This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/276329596F0E041C493C725731DF86BF0CA13E5E.cer
File:                     276329596F0E041C493C725731DF86BF0CA13E5E.cer (raw, json)
Hash identifier:          9d9ajIIltv7KU7MZ5DSySnzyPJVUcwZUek7iE39DXow=
Subject key identifier:   27:63:29:59:6F:0E:04:1C:49:3C:72:57:31:DF:86:BF:0C:A1:3E:5E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0211658EA851F9664D503A54730066B2649AF9F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/276329596F0E041C493C725731DF86BF0CA13E5E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Nov 2025 18:17:33 +0000
Certificate not after:    Mon 16 Nov 2026 18:22:33 +0000
Subordinate resources:    AS: 271418
                          IP: 181.224.40.0/22
                          IP: 2804:7b38::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:11:65:8e:a8:51:f9:66:4d:50:3a:54:73:00:66:b2:64:9a:f9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 17 18:17:33 2025 GMT
            Not After : Nov 16 18:22:33 2026 GMT
        Subject: CN=276329596F0E041C493C725731DF86BF0CA13E5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e1:da:7a:67:29:80:36:5a:0f:d6:3c:f0:e8:
                    29:e6:e7:01:ac:08:e4:e6:98:96:86:d0:50:49:3c:
                    7f:1c:dd:5c:bb:28:b7:ec:f2:f4:26:4d:53:33:dd:
                    ca:43:c7:56:46:9a:28:a9:e9:07:7e:be:57:ca:6a:
                    c1:6a:7e:46:c2:a1:39:30:f6:8b:9f:cc:97:3d:1f:
                    16:f5:67:68:20:0d:09:2f:5d:0a:e4:3f:06:d1:d5:
                    e9:ce:44:51:f6:40:af:17:cb:61:f4:f0:ca:cb:c2:
                    9a:76:79:06:96:0c:9a:76:c9:32:18:3a:e8:94:6f:
                    66:2c:28:dc:54:14:c6:f8:a0:cd:54:73:06:f2:54:
                    3d:9a:e6:b9:83:42:65:00:ce:1f:14:a2:5b:86:64:
                    14:f0:e1:2a:bd:62:6c:7f:d2:a3:11:88:dd:e5:86:
                    8e:a9:00:c5:97:e9:6d:fb:61:ed:00:38:58:47:11:
                    65:d0:57:2e:ca:8d:9d:73:c6:b8:5f:d3:ce:d2:0e:
                    1d:7e:63:95:33:bb:aa:09:29:8f:f5:0c:01:4c:1a:
                    35:8a:ae:24:be:de:4e:6f:c2:20:cf:cc:dd:e2:b4:
                    6f:63:25:ae:61:61:db:a0:b9:a8:82:03:7a:d4:01:
                    85:6f:fc:28:e0:aa:3a:38:e6:46:28:f5:fa:b4:e8:
                    91:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:63:29:59:6F:0E:04:1C:49:3C:72:57:31:DF:86:BF:0C:A1:3E:5E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/276329596F0E041C493C725731DF86BF0CA13E5E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.40.0/22
                IPv6:
                  2804:7b38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271418

    Signature Algorithm: sha256WithRSAEncryption
         40:10:2c:8c:25:d2:60:36:98:ab:1e:b1:73:d1:b5:d4:bb:cb:
         23:94:7f:67:c8:97:df:a3:81:e8:73:10:ae:db:ea:d9:b4:37:
         06:66:8f:0d:0c:5d:70:b3:d4:70:8f:25:76:73:95:82:f6:64:
         64:7e:fe:a4:ac:41:c2:e9:f1:c2:3c:b7:ec:c5:44:fe:92:c2:
         f6:35:22:6d:0d:a3:54:61:b9:36:d8:74:d4:ea:91:f0:ca:49:
         9a:ff:ab:7b:f7:50:79:20:1f:bf:12:b4:62:5e:96:aa:ba:a4:
         95:74:04:06:5f:b8:58:0c:02:ff:dc:7a:1b:28:ea:11:62:a6:
         c9:64:f2:54:c4:71:31:ed:fa:69:b2:9d:4d:f6:b3:3d:76:b3:
         c5:9d:d5:a4:a4:ea:7b:14:72:21:81:53:60:e7:f2:73:80:eb:
         7f:bc:1b:7e:58:44:39:51:52:c0:1e:7f:3e:44:ca:1a:dd:c6:
         34:c1:bd:e8:37:96:14:52:0d:ac:59:bd:d6:20:4b:f3:bc:f8:
         04:a1:40:65:45:64:26:20:85:1c:db:91:22:38:40:3c:1b:f1:
         6e:5d:c6:fd:4b:fd:e8:62:25:9d:7c:d4:5b:30:fe:f9:3e:fe:
         2c:a6:31:3b:74:3e:83:77:6e:f3:74:bb:ed:8f:e2:1a:d7:f2:
         71:1a:fa:e5
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUAhFljqhR+WZNUDpUcwBmsmSa+fUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTExMTcxODE3MzNaFw0yNjExMTYxODIyMzNaMDMxMTAvBgNV
BAMTKDI3NjMyOTU5NkYwRTA0MUM0OTNDNzI1NzMxREY4NkJGMENBMTNFNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb4dp6ZymANloP1jzw6Cnm5wGs
COTmmJaG0FBJPH8c3Vy7KLfs8vQmTVMz3cpDx1ZGmiip6Qd+vlfKasFqfkbCoTkw
9oufzJc9Hxb1Z2ggDQkvXQrkPwbR1enORFH2QK8Xy2H08MrLwpp2eQaWDJp2yTIY
OuiUb2YsKNxUFMb4oM1UcwbyVD2a5rmDQmUAzh8UoluGZBTw4Sq9Ymx/0qMRiN3l
ho6pAMWX6W37Ye0AOFhHEWXQVy7KjZ1zxrhf087SDh1+Y5Uzu6oJKY/1DAFMGjWK
riS+3k5vwiDPzN3itG9jJa5hYduguaiCA3rUAYVv/Cjgqjo45kYo9fq06JGPAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQnYylZbw4EHEk8
clcx34a/DKE+XjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRGc0
QkI5Q2paZ1lEeVJ6WkZWc1hqWXhjOENpbnpVQTZRamd0UHk0TDdmckEvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Rn
NEJCOUNqWmdZRHlSelpGVnNYall4YzhDaW56VUE2UWpndFB5NEw3ZnJBLzAvMjc2
MzI5NTk2RjBFMDQxQzQ5M0M3MjU3MzFERjg2QkYwQ0ExM0U1RS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCteAoMA0EAgACMAcDBQAoBHs4MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQkOjANBgkqhkiG9w0BAQsFAAOCAQEAQBAsjCXSYDaYqx6x
c9G11LvLI5R/Z8iX36OB6HMQrtvq2bQ3BmaPDQxdcLPUcI8ldnOVgvZkZH7+pKxB
wunxwjy37MVE/pLC9jUibQ2jVGG5Nth01OqR8MpJmv+re/dQeSAfvxK0Yl6Wqrqk
lXQEBl+4WAwC/9x6GyjqEWKmyWTyVMRxMe36abKdTfazPXazxZ3VpKTqexRyIYFT
YOfyc4Drf7wbflhEOVFSwB5/PkTKGt3GNMG96DeWFFINrFm91iBL87z4BKFAZUVk
JiCFHNuRIjhAPBvxbl3G/Uv96GIlnXzUWzD++T7+LKYxO3Q+g3du83S77Y/iGtfy
cRr65Q==
-----END CERTIFICATE-----