This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/29ED4D2D72C465D5DA11E22576AED037109FCBD0.cer
File:                     29ED4D2D72C465D5DA11E22576AED037109FCBD0.cer (raw, json)
Hash identifier:          Aa+6Chi8AXUQczmeZsJ/xDlROmTjxAsCipDKYLiUUZc=
Subject key identifier:   29:ED:4D:2D:72:C4:65:D5:DA:11:E2:25:76:AE:D0:37:10:9F:CB:D0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6F6B25A80FF3266C01778F5805667135813257D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Nov 2025 12:50:27 +0000
Certificate not after:    Mon 16 Nov 2026 12:55:27 +0000
Subordinate resources:    AS: 52600
                          IP: 177.137.112.0/21
                          IP: 2804:d1c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:6b:25:a8:0f:f3:26:6c:01:77:8f:58:05:66:71:35:81:32:57:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 17 12:50:27 2025 GMT
            Not After : Nov 16 12:55:27 2026 GMT
        Subject: CN=29ED4D2D72C465D5DA11E22576AED037109FCBD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:30:ca:74:b3:02:5a:f2:c8:53:5f:bf:75:96:
                    6c:84:98:45:fe:3d:be:37:8d:31:ed:33:48:9d:42:
                    9a:fb:6d:2e:90:07:14:9c:25:bb:aa:2c:b5:3d:81:
                    6b:29:0a:a4:f3:7a:71:a8:66:a6:4a:b1:99:62:eb:
                    f6:37:13:ce:3d:aa:98:b6:4c:d2:57:36:cd:bb:98:
                    63:f7:64:3c:b9:02:37:cc:d3:5b:ee:6b:68:44:60:
                    48:e1:04:a6:84:dc:86:7b:e4:53:0d:a7:be:75:12:
                    ac:cb:b5:47:79:10:a1:1c:d0:49:76:cb:a9:b0:75:
                    57:58:28:d8:e9:75:ac:e2:a3:29:19:2d:e3:71:50:
                    b7:5c:53:df:af:99:bc:7e:12:ab:5a:04:44:df:7d:
                    51:4b:f5:b9:29:49:5c:9f:90:e3:85:3a:d5:70:d5:
                    52:ef:72:7e:6a:f8:44:6d:93:11:52:99:d1:5e:01:
                    5e:77:66:97:2a:5d:0c:cc:f0:3d:be:a5:2e:45:6d:
                    60:cd:2e:1a:53:16:03:5a:9e:45:6c:58:91:1d:12:
                    97:e9:02:b5:fb:48:9f:fb:27:7c:0c:72:68:78:c8:
                    f0:88:a0:3b:c0:8b:c2:4c:12:82:4a:0a:62:9a:72:
                    5c:d7:7c:11:95:46:4d:a5:cd:19:53:8a:9e:5c:13:
                    9a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                29:ED:4D:2D:72:C4:65:D5:DA:11:E2:25:76:AE:D0:37:10:9F:CB:D0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.112.0/21
                IPv6:
                  2804:d1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52600

    Signature Algorithm: sha256WithRSAEncryption
         69:18:04:a9:4e:63:8f:f4:a7:12:74:eb:57:d4:3a:c7:2f:74:
         1c:1c:0a:50:7a:ac:9a:b5:52:0c:ae:6e:72:6d:f5:6b:7c:58:
         75:c1:60:21:93:be:74:05:42:0e:3f:b1:9d:b2:3e:9b:7b:cf:
         d6:9f:38:29:50:67:47:65:89:b3:cd:75:9e:d7:52:48:ca:ca:
         b5:00:73:d9:fc:d1:9d:be:cd:fe:f0:ca:e2:09:37:f6:93:5e:
         4f:23:27:7d:a9:cc:bc:ff:fb:85:dc:4d:f7:30:8e:98:87:11:
         4d:62:ad:cb:a4:5f:f9:31:a5:cc:4e:1c:d7:83:26:8d:c6:c0:
         9d:59:d3:4f:49:b3:7a:af:b6:e2:a4:55:a6:ab:ae:94:bb:86:
         3b:8a:6c:17:65:fb:9e:23:fa:b0:5d:a9:7b:3a:17:31:da:ea:
         51:e5:9d:66:a9:36:3a:5b:e0:ee:13:d0:05:67:49:f2:a1:75:
         3f:8f:6f:93:f6:61:60:48:3d:c0:4c:9a:96:d9:7c:fc:9c:6e:
         6a:e5:b3:c4:e6:23:c1:d4:e7:12:3a:e4:7e:69:fa:5d:53:b2:
         1e:bb:70:71:2a:e6:98:94:3e:0d:94:78:a1:4b:eb:10:52:a7:
         62:9a:ef:2d:e8:14:b2:15:d2:bd:36:b8:24:15:8b:f9:09:61:
         d8:93:48:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----