This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5BD9E4DF292A678071B59785706268C92A671EA2.cer
File:                     5BD9E4DF292A678071B59785706268C92A671EA2.cer (raw, json)
Hash identifier:          IEVUqfgz2vo02LV4ze1INQ96jqctkEyzxAPSC8eZYgU=
Subject key identifier:   5B:D9:E4:DF:29:2A:67:80:71:B5:97:85:70:62:68:C9:2A:67:1E:A2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3ADF8D987C4C4C6F0E6140FEE8B46A00877B8C2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3jWWE4B8LPPCpMWMHLm91DNZ7pChw9ZASH1CYM4NKKkL/0/5BD9E4DF292A678071B59785706268C92A671EA2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3jWWE4B8LPPCpMWMHLm91DNZ7pChw9ZASH1CYM4NKKkL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Nov 2025 13:54:07 +0000
Certificate not after:    Mon 09 Nov 2026 13:59:07 +0000
Subordinate resources:    AS: 274464
                          IP: 2804:9488::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:df:8d:98:7c:4c:4c:6f:0e:61:40:fe:e8:b4:6a:00:87:7b:8c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 10 13:54:07 2025 GMT
            Not After : Nov  9 13:59:07 2026 GMT
        Subject: CN=5BD9E4DF292A678071B59785706268C92A671EA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:a3:a1:73:2a:41:af:35:f7:b6:6c:d7:74:
                    36:39:49:c7:4f:61:c4:f2:96:a8:6a:a4:db:49:83:
                    55:c9:80:49:5f:18:eb:82:c2:67:c7:06:46:21:26:
                    e7:c0:67:d5:0e:5a:dc:c3:ae:c0:e6:61:6b:c7:4a:
                    e9:77:d8:2e:4f:24:22:43:81:8f:28:65:67:20:57:
                    03:9e:68:41:c4:93:12:0d:d3:62:43:7d:6a:af:14:
                    8f:af:e7:2f:64:fc:e1:5a:e7:a2:13:f9:12:7d:ac:
                    b0:4c:c8:94:dc:5a:27:23:b6:9b:78:6f:ea:00:41:
                    8f:06:09:21:5f:6f:25:d1:e5:da:16:79:37:f1:82:
                    2c:42:83:e7:66:00:c0:a0:6a:8d:d3:2d:f5:f0:c0:
                    96:04:dd:0d:7d:b7:20:bb:4f:fb:42:db:64:77:76:
                    63:bc:a3:22:ea:fe:9e:8f:69:83:c9:31:ac:38:3c:
                    17:8f:d0:48:21:39:81:60:b2:24:87:5a:51:df:2a:
                    2b:08:1a:15:9c:fc:6c:84:77:bd:c2:1a:b9:e2:64:
                    bc:ce:3a:bc:ac:3a:58:6b:a2:58:fe:fb:ef:b9:c1:
                    d6:a4:17:62:5a:9b:38:b7:1d:80:c0:88:5e:8e:1c:
                    7e:57:19:3c:e0:81:d4:2d:77:11:52:8d:45:6e:a6:
                    05:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5B:D9:E4:DF:29:2A:67:80:71:B5:97:85:70:62:68:C9:2A:67:1E:A2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3jWWE4B8LPPCpMWMHLm91DNZ7pChw9ZASH1CYM4NKKkL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3jWWE4B8LPPCpMWMHLm91DNZ7pChw9ZASH1CYM4NKKkL/0/5BD9E4DF292A678071B59785706268C92A671EA2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9488::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274464

    Signature Algorithm: sha256WithRSAEncryption
         66:17:90:3f:9f:27:8a:a5:39:ec:23:86:14:40:14:b6:38:c4:
         93:e8:f9:c0:e1:51:32:3e:68:58:a5:d8:1c:4f:9b:de:18:ff:
         fa:3f:9c:ad:fc:dc:00:78:60:ee:ee:b7:cb:b0:46:5b:5f:96:
         75:a1:16:f2:51:6c:42:0e:75:2e:b4:45:89:ed:78:f8:d1:d9:
         e1:0b:14:5e:ee:52:06:41:66:e9:e4:98:9e:9c:48:fb:c2:ca:
         e3:15:fc:f0:a5:8a:3c:c3:4c:e1:ee:b0:08:0f:fb:dd:be:6e:
         22:f0:54:9a:75:64:ac:63:5d:2b:ac:5f:02:17:50:ce:21:f3:
         9b:e2:3f:2a:d4:05:42:5c:e3:31:42:e2:fc:44:eb:2b:2d:80:
         4a:42:47:98:a4:d5:37:79:c4:bd:2e:2b:0b:d9:cf:9f:6c:83:
         29:b6:24:a7:69:2c:61:f6:9c:16:df:f2:36:e7:d1:b9:f2:2f:
         a7:c6:65:57:62:c9:aa:81:bb:d4:73:c0:7b:04:28:8c:8c:04:
         9e:5c:36:91:0c:dd:f6:84:01:05:ae:cb:88:4c:47:54:7a:2b:
         3c:ac:4f:7f:9a:8d:a5:c4:84:ff:bf:49:85:dd:5b:11:9a:a2:
         7f:59:f1:78:ce:35:78:ee:55:3a:3b:a3:b3:62:d5:99:e9:52:
         8b:12:9b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----