This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/60EEB14366167B3674317BA9E6750B9EE81BFBE9.cer
File:                     60EEB14366167B3674317BA9E6750B9EE81BFBE9.cer (raw, json)
Hash identifier:          8GTQ7sfS/dL9VV4hppa+GoHDtobZQgGhZJBvD84KfJQ=
Subject key identifier:   60:EE:B1:43:66:16:7B:36:74:31:7B:A9:E6:75:0B:9E:E8:1B:FB:E9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5161C97CA0FDA91614FA9156983B9C92ECD59701
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/60EEB14366167B3674317BA9E6750B9EE81BFBE9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Nov 2025 11:29:18 +0000
Certificate not after:    Tue 17 Nov 2026 11:34:18 +0000
Subordinate resources:    AS: 28610
                          IP: 186.209.88.0/22
                          IP: 2804:dc0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:61:c9:7c:a0:fd:a9:16:14:fa:91:56:98:3b:9c:92:ec:d5:97:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 18 11:29:18 2025 GMT
            Not After : Nov 17 11:34:18 2026 GMT
        Subject: CN=60EEB14366167B3674317BA9E6750B9EE81BFBE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:69:c1:15:5e:2c:4b:2a:23:6f:16:28:90:8b:
                    58:40:3c:0a:0c:88:d6:9a:04:a4:f8:07:e8:13:dd:
                    2c:36:eb:b9:af:10:a4:ff:68:b7:2f:37:bf:b7:61:
                    ea:40:d6:60:6c:4b:e2:22:84:4c:9e:09:cd:7c:9d:
                    0b:70:8c:37:4a:ae:5b:d4:94:9b:6f:fd:e9:34:12:
                    16:6b:ec:a3:65:9a:7c:d3:db:93:c2:3b:98:4b:a9:
                    01:d5:a1:13:65:d8:a4:1a:a2:7e:42:58:38:d4:81:
                    a3:11:64:63:38:3f:6c:aa:8f:ca:03:e1:d1:eb:b1:
                    9e:08:5b:93:6f:9e:b1:39:0b:bf:38:e6:98:13:40:
                    95:72:54:12:ae:06:20:c2:50:73:c0:30:67:d8:54:
                    75:61:7f:ac:ae:ba:6b:7c:43:ca:04:69:81:f6:b9:
                    a2:9a:b2:17:13:51:de:42:13:b0:9e:0b:fc:e3:9c:
                    41:70:11:d0:cc:70:5b:5c:8a:5e:72:ea:b2:65:52:
                    31:ee:2c:6e:d9:de:8a:46:ab:a5:72:25:49:69:4c:
                    16:c8:f8:d4:63:b1:04:ed:9d:a4:59:f4:5a:d6:76:
                    c1:ea:96:18:1e:a6:aa:52:f2:dc:bb:88:61:42:c9:
                    4b:d2:66:6b:78:fd:61:1a:0a:8d:c4:28:80:49:03:
                    1c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                60:EE:B1:43:66:16:7B:36:74:31:7B:A9:E6:75:0B:9E:E8:1B:FB:E9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/60EEB14366167B3674317BA9E6750B9EE81BFBE9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.88.0/22
                IPv6:
                  2804:dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28610

    Signature Algorithm: sha256WithRSAEncryption
         23:9d:d5:d9:82:6d:ab:11:d7:ba:18:95:b0:7e:c7:0d:96:0c:
         eb:ce:35:71:c2:67:ab:5c:50:2c:8f:36:d3:1a:92:f3:34:ad:
         68:33:54:28:ea:14:c8:c8:b8:fa:0f:93:b9:24:de:b4:98:cc:
         5b:27:68:3a:5d:6b:5c:42:20:df:d8:8f:58:82:ba:ce:b5:85:
         59:79:79:d6:0d:0f:bc:57:04:b6:ad:f2:1b:5c:67:87:d3:27:
         ea:dc:52:08:25:4a:a7:01:83:fd:0e:b9:dd:e9:cf:c4:f1:87:
         08:27:6b:df:ec:3e:f5:fb:57:57:69:83:02:7b:d7:86:4d:e9:
         7d:4e:9f:a1:07:20:33:eb:ed:6f:b7:61:cf:03:89:8a:75:35:
         5f:47:f6:04:2b:2a:3a:ee:8c:d3:0e:61:ec:6c:e2:82:de:a8:
         06:d1:c1:49:d9:df:4e:f1:e9:68:4e:59:76:1b:90:f3:74:23:
         83:3b:25:d9:1d:97:89:43:6b:86:f8:2c:bb:fd:1b:16:6e:39:
         79:34:29:0f:f0:62:96:e7:88:d6:3d:4d:8c:d0:c5:e9:5d:bc:
         c1:9c:3d:4f:96:4f:c0:42:b7:79:37:16:8c:73:86:b3:4f:0e:
         72:f3:d8:11:42:e9:30:27:8d:d3:a1:0e:a9:eb:b8:07:ee:24:
         64:2d:7e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----