This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer
File:                     4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer (raw, json)
Hash identifier:          HsmcSJ2aySF8tE86PbN4xug9GrY8fne0OzEkBpTUxgw=
Subject key identifier:   4D:CB:5A:BC:62:FB:BC:89:0F:DA:F0:5E:0D:86:D7:99:9A:6E:AD:B2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5146E146A395553AE41E0787D5D4333366404F85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 19 Nov 2025 14:04:25 +0000
Certificate not after:    Wed 18 Nov 2026 14:09:25 +0000
Subordinate resources:    AS: 273485
                          IP: 2804:8f58::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:52:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:46:e1:46:a3:95:55:3a:e4:1e:07:87:d5:d4:33:33:66:40:4f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 19 14:04:25 2025 GMT
            Not After : Nov 18 14:09:25 2026 GMT
        Subject: CN=4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:25:94:9f:74:cd:99:8c:7c:7d:bd:2f:f9:6b:
                    85:52:c0:14:ce:fc:06:9e:02:a4:3b:f1:ff:bc:36:
                    8e:de:5d:89:53:f6:71:fe:7e:99:52:49:13:5d:4f:
                    3e:0a:dc:ec:eb:7e:0c:9c:bd:3d:4f:14:ea:95:8b:
                    79:28:73:24:2c:0a:80:f3:33:50:c0:13:cb:80:02:
                    2a:cb:f5:6c:38:4e:3b:a8:7e:4a:79:18:de:eb:b2:
                    86:68:af:83:3f:c3:e0:d9:88:9a:ff:e6:58:50:34:
                    f1:e2:9f:fb:22:7c:4b:7d:e9:7c:b1:d5:57:71:6d:
                    10:fb:c6:d0:d2:ff:0a:04:9d:4f:7a:95:f6:b0:62:
                    41:f5:0b:1d:b5:b5:fb:a5:c5:23:af:b0:b3:b2:08:
                    b3:19:4c:9b:2c:dc:c1:25:90:25:ca:7c:f0:77:27:
                    69:ca:df:23:76:3d:59:92:26:e7:60:23:68:26:7d:
                    63:e5:c1:54:de:7c:c3:b7:84:61:64:f4:65:8c:ef:
                    24:8a:60:10:f4:c0:ef:38:65:72:89:59:5d:1f:96:
                    e1:eb:5a:01:ac:04:f0:7e:45:a4:c8:56:b6:fd:41:
                    0a:36:b0:42:b4:03:12:3c:28:69:f6:12:11:54:b4:
                    e0:de:66:f7:4c:60:0d:de:36:f3:2e:ac:c5:5f:db:
                    d9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4D:CB:5A:BC:62:FB:BC:89:0F:DA:F0:5E:0D:86:D7:99:9A:6E:AD:B2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273485

    Signature Algorithm: sha256WithRSAEncryption
         a4:03:b6:f2:39:7d:04:49:11:39:58:b0:89:0a:7d:26:d7:ba:
         b4:6a:70:eb:6b:f3:d5:01:82:04:86:0a:83:9e:46:d8:7e:48:
         fd:f5:a6:35:1e:e3:2e:b5:97:80:64:c1:8d:39:05:28:04:0b:
         be:f6:c1:98:59:e0:91:b9:12:7c:1d:02:5f:fa:f7:33:47:b6:
         b7:fa:65:b7:8f:9a:45:f3:52:4d:93:af:ad:3a:71:27:c8:71:
         ba:68:c8:31:f9:ea:b8:90:2d:c1:85:f7:49:2c:03:d0:8e:14:
         45:a7:ff:0d:3d:26:0a:f9:7f:f2:9c:a0:a2:85:17:80:f2:9f:
         c1:af:2f:d4:1f:c2:12:ae:8c:77:4f:33:4b:c5:2d:d5:3e:0a:
         a4:0a:eb:2d:98:0f:2b:8b:3c:6c:ae:31:87:2a:ed:8e:8e:55:
         60:84:d6:30:a1:9a:3e:54:ff:c2:d6:bd:60:35:dc:fa:25:c0:
         b4:24:d6:ec:d9:3d:d2:b7:db:4a:9a:7e:ec:8b:01:ce:2c:e7:
         19:60:21:d9:82:b4:d5:46:df:3d:0c:c7:1a:a9:03:ea:00:79:
         0e:76:0a:18:04:5b:ea:1e:e4:77:0c:d2:5e:85:c6:31:10:e4:
         8a:fd:7e:6c:69:4a:8c:d2:74:5a:38:dd:b6:83:b3:b0:41:4c:
         c3:60:33:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----