This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3161B0A075EC6E7B73FE808EE1E4F77D656C1A72.cer
File:                     3161B0A075EC6E7B73FE808EE1E4F77D656C1A72.cer (raw, json)
Hash identifier:          bmGxOi2nAKivHyOK4+FbLwMHHr2r74Zl65Emxn9pnkI=
Subject key identifier:   31:61:B0:A0:75:EC:6E:7B:73:FE:80:8E:E1:E4:F7:7D:65:6C:1A:72
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       34FD2F10555ABFA86E36ED1A469A3255D3E8AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/3161B0A075EC6E7B73FE808EE1E4F77D656C1A72.mft
caRepository:             rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Nov 2025 16:49:01 +0000
Certificate not after:    Fri 27 Nov 2026 16:54:01 +0000
Subordinate resources:    AS: 272707
                          IP: 2804:8768::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:fd:2f:10:55:5a:bf:a8:6e:36:ed:1a:46:9a:32:55:d3:e8:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 28 16:49:01 2025 GMT
            Not After : Nov 27 16:54:01 2026 GMT
        Subject: CN=3161B0A075EC6E7B73FE808EE1E4F77D656C1A72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:88:ce:f4:67:e6:5c:bd:a6:b0:c7:00:33:96:
                    c6:d8:54:56:6a:c3:25:c4:f4:05:0f:0f:6d:97:36:
                    b1:18:ca:07:02:c5:99:95:16:d3:a2:4d:c9:f7:24:
                    02:db:f2:e0:34:c7:c0:76:fd:20:cc:f7:51:70:c2:
                    a3:2d:aa:3d:64:7e:c4:cd:ea:b9:72:e2:2b:5d:c1:
                    45:46:61:d5:8a:97:b1:93:c1:33:4b:3b:a0:9f:d3:
                    4d:19:c0:67:54:7a:f3:26:92:e6:d0:c7:60:8c:5f:
                    ce:cf:7f:e0:83:c6:61:15:c0:12:2e:52:ec:ba:54:
                    a7:21:0f:3c:b8:16:2e:ed:39:91:01:3c:c4:3f:67:
                    dc:93:d6:7c:e7:15:30:8d:ff:90:15:cb:b2:98:a1:
                    0d:a7:d1:f9:8a:9d:5c:64:10:f2:86:9e:bd:73:59:
                    72:18:97:85:1c:bc:d7:a2:52:06:28:83:75:76:dc:
                    05:7f:29:8a:b8:f8:b4:a1:ad:df:ce:bb:8d:e3:3c:
                    e9:96:8d:34:c7:b5:ac:70:27:52:e6:3b:c8:38:d8:
                    a6:f7:a9:ff:d4:de:24:0c:4c:05:31:16:a6:eb:6f:
                    98:2b:50:10:2b:59:6f:4b:e8:85:3f:1e:72:28:41:
                    77:54:63:39:d2:68:b8:7c:5f:d6:22:3b:7f:97:97:
                    74:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                31:61:B0:A0:75:EC:6E:7B:73:FE:80:8E:E1:E4:F7:7D:65:6C:1A:72
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/3161B0A075EC6E7B73FE808EE1E4F77D656C1A72.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8768::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272707

    Signature Algorithm: sha256WithRSAEncryption
         3f:7e:b9:6a:6a:2f:79:3d:a6:e0:83:da:b3:2a:61:e7:23:f8:
         b3:c3:9b:46:a3:84:6c:c1:ac:91:17:30:96:3f:99:fb:76:be:
         ee:06:d5:da:ea:51:75:1f:ae:e7:4b:6a:43:de:26:60:b5:60:
         c7:82:b1:46:b3:97:aa:61:17:fe:eb:ff:34:e6:30:18:57:7c:
         52:9e:cd:c8:be:13:59:af:c3:1a:07:5b:52:c0:7b:a8:c0:35:
         bd:d1:73:1b:4b:c6:db:d7:24:d8:ea:3b:fd:11:fc:b5:66:aa:
         c2:84:08:ff:c3:2b:db:d5:3a:54:19:fb:98:32:a4:6f:2d:be:
         60:b6:76:87:52:c1:67:e0:b1:23:09:a1:be:98:81:3d:f1:e2:
         c4:5a:a8:00:36:41:de:7e:73:53:1d:6f:8b:f1:b8:fc:6b:fa:
         b4:aa:90:4e:ad:c4:83:13:54:3a:8a:8a:7f:bf:e4:4e:ac:02:
         d3:79:8e:fd:2a:f0:02:8c:ac:ab:f9:aa:8e:99:10:6c:28:0f:
         06:b1:73:56:3b:e3:c2:ae:48:70:67:b1:2a:a0:d9:1a:c9:22:
         a1:27:9c:6b:b7:99:58:20:fc:9a:e7:8c:e1:36:5a:03:b7:e5:
         23:18:f3:86:fb:f4:ae:9c:66:26:eb:6d:51:bd:ee:ae:3c:ee:
         19:7b:6c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----