This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F465B4D67B798728D086175292AF9A5CE3F28B9.cer
File:                     2F465B4D67B798728D086175292AF9A5CE3F28B9.cer (raw, json)
Hash identifier:          5BA+yoGqZYDWwsNixEIrLFVvGxNsiWG0yu3SnBpWecU=
Subject key identifier:   2F:46:5B:4D:67:B7:98:72:8D:08:61:75:29:2A:F9:A5:CE:3F:28:B9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4D7F54A4626F7C97FDF2DBA26EBB990FF05DB688
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/2F465B4D67B798728D086175292AF9A5CE3F28B9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Nov 2025 14:39:50 +0000
Certificate not after:    Tue 10 Nov 2026 14:44:50 +0000
Subordinate resources:    AS: 61761
                          IP: 170.82.88.0/22
                          IP: 201.158.20.0/22
                          IP: 2804:18e4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7f:54:a4:62:6f:7c:97:fd:f2:db:a2:6e:bb:99:0f:f0:5d:b6:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 11 14:39:50 2025 GMT
            Not After : Nov 10 14:44:50 2026 GMT
        Subject: CN=2F465B4D67B798728D086175292AF9A5CE3F28B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7c:68:67:1b:c9:d9:2f:27:6f:20:6b:8b:15:
                    15:a4:03:d9:81:0c:50:5b:7f:fb:3f:96:d0:52:d7:
                    b5:af:42:56:40:63:62:38:72:f2:ef:fc:71:ce:4a:
                    82:bf:3a:4c:8e:fa:8a:3e:87:bb:92:9e:12:b7:1b:
                    1a:2d:02:b5:78:84:c2:94:1b:6b:01:8e:4d:f3:4b:
                    68:63:7d:a3:e8:b1:4d:aa:81:74:ff:bb:33:27:b8:
                    56:4f:a1:1e:c8:da:00:2f:5b:10:39:2b:14:1e:be:
                    b4:03:9a:0b:70:b7:db:8a:ea:a7:1a:23:8c:56:78:
                    1b:c2:76:fd:0b:4a:e9:e7:c0:07:8b:30:ed:d0:3d:
                    7b:70:2c:01:ef:22:7d:4b:61:c3:63:d2:9b:93:08:
                    ba:67:39:f9:ff:80:ce:01:a1:2a:84:df:8a:f1:22:
                    b9:9b:5a:89:25:67:d6:53:ab:5b:3b:41:a8:87:1a:
                    b2:c8:bb:ea:a8:99:2d:33:3c:e6:ad:0e:7d:d1:88:
                    87:29:17:f1:9e:84:fd:a2:f2:bc:ba:3a:65:99:f6:
                    ce:e9:6a:01:f9:82:03:8c:7c:86:cf:53:e3:01:4d:
                    07:f9:4e:21:ad:35:f1:97:22:5c:ea:19:06:c1:d3:
                    e7:4f:dd:59:ab:d5:48:12:27:e5:98:69:58:77:a6:
                    cb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:46:5B:4D:67:B7:98:72:8D:08:61:75:29:2A:F9:A5:CE:3F:28:B9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/2F465B4D67B798728D086175292AF9A5CE3F28B9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.88.0/22
                  201.158.20.0/22
                IPv6:
                  2804:18e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61761

    Signature Algorithm: sha256WithRSAEncryption
         7a:df:3a:0f:64:69:82:3f:37:9e:48:e4:a7:31:04:f2:d3:6d:
         2c:1e:1f:a3:6d:12:b1:27:84:c1:cc:91:d2:28:40:c5:42:a2:
         a5:c7:ff:df:9d:b8:9d:8f:a1:7c:f4:94:b5:2e:0e:af:c1:60:
         84:a4:7c:83:cd:b2:bf:7f:2e:6e:18:c8:85:93:f3:d7:38:73:
         b3:22:fe:4a:59:92:9b:cd:d0:ac:df:51:40:a3:92:63:7e:cb:
         29:b2:61:9d:a1:9d:8b:cc:8a:d8:65:3a:e6:15:57:12:13:cc:
         0a:7d:8e:2d:b6:19:6d:60:18:78:8a:ed:93:ef:43:be:62:60:
         6b:78:44:26:0c:4e:53:00:3a:a7:f9:ea:67:f0:ac:c2:9f:18:
         2d:63:18:a5:62:74:55:a4:d5:b8:68:0a:1d:b7:f3:1d:e0:19:
         14:f8:fd:4c:2c:35:6b:18:fe:07:95:dd:d7:87:0e:87:bc:74:
         17:49:9b:a0:9d:80:86:b1:e1:b4:b0:48:a1:68:0a:90:99:f4:
         3e:09:90:55:62:0e:1b:23:2e:62:ed:0c:59:05:63:83:0b:5c:
         17:c6:f2:d0:48:32:76:25:5e:99:6e:b9:1c:f8:38:66:15:00:
         12:dd:1a:73:b7:0e:04:27:1e:c6:df:66:8d:36:a5:c5:77:37:
         df:f5:31:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----