This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
File:                     3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer (raw, json)
Hash identifier:          yv3JbQh/zA/97Fo6G2wV5+wbIbLqdHD+HX/wKXt6e7E=
Subject key identifier:   3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7C0F285BBBC568068962DE1CD64ABC90B005D87E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 28 Dec 2025 01:24:55 +0000
Certificate not after:    Sun 27 Dec 2026 01:29:55 +0000
Subordinate resources:    AS: 270551
                          IP: 189.50.220.0/22
                          IP: 2804:6db8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0f:28:5b:bb:c5:68:06:89:62:de:1c:d6:4a:bc:90:b0:05:d8:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 28 01:24:55 2025 GMT
            Not After : Dec 27 01:29:55 2026 GMT
        Subject: CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:48:8b:10:1e:cd:94:1a:1a:d5:46:b1:fa:a6:
                    36:ab:e1:35:e6:48:50:63:e3:e1:3e:6c:be:17:a1:
                    dc:7f:ee:54:9a:39:f6:b3:06:e1:57:17:54:1a:6b:
                    51:29:ac:b7:ba:41:9a:3f:96:7c:00:10:28:30:19:
                    85:0b:96:9f:2b:ba:85:b6:64:66:51:71:f4:15:89:
                    48:d2:ed:e0:c4:2b:f6:15:1a:93:df:37:ca:73:89:
                    5c:92:1c:57:8d:21:4f:44:ad:c7:57:2e:f0:2f:2c:
                    83:3f:7b:e4:2a:45:d6:bc:a4:a6:44:fc:43:80:c3:
                    9e:38:aa:cf:e2:4e:61:c1:5a:1f:82:9d:3d:6d:30:
                    cb:e0:81:9d:8b:65:b6:c4:75:52:9e:ce:f2:cc:96:
                    01:fa:92:d3:66:b7:d2:46:6a:d9:29:d2:89:ad:af:
                    d5:b4:6c:1a:3b:73:3c:60:dd:1e:89:13:5e:55:bd:
                    0e:32:bc:dc:1a:f5:8b:56:37:4c:75:b7:09:26:c3:
                    2a:a7:6f:39:d9:19:ea:5c:4d:82:c5:ee:04:e5:db:
                    0d:82:a5:3b:3e:a8:fa:e1:fd:34:5a:4b:03:9c:06:
                    32:cb:03:af:ba:9c:0b:dc:46:91:43:aa:67:d2:57:
                    06:5b:57:5b:88:3a:0f:ab:75:8c:d2:ae:ea:e8:41:
                    1e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.220.0/22
                IPv6:
                  2804:6db8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270551

    Signature Algorithm: sha256WithRSAEncryption
         08:84:2b:46:08:63:78:1a:3c:45:96:8c:9e:34:67:e7:cd:6f:
         1b:c2:24:e7:9d:44:ba:15:1c:e5:c3:39:11:8d:8e:7e:2c:a2:
         e4:9f:41:f1:64:c2:9c:54:63:e7:09:7c:9f:16:66:72:46:c0:
         ce:58:00:20:57:86:2a:1c:16:87:10:b5:cf:39:a6:a1:44:ac:
         ca:7a:77:8b:3a:d0:01:19:ea:e3:22:bd:9a:7a:f2:3a:0f:db:
         f6:33:c2:76:18:8c:32:f5:80:ac:e5:89:91:6f:06:12:05:10:
         40:ab:31:cc:ff:27:b3:5a:43:b8:91:53:3d:5c:af:23:2b:58:
         e5:31:d7:93:50:38:25:2d:7c:6e:71:b3:10:98:28:52:5f:a1:
         d3:ac:86:a2:a0:be:60:22:4b:33:7a:2f:61:68:56:07:d0:01:
         4f:95:7f:17:db:e2:c7:5b:53:fb:a6:28:cd:0c:b6:63:2f:80:
         b8:0a:2c:a3:08:e5:a0:2f:ac:95:3b:6a:8c:0d:06:e7:3a:73:
         85:bf:4b:0c:02:b8:b6:26:11:d8:5f:e9:95:f1:8e:e4:90:ba:
         bd:24:52:ed:f2:0e:45:21:8f:28:70:43:cf:a4:1a:a9:7b:c6:
         12:0f:98:76:0e:7d:fa:9a:d3:66:eb:8b:af:f5:d4:0f:41:21:
         d6:a4:ad:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----