27:3b:4a:80:6d:13:f5:08:
                    80:09:a5:24:b9:9d:8f:25:ca:1a:e0:31:20:79:27:
                    01:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:E1:AC:D1:F8:52:9B:05:4D:A7:8D:1B:59:74:B8:D5:E8:46:FA:35
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.80.0/21
                IPv6:
                  2804:1760::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263142

    Signature Algorithm: sha256WithRSAEncryption
         3f:b7:96:c9:1f:c5:87:79:90:ea:fb:78:b5:23:8d:f4:51:87:
         3b:93:9a:70:60:c0:f9:38:b6:b7:d8:ac:ee:06:fd:af:f0:ff:
         d2:02:eb:6f:37:b0:e1:ab:a5:ec:4d:4e:f4:ff:2e:3c:1e:46:
         6b:8c:01:87:59:74:03:c4:4e:35:90:c7:68:81:e7:d7:47:aa:
         8b:88:62:91:13:09:c9:0f:e4:3b:56:a7:84:5e:b8:0b:47:60:
         65:80:c4:28:32:a4:51:89:f4:de:cf:1d:62:07:12:34:34:5a:
         b3:60:fc:2d:64:06:f5:01:e0:6e:39:27:91:69:02:07:1d:bb:
         64:b8:cb:e6:ee:c7:77:3c:d2:44:2e:e4:bf:18:a5:81:26:4b:
         de:0a:c2:d8:99:3e:ac:ef:a9:9e:e3:ae:f5:4d:e1:4a:e8:a6:
         dc:17:7b:23:08:c9:0d:83:c0:57:40:22:cd:2f:68:87:a1:16:
         a5:a4:22:43:b0:69:f5:1f:9d:ba:aa:72:69:53:f8:ee:7c:38:
         da:9f:25:40:18:a6:20:8a:fb:01:65:17:ee:72:a5:a9:ca:a6:
         7c:df:e2:e5:fa:14:ef:cb:fc:0e:8e:12:ae:50:4d:4f:bf:ab:
         67:b1:a2:85:f0:d6:4f:07:5e:40:93:db:4f:ab:25:96:1e:32:
         e1:d3:81:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----