This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.cer
File:                     4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.cer (raw, json)
Hash identifier:          2931P+00URU3v0tPpUtYI4A+jeNq0uVK6yg2cpgkIY8=
Subject key identifier:   4A:3A:F9:78:37:ED:9A:91:8F:A7:5D:49:60:FC:20:47:B2:CF:81:FF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1A2778F215748BB4AD1C691B0B7A10A3815AA87C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Nov 2025 11:19:05 +0000
Certificate not after:    Wed 25 Nov 2026 11:24:05 +0000
Subordinate resources:    AS: 271679
                          IP: 200.24.116.0/22
                          IP: 2804:7f4c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:27:78:f2:15:74:8b:b4:ad:1c:69:1b:0b:7a:10:a3:81:5a:a8:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 26 11:19:05 2025 GMT
            Not After : Nov 25 11:24:05 2026 GMT
        Subject: CN=4A3AF97837ED9A918FA75D4960FC2047B2CF81FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bc:5c:39:79:53:fe:9a:09:4e:cc:66:69:51:
                    32:ae:03:7e:62:56:6a:f0:99:13:48:e2:b9:bd:9a:
                    6f:d9:62:aa:f2:ad:e6:30:c4:12:be:4a:d5:48:c1:
                    ac:43:e9:12:46:4d:05:39:09:84:e2:92:c9:9d:08:
                    e9:9d:97:c4:8c:27:7e:a4:67:db:93:b3:7b:ee:be:
                    23:9a:9e:c7:eb:1d:44:f3:f9:d8:50:5f:d3:93:55:
                    ee:65:b5:17:76:f2:2d:ef:49:2c:67:93:f3:2f:13:
                    86:24:ae:59:fb:38:38:29:94:35:85:f0:ae:e8:1b:
                    c4:17:a4:d5:9f:45:cf:fc:64:a7:e3:de:67:02:ec:
                    0d:0e:02:21:70:11:05:4f:18:34:48:8b:e6:df:c2:
                    86:f3:26:6f:bf:af:1e:56:6a:e6:54:0b:74:da:ca:
                    5e:e2:b9:f1:f8:b3:b6:46:61:82:6f:e6:bd:58:f8:
                    d3:a7:40:e9:81:50:63:0b:a3:10:56:4e:02:0e:3e:
                    ff:48:2b:2f:ee:5e:16:1f:fd:74:88:39:58:22:bc:
                    ba:cc:8f:57:3f:28:ca:11:70:ea:53:14:cf:43:c5:
                    e5:84:8f:46:29:cf:a5:c4:00:44:e0:79:14:c5:13:
                    6d:84:00:87:8c:37:27:63:0c:53:e0:9a:dd:2d:5e:
                    9b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:3A:F9:78:37:ED:9A:91:8F:A7:5D:49:60:FC:20:47:B2:CF:81:FF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.116.0/22
                IPv6:
                  2804:7f4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271679

    Signature Algorithm: sha256WithRSAEncryption
         0b:0d:f6:13:23:61:e5:30:eb:1f:c9:b6:f9:dc:ce:98:fe:0a:
         10:dc:86:b2:3e:78:d0:30:c9:ba:3f:72:e1:8e:23:a7:33:c4:
         25:17:82:0c:21:8c:35:af:23:4f:80:cb:c7:05:8f:09:69:71:
         17:83:54:83:6c:32:50:42:85:61:dc:b1:a8:07:52:db:e1:80:
         61:60:b8:7a:a1:8b:fc:8a:4c:2a:fd:e8:4d:e1:c9:69:6b:e9:
         1c:12:bd:04:2f:8d:3d:1b:d9:a7:51:1e:f0:24:a9:8b:32:7b:
         3f:09:f1:53:29:2d:00:cf:7c:39:ec:e1:7b:e3:90:63:dc:e1:
         23:38:e3:2b:9e:7d:2e:3a:e4:2e:c7:0b:9c:dc:c6:44:ea:4d:
         d8:c2:f4:23:21:6a:7d:98:2b:30:08:d0:0d:dd:9a:2e:13:69:
         74:e6:35:3d:09:2b:02:c5:67:f8:97:d2:5f:52:37:be:0f:85:
         72:e8:07:8e:31:98:9b:1f:39:2a:2a:d5:34:44:44:20:04:b3:
         c4:34:97:6b:4c:bc:09:80:b9:43:ce:37:f1:86:f6:76:0e:0d:
         53:b6:fc:6c:74:25:4d:8d:df:bd:72:05:d4:7f:93:6c:e3:da:
         83:f8:be:01:1f:93:04:d6:35:55:06:9f:11:0d:ad:d5:d9:1e:
         23:83:da:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----