This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer
File:                     436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer (raw, json)
Hash identifier:          z3SGeCogmgRdpr4HTdG1ho/Q9dGzcs3KdjUMveThP7E=
Subject key identifier:   43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5F8E765F1A0D16D165A9D527E169CC6FF88FE8D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Nov 2025 16:53:33 +0000
Certificate not after:    Tue 24 Nov 2026 16:58:33 +0000
Subordinate resources:    AS: 273760
                          IP: 2804:8bcc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 08:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:8e:76:5f:1a:0d:16:d1:65:a9:d5:27:e1:69:cc:6f:f8:8f:e8:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 25 16:53:33 2025 GMT
            Not After : Nov 24 16:58:33 2026 GMT
        Subject: CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3e:b7:00:89:b2:c4:58:81:a6:76:55:11:1c:
                    b9:a0:67:84:ba:89:4d:b1:d1:cf:f4:cc:48:92:19:
                    da:14:7e:78:a0:3e:43:ff:e8:b4:04:9e:84:cd:60:
                    91:95:5e:55:dd:38:eb:34:3e:55:0c:22:cc:c7:b5:
                    ae:a4:75:6c:1c:93:ca:43:96:1e:a3:88:ea:c8:e7:
                    69:f1:a9:ed:88:b4:74:a5:b7:1f:12:42:74:22:14:
                    95:8f:88:05:b1:bf:12:ab:ef:0c:df:33:0f:f9:da:
                    cb:c6:7c:67:80:c0:06:c5:f1:32:6f:e6:24:f4:90:
                    a6:93:03:37:7f:18:42:ae:08:51:82:4b:17:ff:2f:
                    55:9d:03:61:db:ae:b6:0c:d6:49:60:e1:27:ac:d7:
                    df:6b:43:cc:0c:b4:9e:65:81:e1:13:02:fa:75:01:
                    2d:5c:a2:bb:cd:64:74:be:c5:0b:d7:e9:b5:1d:dd:
                    45:c1:8a:90:b7:9e:f0:dd:c1:8e:e9:c2:0e:bb:2f:
                    34:b8:3d:62:06:04:37:07:e8:2b:99:f2:71:99:b2:
                    cf:08:8d:d5:dd:e6:9e:b8:26:a2:c0:2a:76:a2:c0:
                    8e:ac:83:7c:f7:a3:44:1b:56:3e:4b:0a:c3:27:5a:
                    a2:e4:28:30:cd:e8:e0:ce:fe:5b:ca:1f:68:90:04:
                    8e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8bcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273760

    Signature Algorithm: sha256WithRSAEncryption
         8b:b8:d9:ea:47:e8:0d:b2:3f:71:55:99:3e:d7:3a:40:c4:4e:
         dd:ce:bb:17:67:69:31:b5:a8:2e:46:dd:ec:b6:4f:b6:3f:fe:
         f2:96:43:4f:fd:0a:f6:ff:16:d6:6c:ae:0c:52:b3:72:06:b5:
         db:30:20:d6:00:40:d6:33:6b:f5:97:69:f1:60:00:71:5c:e9:
         ea:fe:78:ec:90:7d:be:31:23:47:c1:3b:3d:66:b5:85:e0:d2:
         b5:44:ae:18:f6:17:33:85:ec:02:8e:aa:fc:df:be:6e:ff:34:
         ea:7b:f9:27:3c:46:e6:1d:17:55:29:2a:3f:7e:79:4d:24:fa:
         e8:0f:de:3b:dc:74:d7:a5:59:13:ab:a3:b0:f7:05:a0:e8:74:
         7d:b4:37:87:3c:2f:4e:9a:3b:26:2d:13:7c:84:e2:45:32:30:
         8e:66:e4:e8:34:3b:5a:f2:64:23:7b:57:78:77:33:50:f8:6b:
         d5:d6:a4:66:6a:84:1a:b1:4c:01:d5:f8:fb:07:66:a9:54:6c:
         d6:f9:ff:1f:54:4e:23:19:a0:60:62:70:88:3b:95:20:ee:80:
         fc:70:48:8e:5e:bf:f7:15:9d:42:3b:ce:08:f7:a0:db:5e:9c:
         af:a4:e3:af:4c:7a:7f:e1:d5:01:af:46:ee:86:8f:ac:c5:b9:
         73:76:99:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----