This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer
File:                     203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer (raw, json)
Hash identifier:          3tJlSRqiqcPcQ8FqgprqxMV48XxnsTavuxBWhjrKYBo=
Subject key identifier:   20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       31E3FC02626FE91EC2A366B5CA0C6831BDF3CA3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Dec 2025 18:21:06 +0000
Certificate not after:    Fri 04 Dec 2026 18:26:06 +0000
Subordinate resources:    AS: 262299
                          IP: 177.54.240.0/20
                          IP: 200.108.160.0/22
                          IP: 2804:a8c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:52:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e3:fc:02:62:6f:e9:1e:c2:a3:66:b5:ca:0c:68:31:bd:f3:ca:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  5 18:21:06 2025 GMT
            Not After : Dec  4 18:26:06 2026 GMT
        Subject: CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4d:2c:cd:c3:86:e3:ad:17:e5:ea:52:78:51:
                    5a:2d:f6:58:63:91:49:3b:90:54:7d:33:a4:3f:ed:
                    e8:72:31:75:79:60:4e:0f:38:cc:06:6f:53:79:f6:
                    bb:c6:76:62:02:58:2c:c2:5d:99:fc:96:d8:9e:1f:
                    1e:25:55:4c:67:3f:11:54:e4:b8:c6:da:fb:62:8d:
                    64:1f:6a:55:b6:bd:d9:c3:b0:13:3b:30:64:da:e9:
                    e8:53:70:e0:ca:e8:6c:99:9d:4e:83:83:f0:ad:aa:
                    00:39:dc:91:fe:23:d9:0e:e0:68:8c:6c:e0:c8:96:
                    38:32:59:d2:b6:45:15:4c:a6:79:c2:6c:7d:ae:a7:
                    a5:75:c8:2f:99:69:69:92:9f:86:e8:f5:d4:05:8b:
                    64:ca:04:cb:a8:f1:d7:a5:a0:08:12:62:0f:bf:2a:
                    d0:6d:0f:36:f5:c9:80:9f:ed:69:3a:59:3a:33:68:
                    fe:01:9d:3b:6b:9d:6d:d7:03:e1:d4:33:3f:2a:b2:
                    e1:49:f3:e8:60:0f:fa:a6:bf:5f:ec:0f:16:9e:80:
                    45:d1:6c:ab:23:a3:d0:b5:93:20:84:23:d7:a1:75:
                    03:65:9b:1d:bd:60:a2:b9:92:b4:ce:12:89:ab:63:
                    7e:60:52:e9:f4:ce:41:17:18:a6:1b:43:ab:63:15:
                    e8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.240.0/20
                  200.108.160.0/22
                IPv6:
                  2804:a8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262299

    Signature Algorithm: sha256WithRSAEncryption
         01:0c:98:6e:5c:11:3a:c4:75:9d:a3:2c:2b:0b:8e:fd:66:e9:
         10:7b:34:ed:7b:d5:75:e3:b8:89:c5:05:82:33:9f:eb:48:3c:
         fe:29:aa:9f:65:98:72:d4:fa:22:29:8b:a4:a4:50:88:ab:a4:
         21:75:ff:b8:ce:04:d8:83:3d:fb:d4:2c:50:e3:81:bf:cd:09:
         95:19:ab:d7:e1:5f:b6:2f:f5:b8:75:ce:a6:b5:93:d2:b3:c3:
         10:27:f1:67:ce:9a:e8:76:17:cc:48:78:7b:41:2b:30:6e:d1:
         39:43:85:26:42:aa:5b:01:08:87:a7:23:36:44:7b:ac:35:1c:
         e3:bb:c1:f7:34:51:34:cc:d7:38:5a:34:17:f1:64:db:45:13:
         dd:d2:ba:0b:e9:8f:f6:13:07:aa:65:9a:07:bb:18:f4:2b:67:
         8e:57:fb:cb:cc:45:ab:9f:a5:ba:34:80:7b:27:3b:e0:34:5c:
         bd:ed:fd:77:2f:5f:35:93:46:e5:8d:15:1c:ae:0b:1e:6f:49:
         8e:e6:6e:9d:8c:c6:ac:51:fd:99:2c:71:c2:9f:db:d6:06:b8:
         ef:46:e8:d8:2a:63:07:76:05:86:65:51:4a:11:39:5f:d1:95:
         b6:14:1d:e7:de:7a:c0:08:c7:c1:29:09:d9:82:72:ab:32:24:
         fb:eb:e4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:36:46 2025 by rpki-client