This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/50C6C2F2E389573D58298DB6B5B7A96430477F18.cer
File:                     50C6C2F2E389573D58298DB6B5B7A96430477F18.cer (raw, json)
Hash identifier:          iP3GwYOU6NtgsBmWx8ETBzY2VV/F/SsQ53GDO/E2Unw=
Subject key identifier:   50:C6:C2:F2:E3:89:57:3D:58:29:8D:B6:B5:B7:A9:64:30:47:7F:18
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6D9F19C8A0F281D2371F031F0CBA8F1F17202494
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/50C6C2F2E389573D58298DB6B5B7A96430477F18.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Nov 2025 19:15:30 +0000
Certificate not after:    Tue 24 Nov 2026 19:20:30 +0000
Subordinate resources:    AS: 264428
                          IP: 131.221.124.0/22
                          IP: 143.0.4.0/22
                          IP: 2804:1e6c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:9f:19:c8:a0:f2:81:d2:37:1f:03:1f:0c:ba:8f:1f:17:20:24:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 25 19:15:30 2025 GMT
            Not After : Nov 24 19:20:30 2026 GMT
        Subject: CN=50C6C2F2E389573D58298DB6B5B7A96430477F18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8a:73:77:2d:1c:d4:41:06:39:75:d2:96:83:
                    f5:61:27:e0:16:b2:35:05:71:0d:ec:5f:c5:be:a7:
                    f1:11:91:e9:24:9f:29:a6:1f:29:d4:23:d3:ef:0d:
                    69:2e:77:74:10:13:03:95:5a:50:3e:4d:70:5b:8a:
                    9d:85:d0:df:6a:1b:e7:07:7c:53:ab:04:8c:15:87:
                    14:83:5d:09:7c:25:b5:b2:10:da:85:af:bc:a7:c0:
                    0f:04:f0:4a:3b:ec:f2:42:20:7d:b4:1d:12:19:1a:
                    43:91:c4:ca:8f:e3:74:cf:07:46:d4:76:15:a9:76:
                    f8:d6:3c:c7:55:e7:51:dc:89:26:a7:06:06:64:6e:
                    3f:c3:b4:80:1b:d4:ba:36:1d:52:73:e5:af:c2:2a:
                    42:90:c3:3c:62:ae:5a:1d:a7:ef:8b:69:06:e2:06:
                    35:1b:ca:5c:c7:79:0b:04:4b:d7:5e:eb:8c:1a:5f:
                    c4:27:06:7d:31:5a:3a:c6:61:c4:f5:a2:da:82:3e:
                    e0:d0:9e:a9:50:78:ba:4d:72:84:2a:ad:46:ec:29:
                    44:c8:ee:f4:ce:9e:66:5f:20:0b:4c:a6:ff:34:5a:
                    87:d4:d1:65:34:df:1b:2d:c4:cb:7a:26:9f:8a:70:
                    d2:4a:55:1a:18:d1:e9:8f:f5:29:d1:47:27:11:26:
                    23:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                50:C6:C2:F2:E3:89:57:3D:58:29:8D:B6:B5:B7:A9:64:30:47:7F:18
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/50C6C2F2E389573D58298DB6B5B7A96430477F18.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.124.0/22
                  143.0.4.0/22
                IPv6:
                  2804:1e6c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264428

    Signature Algorithm: sha256WithRSAEncryption
         6d:34:59:21:f5:4e:8a:39:16:a8:f9:e9:71:23:5f:2f:af:c2:
         7b:49:d0:45:ef:53:78:da:db:4d:c3:26:e5:81:93:e6:84:99:
         0b:5b:9a:da:01:6a:f3:7c:1a:e9:85:ac:7e:09:bf:9f:d5:44:
         3d:f0:ab:15:8b:5e:f1:81:99:2d:ac:61:15:a4:b2:e3:ca:1d:
         c2:f9:57:6f:02:7b:df:ab:73:b5:70:c3:d0:df:30:4b:55:af:
         ba:ef:35:40:48:60:01:f0:3d:4f:af:c3:28:4d:71:57:9e:39:
         08:45:25:f2:3c:74:c7:18:f8:05:72:07:c0:2e:e6:d6:65:4d:
         34:f1:e2:67:d1:4f:a1:2c:fb:2d:fb:96:0e:75:41:f8:29:d4:
         e7:99:cb:5a:c2:2d:ba:e6:6c:91:be:2c:cc:a1:97:31:14:44:
         d7:f7:45:f7:3d:d3:26:36:9a:61:53:0e:07:96:06:80:03:7b:
         cb:5f:ca:55:f2:03:34:48:38:8e:b4:c0:7d:fa:85:f4:63:89:
         3a:27:b3:ba:0f:87:bc:21:8b:b5:69:1b:ca:2b:cf:7b:2a:1f:
         04:b2:ae:7d:26:2e:cd:a2:a3:f7:b7:fe:45:4d:42:03:9b:42:
         7d:44:51:0e:27:71:17:3a:9d:20:6a:18:7f:1e:98:40:fb:c2:
         01:33:7a:26
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUbZ8ZyKDygdI3HwMfDLqPHxcgJJQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTExMjUxOTE1MzBaFw0yNjExMjQxOTIwMzBaMDMxMTAvBgNV
BAMTKDUwQzZDMkYyRTM4OTU3M0Q1ODI5OERCNkI1QjdBOTY0MzA0NzdGMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMinN3LRzUQQY5ddKWg/VhJ+AW
sjUFcQ3sX8W+p/ERkekknymmHynUI9PvDWkud3QQEwOVWlA+TXBbip2F0N9qG+cH
fFOrBIwVhxSDXQl8JbWyENqFr7ynwA8E8Eo77PJCIH20HRIZGkORxMqP43TPB0bU
dhWpdvjWPMdV51HciSanBgZkbj/DtIAb1Lo2HVJz5a/CKkKQwzxirlodp++LaQbi
BjUbylzHeQsES9de64waX8QnBn0xWjrGYcT1otqCPuDQnqlQeLpNcoQqrUbsKUTI
7vTOnmZfIAtMpv80WofU0WU03xstxMt6Jp+KcNJKVRoY0emP9SnRRycRJiM1AgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRQxsLy44lXPVgp
jba1t6lkMEd/GDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWJ1
ZnVSTmNnaVZobWhITUw1Sm43d1d2N1RwVGNodk5oYmJLU0dYeHhXQnovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Fi
dWZ1Uk5jZ2lWaG1oSE1MNUpuN3dXdjdUcFRjaHZOaGJiS1NHWHh4V0J6LzAvNTBD
NkMyRjJFMzg5NTczRDU4Mjk4REI2QjVCN0E5NjQzMDQ3N0YxOC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCg918AwQCjwAEMA0EAgACMAcDBQAoBB5sMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQI7DANBgkqhkiG9w0BAQsFAAOCAQEAbTRZIfVO
ijkWqPnpcSNfL6/Ce0nQRe9TeNrbTcMm5YGT5oSZC1ua2gFq83wa6YWsfgm/n9VE
PfCrFYte8YGZLaxhFaSy48odwvlXbwJ736tztXDD0N8wS1Wvuu81QEhgAfA9T6/D
KE1xV545CEUl8jx0xxj4BXIHwC7m1mVNNPHiZ9FPoSz7LfuWDnVB+CnU55nLWsIt
uuZskb4szKGXMRRE1/dF9z3TJjaaYVMOB5YGgAN7y1/KVfIDNEg4jrTAffqF9GOJ
Oiezug+HvCGLtWkbyivPeyofBLKufSYuzaKj97f+RU1CA5tCfURRDidxFzqdIGoY
fx6YQPvCATN6Jg==
-----END CERTIFICATE-----