This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.cer
File:                     3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.cer (raw, json)
Hash identifier:          NFaQojGn5Ky8ysUjep+yXoQzG0Q9gql1Fk713HyJTpU=
Subject key identifier:   3E:28:7C:63:DB:B3:ED:0D:09:ED:B7:0A:34:93:B0:2D:6C:FD:FB:42
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       419971F0700942B805FCCEB5EB039ABF0083ADCF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Nov 2025 17:20:06 +0000
Certificate not after:    Wed 25 Nov 2026 17:25:06 +0000
Subordinate resources:    AS: 52818
                          IP: 177.72.148.0/22
                          IP: 191.240.196.0/22
                          IP: 2804:111c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:99:71:f0:70:09:42:b8:05:fc:ce:b5:eb:03:9a:bf:00:83:ad:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 26 17:20:06 2025 GMT
            Not After : Nov 25 17:25:06 2026 GMT
        Subject: CN=3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5b:e5:60:9d:94:83:2a:14:d0:ad:1a:01:b2:
                    d4:90:11:14:70:66:19:2c:87:db:ba:9d:be:57:58:
                    1b:9d:5f:11:73:f2:05:af:0d:52:0b:89:24:43:dc:
                    c9:70:e0:b3:44:e6:5a:52:ca:f7:95:4a:6e:31:f1:
                    a4:38:09:b6:31:c1:5b:d3:3a:ea:a9:10:22:da:93:
                    f9:28:49:ea:4d:2f:e3:a9:a8:2a:2c:38:e9:94:b5:
                    d4:9e:e3:50:34:f7:80:8f:6e:d0:83:a5:46:1b:81:
                    05:1d:8d:48:ad:2b:f5:21:ff:a6:06:57:84:ed:b7:
                    87:84:71:a1:a8:9e:ee:9d:85:22:62:8b:94:30:cd:
                    f0:5b:e5:fb:0c:67:db:a0:03:f8:0a:04:51:5b:f3:
                    2f:4d:5a:73:ba:65:d8:b3:8c:0d:28:64:ec:1d:b9:
                    4d:91:3d:c3:f5:27:37:f0:23:09:1f:21:a7:33:0c:
                    6c:45:41:1a:b9:78:be:1b:c9:c7:02:73:89:dd:f6:
                    b5:80:80:38:a9:ad:9c:05:c4:97:4f:8e:28:c8:47:
                    38:73:fe:0c:d1:c0:c9:1a:55:ea:6d:d7:02:5b:14:
                    54:04:97:f4:f3:30:14:d3:c4:de:92:17:2c:7b:1b:
                    95:3b:e9:01:1d:3a:66:e2:b6:74:6c:9a:c1:d9:6b:
                    6c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:28:7C:63:DB:B3:ED:0D:09:ED:B7:0A:34:93:B0:2D:6C:FD:FB:42
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.148.0/22
                  191.240.196.0/22
                IPv6:
                  2804:111c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52818

    Signature Algorithm: sha256WithRSAEncryption
         c7:b2:9d:15:80:2b:3e:ff:c0:e1:ab:37:8b:42:b8:fe:08:ca:
         a4:71:12:7c:78:83:af:fa:23:ed:ff:fc:06:a0:04:31:df:d6:
         80:19:c6:8a:60:8a:94:ce:06:83:8c:4a:07:69:65:16:be:a4:
         40:fb:93:06:27:49:b0:a1:8e:c8:59:4a:ee:55:7c:aa:96:d8:
         e6:36:6d:e1:42:44:f3:44:42:e0:f0:bc:cc:0f:fd:d6:f4:6f:
         b4:40:81:66:4f:7e:94:33:07:8e:18:cf:eb:fb:fb:53:5c:29:
         c2:70:b2:20:36:1e:39:1e:4a:a5:2e:a4:5a:69:17:06:05:dd:
         64:47:30:dd:21:48:5e:cb:9c:1a:73:92:1c:ac:e1:bd:d6:a1:
         77:86:22:a5:f0:79:1b:58:0c:83:28:0e:db:81:c3:c5:66:45:
         98:47:59:f0:a5:88:2b:f4:2f:1d:f7:0f:95:b4:ce:35:e5:4b:
         5f:de:e1:47:c1:c5:4d:0a:c1:1f:dd:01:92:36:c5:1d:01:6e:
         d9:1a:ef:bc:43:1f:5d:57:b1:57:d4:32:7d:1c:35:e2:c9:76:
         91:41:4c:0a:d2:6c:07:03:6d:5c:e9:bd:f7:5b:1d:d1:19:3a:
         84:12:37:34:a3:44:f8:36:2e:cc:09:62:da:5c:ff:36:93:cb:
         0a:94:fb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----