This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/509EF942F9C12C94CB01E7B74661B47CACA9126F.cer
File:                     509EF942F9C12C94CB01E7B74661B47CACA9126F.cer (raw, json)
Hash identifier:          JhpKGn/V63FRcghqUpi0nZvOxafxtoSEA0gY9yJkFyM=
Subject key identifier:   50:9E:F9:42:F9:C1:2C:94:CB:01:E7:B7:46:61:B4:7C:AC:A9:12:6F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4E057FB0628134F3BDCC86722F9170C4A0FF379D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/509EF942F9C12C94CB01E7B74661B47CACA9126F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Dec 2025 17:46:59 +0000
Certificate not after:    Fri 04 Dec 2026 17:51:59 +0000
Subordinate resources:    AS: 271423
                          IP: 200.36.196.0/22
                          IP: 2804:7b4c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 08:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:05:7f:b0:62:81:34:f3:bd:cc:86:72:2f:91:70:c4:a0:ff:37:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  5 17:46:59 2025 GMT
            Not After : Dec  4 17:51:59 2026 GMT
        Subject: CN=509EF942F9C12C94CB01E7B74661B47CACA9126F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:35:03:d5:6f:a8:c7:5b:72:a7:65:da:98:0f:
                    80:02:02:f3:58:55:54:9e:ac:d0:a4:9b:88:73:a3:
                    00:0a:b8:b5:ed:05:b1:de:26:cc:71:f1:d4:a9:1a:
                    36:5a:2b:e0:a9:5c:69:27:e6:3d:1f:7c:6d:d2:c2:
                    bd:ea:66:32:fc:cd:c5:1d:df:cd:5f:39:4e:42:5e:
                    d2:64:35:31:3c:79:b7:08:49:bd:2d:35:88:b5:11:
                    53:ae:68:14:57:91:97:80:1b:82:ab:12:6b:60:fc:
                    f9:74:81:9f:2e:4b:6e:3e:62:eb:b0:52:7a:7c:87:
                    a1:de:42:fa:6c:38:40:9b:bd:54:13:8d:76:a2:05:
                    ba:7d:8e:df:74:d8:da:97:3a:6a:0f:62:12:40:67:
                    52:c1:79:b7:fe:bc:a2:7e:00:5b:0a:ac:00:86:df:
                    a8:89:0e:bc:e1:4f:e3:e9:73:1e:f5:1e:54:23:c2:
                    d3:df:09:a1:47:fb:19:1d:93:b1:8e:3b:17:43:f8:
                    ad:d5:16:4c:71:bb:d4:7d:2b:db:fc:b5:f0:44:7c:
                    8d:d6:06:d0:57:23:7f:3a:35:be:4b:df:16:ec:c4:
                    c3:88:a6:64:ad:74:c4:c0:6b:b3:7b:56:29:86:72:
                    2c:dd:e0:d4:08:e3:c6:47:3e:d9:a0:75:44:9e:65:
                    f2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                50:9E:F9:42:F9:C1:2C:94:CB:01:E7:B7:46:61:B4:7C:AC:A9:12:6F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/509EF942F9C12C94CB01E7B74661B47CACA9126F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.196.0/22
                IPv6:
                  2804:7b4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271423

    Signature Algorithm: sha256WithRSAEncryption
         b6:24:b3:06:36:83:9d:b8:cb:3d:1f:b7:96:e5:1f:b7:83:29:
         a0:8c:34:13:a0:d4:fd:bc:8d:45:07:86:d4:49:27:62:5d:2f:
         9e:44:a1:ab:2a:5e:f5:e2:27:da:d4:80:5a:a0:25:65:c9:20:
         a4:18:3e:77:52:a7:72:aa:9f:73:7d:eb:5e:b1:8f:a2:b1:82:
         0f:65:54:cc:55:2b:20:a4:1b:07:e9:14:d5:b6:28:a9:05:22:
         78:0b:d0:59:e5:cb:a1:49:39:e1:9c:6b:46:61:d8:70:e7:a6:
         6f:e7:b8:17:87:ec:60:00:86:3d:b1:98:8f:86:1f:08:a8:a7:
         b4:a2:3d:e2:46:45:ab:e1:7b:0a:f5:3b:ca:85:0c:28:ee:8f:
         00:4d:ac:c7:b2:65:76:87:23:91:7d:4f:51:33:bb:fd:7c:98:
         bc:c5:bb:0c:ae:16:d4:91:ba:1a:32:69:1f:b4:f4:9c:f3:de:
         91:30:61:ce:a2:d7:1a:2b:c1:cd:a1:10:6a:9a:64:b1:88:5f:
         ad:66:6a:b1:62:2e:11:c5:de:ba:b7:ac:19:cf:a6:bb:a9:62:
         bd:1d:2c:69:57:f6:7e:c4:0c:bd:3b:1c:ff:e3:b8:92:ce:8a:
         51:68:e3:e5:b7:1d:fa:bd:b5:75:f6:c1:a5:d7:e4:ad:72:a4:
         d2:18:5c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----