This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3393707B27158FD41132C980C5592453DB68920C.cer
File:                     3393707B27158FD41132C980C5592453DB68920C.cer (raw, json)
Hash identifier:          30lJVhWwOYx5bHLO5Parb2Ocm0/uJ+pa59CuyOJhLBA=
Subject key identifier:   33:93:70:7B:27:15:8F:D4:11:32:C9:80:C5:59:24:53:DB:68:92:0C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       025F9642E408B7760DCD492DC316057DE1367BDA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DBPvxvAjEsGXi34mZKV162G6soZqT2deMFqGxqkXJyCq/1/3393707B27158FD41132C980C5592453DB68920C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DBPvxvAjEsGXi34mZKV162G6soZqT2deMFqGxqkXJyCq/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 19 Nov 2025 22:43:48 +0000
Certificate not after:    Wed 18 Nov 2026 22:48:48 +0000
Subordinate resources:    AS: 266577
                          IP: 160.238.236.0/22
                          IP: 2804:3e28::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5f:96:42:e4:08:b7:76:0d:cd:49:2d:c3:16:05:7d:e1:36:7b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 19 22:43:48 2025 GMT
            Not After : Nov 18 22:48:48 2026 GMT
        Subject: CN=3393707B27158FD41132C980C5592453DB68920C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3c:96:5f:ed:39:2f:28:59:50:75:64:a5:2f:
                    66:b9:88:f0:11:26:6a:61:47:57:b6:c3:af:2a:ac:
                    ab:d7:7b:34:89:e3:80:6c:50:41:c5:2f:33:8d:54:
                    c1:1c:cb:f5:09:f4:3e:17:c5:14:4b:87:19:28:c0:
                    8e:a9:d1:ae:1c:d4:e4:f3:65:75:9e:29:5e:38:e0:
                    64:aa:fc:00:a7:fd:bd:f6:83:8f:94:48:9e:65:ba:
                    62:8a:7e:58:c6:0b:56:1a:ab:19:ec:d8:4e:53:fc:
                    52:d7:28:b7:4e:19:0a:76:ee:72:a6:46:76:f4:c6:
                    4a:45:c9:49:96:97:6b:71:bb:a6:19:15:41:3c:89:
                    12:9f:00:28:e3:19:21:a5:9d:b0:2a:59:e7:91:79:
                    5e:d4:d8:c4:a5:e3:ba:c9:d7:b2:22:bd:bd:27:5a:
                    f2:92:09:22:ee:9d:b7:3f:a0:91:95:ad:24:33:1f:
                    e7:1d:dc:10:c4:cb:68:5f:dd:94:53:e6:24:6f:45:
                    c1:6d:e0:ae:58:74:76:56:e3:f3:79:f6:a6:dc:a0:
                    73:17:4f:c5:b7:10:aa:83:38:f2:07:c9:56:6e:c7:
                    c9:eb:c0:60:f2:49:56:9d:c0:37:84:9f:9d:43:a4:
                    cd:de:a1:4f:06:a9:2d:a6:e8:09:a0:ce:7d:0b:33:
                    6a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:93:70:7B:27:15:8F:D4:11:32:C9:80:C5:59:24:53:DB:68:92:0C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DBPvxvAjEsGXi34mZKV162G6soZqT2deMFqGxqkXJyCq/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DBPvxvAjEsGXi34mZKV162G6soZqT2deMFqGxqkXJyCq/1/3393707B27158FD41132C980C5592453DB68920C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.236.0/22
                IPv6:
                  2804:3e28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266577

    Signature Algorithm: sha256WithRSAEncryption
         21:de:88:ed:b9:a2:30:a0:52:3e:fc:74:8f:ee:3b:40:70:10:
         97:6c:23:c5:2d:74:74:74:e9:9c:0f:bc:db:c5:15:b1:cf:0d:
         9a:be:b2:39:37:37:b5:80:b5:30:9e:f6:50:c5:87:4b:8c:f6:
         aa:6f:b1:4e:2d:59:da:f0:a3:5c:7d:5e:d9:b4:ce:f9:ff:64:
         79:d8:bc:5b:91:74:ba:1a:4a:ee:5e:db:78:63:43:d2:24:33:
         05:4a:22:22:6e:36:73:46:10:f1:30:5b:36:39:93:c1:c7:d3:
         a0:54:e8:e5:c8:de:47:bd:c0:51:f0:5f:64:cb:93:12:41:60:
         60:3d:91:31:ab:b0:4f:9f:45:93:77:9b:9d:91:71:af:b4:27:
         30:a2:14:17:61:c1:5d:d8:1d:9e:00:00:a5:d4:74:78:95:0d:
         59:89:17:e0:0f:16:88:b5:b4:d4:df:15:b4:f8:80:00:ec:c8:
         e0:cd:04:02:a7:1b:fe:be:df:35:30:94:9a:0e:5e:b9:bf:fa:
         b1:0b:0d:0e:cc:2a:0c:ad:af:2b:46:f7:63:81:d9:24:91:60:
         6f:5f:83:cb:79:bf:5d:3e:64:65:a2:52:d7:ff:9b:54:c8:06:
         69:60:4c:c4:33:71:fb:c8:bf:d3:13:9c:28:2b:62:df:87:90:
         52:46:cc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----