This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/27E1FC1146B53B145E431E07B4ED589B8C84542B.cer
File:                     27E1FC1146B53B145E431E07B4ED589B8C84542B.cer (raw, json)
Hash identifier:          zir9VMvZHMTCxqj8vBk93wU6SQWo6bmL/rDcyLexHx8=
Subject key identifier:   27:E1:FC:11:46:B5:3B:14:5E:43:1E:07:B4:ED:58:9B:8C:84:54:2B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1510575E503315CE5E6E269A66E9BC064C3717A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/27E1FC1146B53B145E431E07B4ED589B8C84542B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 22 Nov 2025 00:58:36 +0000
Certificate not after:    Sat 21 Nov 2026 01:03:36 +0000
Subordinate resources:    AS: 28223
                          IP: 189.126.32.0 -- 189.126.38.255
                          IP: 2804:84ac::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:52:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:10:57:5e:50:33:15:ce:5e:6e:26:9a:66:e9:bc:06:4c:37:17:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 22 00:58:36 2025 GMT
            Not After : Nov 21 01:03:36 2026 GMT
        Subject: CN=27E1FC1146B53B145E431E07B4ED589B8C84542B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d6:e3:ba:c2:91:1d:33:19:8d:e5:1b:15:86:
                    a6:03:c6:6b:7c:e8:66:11:ce:3f:50:13:da:d7:f3:
                    63:76:d8:8a:05:fa:e8:84:4b:c0:c8:87:7c:9f:35:
                    69:e1:96:f7:00:ab:64:af:38:56:3f:74:6d:b1:fc:
                    b1:35:7e:cb:2c:37:99:0c:22:9c:b1:c4:af:9c:dc:
                    0d:5d:2d:c3:8c:3a:81:08:46:b5:90:15:02:e9:a1:
                    47:79:59:8e:97:af:d9:b0:cf:15:1d:6f:ee:8f:39:
                    57:58:87:ca:77:fc:d9:ee:4c:15:e3:3f:8c:8c:3c:
                    64:bb:81:46:4f:20:25:9e:1f:6c:b2:43:c9:60:02:
                    e2:f3:96:56:a9:24:03:a3:41:50:39:2b:02:dc:d9:
                    a8:db:74:e7:34:96:61:3f:df:43:38:3b:4a:96:18:
                    46:36:b6:74:23:10:24:03:9f:12:31:0d:c1:b9:03:
                    78:c3:58:ba:98:66:4d:3d:20:88:bf:f0:e8:ff:2d:
                    40:8f:62:a4:e1:89:3c:17:4b:fc:2a:19:00:69:38:
                    af:c9:1b:ad:19:d3:d9:88:fd:8e:c6:fa:74:91:b5:
                    95:42:c6:4c:45:de:ef:2b:32:a1:93:06:90:fe:95:
                    39:f0:5d:c2:d0:5e:75:cd:4f:6a:3b:8c:ef:58:a0:
                    81:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:E1:FC:11:46:B5:3B:14:5E:43:1E:07:B4:ED:58:9B:8C:84:54:2B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/27E1FC1146B53B145E431E07B4ED589B8C84542B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.32.0-189.126.38.255
                IPv6:
                  2804:84ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28223

    Signature Algorithm: sha256WithRSAEncryption
         19:4b:11:b8:11:ca:a7:f8:6e:26:2e:c2:37:1f:22:f4:b7:b2:
         b3:11:40:0d:aa:1c:b4:91:7c:57:aa:fe:0e:77:c0:38:6d:42:
         21:54:91:4d:aa:a7:26:e4:dc:d1:b1:d2:98:4e:90:b9:70:84:
         1e:3c:ca:de:ae:d7:c8:9b:23:26:5f:5d:30:a4:76:38:b5:98:
         fa:62:e6:25:35:61:05:98:8f:ad:5c:30:06:a1:34:ad:bf:f7:
         6e:af:a5:69:c7:12:33:ea:87:7c:49:c0:a7:5b:fe:0a:3d:30:
         28:25:e7:2d:37:3b:77:57:8f:e1:8a:d6:38:c3:26:fa:be:57:
         0c:15:58:dd:e5:2d:f0:dc:c9:c0:41:62:fb:42:be:9c:72:85:
         8f:51:68:32:23:ca:24:70:3d:fc:ec:ca:ad:c8:71:a5:a6:3d:
         76:f0:36:de:37:3e:c6:c8:80:6f:04:81:dd:3d:e4:13:3c:db:
         b6:46:c3:c8:7f:21:a8:70:a0:fe:af:0d:47:96:6e:58:b2:50:
         a8:d3:d4:a1:3b:35:01:dc:3e:99:25:8b:9b:9c:f8:47:ae:f6:
         cb:09:ae:76:87:a8:16:92:b4:1f:38:2b:47:64:74:12:1f:ec:
         d9:37:7a:fb:7a:cb:10:4b:d1:ac:2b:ac:ac:2e:51:a0:79:40:
         12:f3:de:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:52:49 2025 by rpki-client