This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6384D4006D3443D42FA3A029B5FCD10A35D42A1B.cer
File:                     6384D4006D3443D42FA3A029B5FCD10A35D42A1B.cer (raw, json)
Hash identifier:          2ny30pGR66diNJ9YjKwUu8k37HvQ+o9bOmVeB85ldh8=
Subject key identifier:   63:84:D4:00:6D:34:43:D4:2F:A3:A0:29:B5:FC:D1:0A:35:D4:2A:1B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1A5191DB4C35D4B820F0D3E0B26D2863B110C3CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9bdC7SmuA1gvWsxCXCWERzw63F1UamwDGTbKD4CcU2an/0/6384D4006D3443D42FA3A029B5FCD10A35D42A1B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9bdC7SmuA1gvWsxCXCWERzw63F1UamwDGTbKD4CcU2an/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 19 Nov 2025 01:35:50 +0000
Certificate not after:    Wed 18 Nov 2026 01:40:50 +0000
Subordinate resources:    AS: 274782
                          IP: 181.233.95.0/24
                          IP: 2804:9384::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:51:91:db:4c:35:d4:b8:20:f0:d3:e0:b2:6d:28:63:b1:10:c3:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 19 01:35:50 2025 GMT
            Not After : Nov 18 01:40:50 2026 GMT
        Subject: CN=6384D4006D3443D42FA3A029B5FCD10A35D42A1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e1:97:b0:7e:74:13:a6:77:eb:f1:e5:57:26:
                    66:bd:cd:82:90:b8:e5:fd:c7:33:33:b1:3a:a9:c0:
                    03:bc:0d:77:4a:10:61:10:0f:e5:85:e0:1f:cf:5a:
                    f0:2a:1a:97:d5:b6:da:f8:ed:02:43:48:4a:13:47:
                    5c:e2:f8:34:e1:8f:d1:79:23:c7:7f:45:ba:3c:65:
                    48:d2:5f:c0:b9:3e:ea:5e:2d:9d:a5:33:94:34:44:
                    4e:68:12:b3:00:e6:aa:ab:4e:f0:1c:26:9d:07:24:
                    7d:a5:4a:53:77:e3:78:b2:12:43:ee:9c:a3:20:24:
                    e7:b5:e4:1a:52:67:45:1f:26:e2:1e:d1:8b:e3:a7:
                    15:d6:b6:3a:8b:57:fd:b6:67:45:38:81:fd:2c:8a:
                    36:bd:8b:cc:3f:c0:74:c4:86:36:e2:9b:4e:3d:75:
                    e7:65:e0:1b:4a:12:0b:84:46:d1:2c:9b:81:0d:66:
                    95:ec:b8:be:f9:ce:10:02:52:90:a3:f9:f2:c5:16:
                    fc:44:fd:59:84:b0:3f:2a:e7:d5:91:3a:fc:74:03:
                    02:7e:b3:fa:28:5d:e3:d8:1f:ef:fe:9c:cd:88:d2:
                    17:4b:52:7e:2c:64:2b:fc:8a:68:21:9c:8c:a1:63:
                    cb:22:81:48:53:6b:b1:82:f7:c5:1a:bb:f0:8f:99:
                    67:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                63:84:D4:00:6D:34:43:D4:2F:A3:A0:29:B5:FC:D1:0A:35:D4:2A:1B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9bdC7SmuA1gvWsxCXCWERzw63F1UamwDGTbKD4CcU2an/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9bdC7SmuA1gvWsxCXCWERzw63F1UamwDGTbKD4CcU2an/0/6384D4006D3443D42FA3A029B5FCD10A35D42A1B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.95.0/24
                IPv6:
                  2804:9384::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274782

    Signature Algorithm: sha256WithRSAEncryption
         31:83:c8:59:fc:07:0f:95:4f:53:09:9d:12:42:c9:46:fe:fd:
         82:8e:98:6d:79:ea:42:8c:4a:40:b8:f4:8f:04:f1:1c:24:8a:
         57:a8:17:36:82:3e:f8:79:11:98:d1:c5:af:6a:cf:8f:5b:ad:
         ec:ff:40:0c:52:7d:01:4a:c4:28:3e:c8:a2:f4:73:4a:9d:12:
         10:d0:f6:50:67:5f:36:64:bc:00:4b:d0:d5:1e:a9:a0:a8:7b:
         14:ba:c7:bc:e7:f8:05:f2:2d:d3:0e:ba:ff:b4:c8:f8:69:c8:
         47:c7:ec:00:7e:70:e8:39:17:66:79:ea:3f:96:83:63:be:fc:
         70:d6:90:f2:a6:c8:3a:03:30:5d:9e:30:62:b9:13:bd:ff:90:
         4b:b1:82:ff:d9:9c:3e:fd:d9:67:1f:17:2f:19:cf:c3:4c:0b:
         1e:17:d2:50:a9:3b:17:9e:0a:c6:e7:59:1d:93:3d:e8:d7:51:
         66:66:9b:53:8c:a2:d3:d6:db:22:39:61:21:e7:d8:f4:e9:9d:
         24:a8:4b:5f:43:81:2b:e5:12:bc:e2:0e:ad:96:de:44:72:cc:
         a7:eb:3c:e1:65:9a:87:cf:8b:68:60:44:98:a2:91:47:ed:c4:
         c2:e3:fe:a1:89:38:92:15:43:ae:7c:ec:a5:7c:7c:91:3a:5f:
         18:b6:cf:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----