This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5A04500F2CCC3AD327B65C082F00942A95A22666.cer
File:                     5A04500F2CCC3AD327B65C082F00942A95A22666.cer (raw, json)
Hash identifier:          eeZzcYrLbeId/Q5SVnDpCR2wa9UZlRAtDvBd0VCIgmg=
Subject key identifier:   5A:04:50:0F:2C:CC:3A:D3:27:B6:5C:08:2F:00:94:2A:95:A2:26:66
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       722A8C57D367D5FD620D45BD496E0A8AF5B8F712
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/5A04500F2CCC3AD327B65C082F00942A95A22666.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Nov 2025 21:58:52 +0000
Certificate not after:    Fri 27 Nov 2026 22:03:52 +0000
Subordinate resources:    AS: 61680
                          IP: 131.108.64.0/22
                          IP: 2804:1ce0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2a:8c:57:d3:67:d5:fd:62:0d:45:bd:49:6e:0a:8a:f5:b8:f7:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 28 21:58:52 2025 GMT
            Not After : Nov 27 22:03:52 2026 GMT
        Subject: CN=5A04500F2CCC3AD327B65C082F00942A95A22666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ec:ec:75:b4:cf:91:94:2c:f3:bc:d7:f3:36:
                    c2:f2:ef:5c:dc:80:d5:c1:6e:97:82:9f:17:83:64:
                    90:d1:ef:98:ce:db:a2:64:74:5f:59:44:a6:91:30:
                    42:48:f0:4b:0d:b4:a7:91:05:78:ff:d5:06:ab:24:
                    e8:38:b2:6e:a2:44:7e:b8:d0:5b:8c:84:20:34:a1:
                    ed:f6:95:f6:b7:0f:10:4d:6e:53:75:61:e5:51:aa:
                    57:0c:b4:95:a2:c0:9f:8e:ec:df:d4:b9:c4:dd:59:
                    ad:27:78:7a:56:16:e7:71:ce:e9:81:1b:19:eb:a9:
                    ef:71:f3:41:f2:e0:b6:83:87:38:d7:8c:70:fe:92:
                    ed:18:cd:09:0e:b4:f0:82:ec:40:a4:07:ce:c4:68:
                    e5:2c:ec:71:2f:35:ec:b8:30:2b:97:e7:00:5f:57:
                    4a:7b:f6:60:9b:b2:7f:25:2f:08:6a:33:85:ab:13:
                    08:85:5d:bb:30:97:c1:66:6c:04:31:d5:3d:52:f9:
                    8d:47:eb:cb:3b:80:2c:9e:ad:7f:6e:76:46:47:69:
                    08:74:a4:10:e1:bd:bc:52:54:a2:26:6b:b3:39:ad:
                    26:fe:f6:3f:f6:5a:54:69:1c:9c:3d:33:47:db:4d:
                    09:06:9a:0e:ef:0d:b8:97:6d:99:e9:f1:da:f6:54:
                    43:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:04:50:0F:2C:CC:3A:D3:27:B6:5C:08:2F:00:94:2A:95:A2:26:66
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/5A04500F2CCC3AD327B65C082F00942A95A22666.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.64.0/22
                IPv6:
                  2804:1ce0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61680

    Signature Algorithm: sha256WithRSAEncryption
         62:ce:df:aa:81:2e:cf:d4:3f:ef:d1:e1:e4:75:70:87:a9:01:
         f1:3a:1e:76:35:26:f4:de:c3:3d:bb:4a:50:71:fb:3e:61:22:
         25:e0:19:74:dc:b7:55:3f:b2:20:79:9a:4e:18:8e:a1:5e:ed:
         f8:16:7e:dd:db:81:d4:13:72:80:6e:59:e5:f3:1d:99:30:69:
         fa:e0:ba:52:15:14:58:71:3a:85:83:4b:97:6a:85:43:f4:9a:
         9d:da:95:36:f8:17:1c:31:69:a7:00:00:68:8c:fc:17:b9:55:
         27:00:c0:75:33:e8:30:91:33:0d:99:3f:ef:36:b9:22:72:c4:
         4f:99:28:dc:28:99:22:a3:2a:5a:51:3a:91:fc:d2:1f:93:19:
         d8:41:75:88:9a:2b:b8:57:1a:ee:a5:49:34:4d:38:77:c4:9f:
         1a:8b:6c:6e:f3:60:44:55:82:6c:03:f0:70:c3:00:69:4e:03:
         08:8e:7b:1e:e1:7b:45:2f:0b:ab:9a:c1:1d:ab:fc:2e:84:44:
         3c:b2:bc:e5:06:35:e3:90:c4:3f:36:ff:0f:0b:41:88:30:3a:
         f8:ed:3c:50:95:c0:30:46:29:9c:c8:27:96:7f:82:f8:56:83:
         f8:d6:77:5b:6b:a4:34:1f:4d:e0:90:aa:cb:ae:20:44:63:30:
         60:b8:6d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----