This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3EB8F32F868764375318F9AF4199127B28A8178E.cer
File:                     3EB8F32F868764375318F9AF4199127B28A8178E.cer (raw, json)
Hash identifier:          8gJKga5Q6aZg5UoC8g9vuocFBGfPs556s/+x1nMx+yc=
Subject key identifier:   3E:B8:F3:2F:86:87:64:37:53:18:F9:AF:41:99:12:7B:28:A8:17:8E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2D0CD49F8884FB04741EDF139B7BCD4AEAB79551
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/3EB8F32F868764375318F9AF4199127B28A8178E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Nov 2025 12:28:38 +0000
Certificate not after:    Mon 23 Nov 2026 12:33:38 +0000
Subordinate resources:    AS: 270301
                          IP: 201.71.200.0/22
                          IP: 2804:69f0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:0c:d4:9f:88:84:fb:04:74:1e:df:13:9b:7b:cd:4a:ea:b7:95:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 24 12:28:38 2025 GMT
            Not After : Nov 23 12:33:38 2026 GMT
        Subject: CN=3EB8F32F868764375318F9AF4199127B28A8178E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:37:f2:4c:c5:ba:d5:65:17:f6:c4:75:b1:b0:
                    95:1c:15:e7:d2:1e:c7:68:71:92:7e:38:55:48:a2:
                    bf:f1:56:4c:a3:97:12:8f:18:4a:53:c2:da:f0:a1:
                    a8:d8:54:e8:66:21:c3:18:25:0b:4c:4c:3c:f0:48:
                    31:41:55:46:24:56:ab:17:6d:1d:42:34:9a:77:83:
                    92:25:8c:8a:d7:05:3e:47:c4:fb:c0:f6:74:b9:6c:
                    c1:84:99:3e:89:37:89:9b:3c:34:00:83:bf:17:83:
                    6c:f1:13:a7:4b:e4:07:7e:2b:da:61:31:bd:b6:aa:
                    d9:72:98:da:a8:b4:26:aa:a5:95:2b:12:6a:d6:63:
                    10:44:e4:d2:fc:a4:b0:d8:e8:e2:b7:05:da:0f:fb:
                    6b:97:89:84:06:29:71:13:6c:5f:78:ba:18:81:d8:
                    f0:d2:0e:3f:0b:f1:8c:9b:25:61:c1:68:b0:c6:21:
                    2b:35:2c:f5:8c:41:7d:bd:1d:12:a0:4b:ed:df:e3:
                    01:67:02:f9:78:ab:4a:52:3b:4d:86:80:4d:db:28:
                    ea:e1:9c:a1:1f:b3:a3:5c:6a:4c:e4:83:d7:4b:cb:
                    88:14:83:75:68:51:b8:63:fe:ba:8b:60:88:6f:3e:
                    14:cc:ce:40:e2:65:d1:3c:77:15:2b:ec:3e:50:77:
                    dd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:B8:F3:2F:86:87:64:37:53:18:F9:AF:41:99:12:7B:28:A8:17:8E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/3EB8F32F868764375318F9AF4199127B28A8178E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.200.0/22
                IPv6:
                  2804:69f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270301

    Signature Algorithm: sha256WithRSAEncryption
         92:c8:74:72:73:1e:ec:4e:1b:8e:73:ce:5b:e6:a6:2e:42:c8:
         9a:e8:a8:4a:de:b1:06:d0:f7:5a:29:bd:9e:b0:20:78:d8:fe:
         fe:5d:1b:32:96:ba:00:94:7d:6a:04:a1:9c:18:11:fb:a7:b7:
         0e:3d:ea:fd:d8:c4:a2:6b:12:85:79:f9:a0:a7:72:54:d3:eb:
         2d:46:73:d9:33:35:89:25:4d:74:b2:4c:26:45:e1:d0:0d:a1:
         84:d4:62:8b:96:d3:8d:c8:2b:e2:2d:c9:ff:4d:b0:98:fa:e0:
         71:24:0e:dc:72:67:66:c9:42:ac:b4:3c:7f:af:4c:20:f3:fc:
         e4:51:68:07:4c:d6:76:65:21:7a:bc:55:76:06:d6:67:21:d9:
         d6:b6:06:f3:33:79:69:2b:fb:f4:30:73:42:c6:0d:4c:ac:93:
         7f:b3:58:18:c9:64:60:ca:76:ac:1f:94:de:c6:61:95:1c:8d:
         25:1e:26:a2:9f:df:b8:b0:42:02:95:12:39:6e:4f:8c:c0:53:
         82:c9:90:14:bd:bc:4d:c8:07:47:0b:a3:1b:39:00:01:3d:d5:
         f2:a5:91:8b:1e:fe:e8:42:c0:35:fc:55:2c:2a:c8:43:69:23:
         61:66:0a:cf:6e:23:f9:e7:43:0b:7e:f0:91:d5:02:11:43:dc:
         52:0a:84:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----