This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/333AAB9C5800B382505D0F07C8D2EAE0547A8531.cer
File:                     333AAB9C5800B382505D0F07C8D2EAE0547A8531.cer (raw, json)
Hash identifier:          mMP1IQ36/avTgjyZHFc6PRRtpFf8/ZAoffV/1Sx4RUU=
Subject key identifier:   33:3A:AB:9C:58:00:B3:82:50:5D:0F:07:C8:D2:EA:E0:54:7A:85:31
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6C5B3BEDBC106F96245C9F81B30ECAC8F1D8A2D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/333AAB9C5800B382505D0F07C8D2EAE0547A8531.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Dec 2025 01:52:54 +0000
Certificate not after:    Thu 10 Dec 2026 01:57:54 +0000
Subordinate resources:    AS: 270372
                          IP: 190.89.108.0/22
                          IP: 2804:6b04::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 21:35:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:5b:3b:ed:bc:10:6f:96:24:5c:9f:81:b3:0e:ca:c8:f1:d8:a2:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 11 01:52:54 2025 GMT
            Not After : Dec 10 01:57:54 2026 GMT
        Subject: CN=333AAB9C5800B382505D0F07C8D2EAE0547A8531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2b:22:77:b9:04:44:7a:e2:6e:43:dd:ea:b0:
                    a6:49:d2:12:0f:39:ca:5a:fe:1c:2b:1f:cf:43:38:
                    ed:e8:69:15:24:47:03:b4:94:f1:39:98:c1:73:98:
                    3b:5f:68:ca:3f:a0:9a:58:9d:0b:a0:a4:f0:fd:24:
                    40:55:f6:f5:85:8c:35:9a:60:ed:b4:51:2b:21:85:
                    c9:94:7d:92:89:73:3f:6d:c0:eb:75:4c:b8:dd:06:
                    fe:60:db:6a:7d:87:53:2e:7e:8d:f1:93:4f:29:ee:
                    2e:29:56:b2:3b:61:ea:44:ce:2a:c9:b9:49:78:33:
                    f4:f9:9a:1d:ca:14:2e:11:3e:82:c7:4f:b2:21:8a:
                    5c:36:8c:a6:a7:cb:9d:14:a7:c7:ba:e6:a8:e8:22:
                    82:b3:5f:9f:3e:38:6a:f1:8e:67:af:44:41:20:16:
                    80:3c:2e:b2:64:76:0f:54:cd:c2:a3:45:85:59:75:
                    a3:9d:84:20:94:56:62:b0:eb:cb:10:b8:8e:d0:f9:
                    30:0d:27:88:6a:41:35:b5:aa:fe:70:4a:14:33:94:
                    16:52:7b:d2:87:08:2d:5d:a4:af:90:d1:4c:db:18:
                    d4:31:b0:52:3a:b2:db:2b:1b:34:15:70:80:59:7d:
                    bd:d3:e1:3e:7d:05:bc:0f:d5:83:e2:6a:b0:a5:48:
                    96:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:3A:AB:9C:58:00:B3:82:50:5D:0F:07:C8:D2:EA:E0:54:7A:85:31
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/333AAB9C5800B382505D0F07C8D2EAE0547A8531.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.108.0/22
                IPv6:
                  2804:6b04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270372

    Signature Algorithm: sha256WithRSAEncryption
         74:7b:34:09:09:85:fa:cf:91:17:35:2d:4c:70:bd:fa:1a:8a:
         27:ff:a5:f0:b3:7d:2d:05:8c:4c:3e:5f:c5:47:5e:a8:9a:bb:
         0e:3b:f8:e4:80:19:27:48:16:1c:53:ac:22:2b:36:06:29:6f:
         25:fd:50:ae:5b:7a:33:b4:76:11:76:66:4a:46:5f:0d:57:48:
         82:aa:2d:14:b1:af:91:4a:8c:25:37:3a:4c:9d:c2:3d:ea:a6:
         60:5c:b9:54:fa:09:31:80:6a:42:12:e8:15:9a:c5:7c:c9:e0:
         46:35:ce:5a:f9:4e:f6:a4:82:40:e4:c1:6e:72:ba:8e:cf:c8:
         02:c5:8d:19:1e:7a:b7:4c:2d:70:fa:12:1a:c8:ab:55:ef:15:
         cc:23:1f:f2:02:0f:24:da:e8:09:a4:68:2a:7d:9c:78:7e:a3:
         09:7d:52:57:9e:62:52:93:c6:99:b9:10:31:35:b3:1f:14:9d:
         bf:6d:d3:f1:80:25:65:07:8f:13:57:c5:f0:20:4b:50:6d:48:
         bd:1e:bb:6d:7e:94:fa:f3:35:e1:7f:44:3d:e3:ae:78:52:57:
         92:ac:98:50:48:34:15:12:9d:1d:fe:a9:f8:a9:3a:22:3f:dd:
         10:1b:b5:b4:9b:19:9e:58:0c:6c:1d:6f:0d:67:c7:ed:bf:6e:
         2d:71:95:87
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUbFs77bwQb5YkXJ+Bsw7KyPHYotEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEyMTEwMTUyNTRaFw0yNjEyMTAwMTU3NTRaMDMxMTAvBgNV
BAMTKDMzM0FBQjlDNTgwMEIzODI1MDVEMEYwN0M4RDJFQUUwNTQ3QTg1MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfKyJ3uQREeuJuQ93qsKZJ0hIP
Ocpa/hwrH89DOO3oaRUkRwO0lPE5mMFzmDtfaMo/oJpYnQugpPD9JEBV9vWFjDWa
YO20USshhcmUfZKJcz9twOt1TLjdBv5g22p9h1Mufo3xk08p7i4pVrI7YepEzirJ
uUl4M/T5mh3KFC4RPoLHT7Ihilw2jKany50Up8e65qjoIoKzX58+OGrxjmevREEg
FoA8LrJkdg9UzcKjRYVZdaOdhCCUVmKw68sQuI7Q+TANJ4hqQTW1qv5wShQzlBZS
e9KHCC1dpK+Q0UzbGNQxsFI6stsrGzQVcIBZfb3T4T59BbwP1YPiarClSJYDAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQzOqucWACzglBd
DwfI0urgVHqFMTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSFlV
SEVSSnNVQUdOTlp6YTRZdVlaMWVDcWl6R2E4ZGN3dEZ4UHBuekU1c1YvMDCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSFlV
SEVSSnNVQUdOTlp6YTRZdVlaMWVDcWl6R2E4ZGN3dEZ4UHBuekU1c1YvMC8zMzNB
QUI5QzU4MDBCMzgyNTA1RDBGMDdDOEQyRUFFMDU0N0E4NTMxLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAK+WWwwDQQCAAIwBwMFACgEawQwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBCAkMA0GCSqGSIb3DQEBCwUAA4IBAQB0ezQJCYX6z5EXNS1M
cL36Goon/6Xws30tBYxMPl/FR16omrsOO/jkgBknSBYcU6wiKzYGKW8l/VCuW3oz
tHYRdmZKRl8NV0iCqi0Usa+RSowlNzpMncI96qZgXLlU+gkxgGpCEugVmsV8yeBG
Nc5a+U72pIJA5MFucrqOz8gCxY0ZHnq3TC1w+hIayKtV7xXMIx/yAg8k2ugJpGgq
fZx4fqMJfVJXnmJSk8aZuRAxNbMfFJ2/bdPxgCVlB48TV8XwIEtQbUi9HrttfpT6
8zXhf0Q94654UleSrJhQSDQVEp0d/qn4qToiP90QG7W0mxmeWAxsHW8NZ8ftv24t
cZWH
-----END CERTIFICATE-----