This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/60492EF363CCBEBD72926A28053650F83D65CC29.cer
File:                     60492EF363CCBEBD72926A28053650F83D65CC29.cer (raw, json)
Hash identifier:          xc05qrEXtQl2RvURl6yTMCpnTR8ZZStE2UwQrRNgibo=
Subject key identifier:   60:49:2E:F3:63:CC:BE:BD:72:92:6A:28:05:36:50:F8:3D:65:CC:29
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1ABAC2274D29DAF22EF36F6FB3197C7EF2FC02E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4nnrsZCMu8fwsJkaZDVSWBPeDT2nUVapoVrC2j7JT2TC/0/60492EF363CCBEBD72926A28053650F83D65CC29.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4nnrsZCMu8fwsJkaZDVSWBPeDT2nUVapoVrC2j7JT2TC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Dec 2025 13:36:42 +0000
Certificate not after:    Tue 01 Dec 2026 13:41:42 +0000
Subordinate resources:    AS: 264104
                          IP: 138.59.184.0/22
                          IP: 2804:227c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 10:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ba:c2:27:4d:29:da:f2:2e:f3:6f:6f:b3:19:7c:7e:f2:fc:02:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  2 13:36:42 2025 GMT
            Not After : Dec  1 13:41:42 2026 GMT
        Subject: CN=60492EF363CCBEBD72926A28053650F83D65CC29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e5:4d:40:fc:b9:ab:6b:f7:e2:97:68:1b:61:
                    ec:2e:16:97:10:e8:68:f0:0d:f7:26:74:d7:92:3b:
                    ac:a5:fb:62:81:0d:25:0b:ad:f7:f7:47:3d:dc:75:
                    3b:e0:36:27:c8:13:93:9c:80:56:98:48:8c:fc:8f:
                    a1:be:17:aa:db:3e:1f:6f:02:87:9c:0a:18:68:46:
                    34:ea:14:23:96:e2:a7:ba:dd:a4:b1:98:92:b4:fe:
                    13:3b:65:ef:da:98:b8:1f:a2:5d:d3:67:25:bf:64:
                    e3:03:84:8a:33:c8:35:fe:78:a6:57:a1:91:5a:d5:
                    bb:31:eb:05:6c:43:79:37:57:12:95:ba:52:3c:a2:
                    51:2c:0f:e3:4b:a0:79:c1:44:5c:54:70:af:87:48:
                    d7:51:5a:97:5a:9a:7a:cf:3b:f7:25:74:50:e1:c7:
                    69:21:05:26:79:f6:4e:a2:9d:c7:38:0f:22:4c:cc:
                    6b:d9:9d:01:e1:34:28:58:63:ed:44:e3:b0:1c:17:
                    14:3c:b9:45:c0:d6:e1:80:2b:10:07:9f:87:26:e4:
                    81:a4:03:c0:75:f0:da:eb:5e:11:5d:da:1f:25:8c:
                    5e:ad:1e:34:9d:2c:2e:02:75:4a:3e:99:7f:5d:06:
                    62:96:ac:2f:bb:91:9c:a2:3c:07:7e:82:b1:83:1d:
                    19:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                60:49:2E:F3:63:CC:BE:BD:72:92:6A:28:05:36:50:F8:3D:65:CC:29
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4nnrsZCMu8fwsJkaZDVSWBPeDT2nUVapoVrC2j7JT2TC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4nnrsZCMu8fwsJkaZDVSWBPeDT2nUVapoVrC2j7JT2TC/0/60492EF363CCBEBD72926A28053650F83D65CC29.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.184.0/22
                IPv6:
                  2804:227c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264104

    Signature Algorithm: sha256WithRSAEncryption
         92:9f:9f:15:80:06:16:ae:99:84:9b:74:db:8a:5f:ff:44:cb:
         11:df:c3:8f:5f:30:b0:a8:50:91:8d:d7:18:a9:46:47:aa:c2:
         a1:75:4d:2a:9d:37:b3:9a:68:1c:74:ec:11:5d:cd:1f:c1:5c:
         77:46:bb:48:f9:b6:b8:68:65:d9:cb:58:8a:12:1e:79:3f:64:
         95:20:a8:51:38:70:89:a7:2f:b0:e4:5b:05:76:24:98:10:9c:
         70:2b:fd:a1:0b:c2:14:c4:31:f1:a6:3c:32:78:3f:62:af:aa:
         88:20:70:21:39:03:1a:6d:01:3d:44:14:fe:c8:8f:a0:87:77:
         60:76:da:65:01:55:80:fb:e8:10:e6:a6:05:80:af:dc:9e:72:
         a4:a2:80:d8:b5:4d:e9:9e:a1:28:a5:64:3e:e0:66:b7:0a:8a:
         65:0d:06:ae:e6:6e:b9:fc:14:2b:f0:40:f9:54:5f:81:7d:9c:
         36:e1:9c:7d:8b:7a:ba:fd:57:a6:df:4a:a5:55:c6:52:c8:59:
         2a:9f:44:a9:ae:69:26:3c:3c:e0:05:14:94:03:87:75:16:0c:
         88:0f:87:5f:3b:aa:b8:fd:02:2b:38:cd:22:f4:a3:44:04:58:
         10:02:d5:b9:a8:70:e9:93:b8:81:f1:f2:4c:42:ff:00:13:83:
         b5:cf:13:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----