This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8C63D6EE71C18E9A520D6826B7279995D7D05211.cer
File:                     8C63D6EE71C18E9A520D6826B7279995D7D05211.cer (raw, json)
Hash identifier:          xuuHClb+rffIEmxq0ST5olcA0BG36MO1vfCD3qmIunA=
Subject key identifier:   8C:63:D6:EE:71:C1:8E:9A:52:0D:68:26:B7:27:99:95:D7:D0:52:11
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       767D20ADB8968332CED988BBBEE28E85B09353BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/8C63D6EE71C18E9A520D6826B7279995D7D05211.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 15 Nov 2025 08:42:18 +0000
Certificate not after:    Sat 14 Nov 2026 08:47:18 +0000
Subordinate resources:    AS: 17208
                          AS: 28172
                          IP: 189.84.192.0/20
                          IP: 2804:20c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:7d:20:ad:b8:96:83:32:ce:d9:88:bb:be:e2:8e:85:b0:93:53:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 15 08:42:18 2025 GMT
            Not After : Nov 14 08:47:18 2026 GMT
        Subject: CN=8C63D6EE71C18E9A520D6826B7279995D7D05211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9b:c1:95:21:e7:e2:58:e2:73:b6:b7:ee:ab:
                    95:82:3b:99:9f:8b:63:2c:d1:08:2f:28:da:ab:d9:
                    3c:8a:7d:73:37:55:05:97:d6:76:5d:53:90:ed:e3:
                    3d:ca:da:21:74:43:49:07:9d:bb:1e:e8:ec:c0:da:
                    9a:3f:c7:d9:f3:98:5b:b0:90:1d:c4:8a:c3:a1:ea:
                    0d:5a:ce:47:d2:2d:e6:cf:2d:4a:2a:14:35:a2:86:
                    ab:59:4a:b6:e9:b1:1e:31:6e:c4:f7:19:7e:d4:2c:
                    10:b5:e5:4c:c9:a1:98:f6:a9:46:1b:bb:4c:1b:d6:
                    64:7d:e9:b0:c8:73:e6:0d:43:ba:8a:f7:47:de:87:
                    66:19:ac:5a:42:72:52:4c:5f:21:1b:74:12:d8:81:
                    94:82:5f:89:78:b8:41:2f:e7:e7:e1:bc:0c:b8:ec:
                    67:22:1a:fe:ae:d7:d1:87:d7:a0:bc:bb:05:cf:2e:
                    24:15:b5:fe:15:c8:7b:da:d8:bd:db:55:15:11:9c:
                    63:50:74:18:6b:2d:28:5d:f7:8d:a1:ee:09:5b:56:
                    8b:91:ea:5f:df:a5:29:a7:f2:e1:14:18:76:ca:20:
                    47:04:9c:f7:94:95:66:ab:da:31:17:48:e5:22:38:
                    8b:a4:c7:85:a9:f2:1d:b0:c2:0d:bf:9e:51:46:16:
                    74:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:63:D6:EE:71:C1:8E:9A:52:0D:68:26:B7:27:99:95:D7:D0:52:11
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BjC62kp4hDR6egnSJcjYN4BRxP9d4NBXjZsxUzKNNQmb/0/8C63D6EE71C18E9A520D6826B7279995D7D05211.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.192.0/20
                IPv6:
                  2804:20c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17208
                  28172

    Signature Algorithm: sha256WithRSAEncryption
         27:b6:01:3c:05:91:91:64:56:be:2d:4f:e4:3a:f6:63:38:fd:
         68:93:91:1b:d4:5a:45:3a:6a:3b:d0:24:4f:b7:5d:ae:b1:16:
         90:cf:d9:3e:e3:bf:49:8f:01:8d:8f:58:d4:59:43:20:18:35:
         d7:10:c5:b3:11:3b:9f:52:7b:b4:6b:c9:9f:48:6b:27:f6:8f:
         20:b4:3d:eb:12:ab:5a:1c:50:e0:69:3a:59:bb:ca:ff:1c:cf:
         c3:29:55:5a:ad:67:7c:05:0b:64:1d:18:7f:d1:d5:cb:18:a7:
         e0:33:de:26:47:3c:fc:f7:23:b0:4b:a9:d0:f9:66:79:6e:be:
         b2:9b:ef:d7:f5:80:af:05:be:75:98:d9:f7:e2:29:45:44:e6:
         cc:1d:d2:fa:bd:ff:ba:28:47:c5:8a:93:f1:02:5f:fd:e9:b7:
         0b:e6:98:21:c3:ec:10:2b:34:54:ef:02:ae:8d:9d:1f:ec:d7:
         25:91:3b:e3:58:a0:39:05:23:d4:d7:a4:63:78:bb:60:c0:df:
         74:d9:98:96:34:a6:3d:ce:ba:11:01:97:96:ac:39:2d:ee:7f:
         f5:64:3d:1a:de:68:e6:a4:6d:e2:3b:95:45:c1:1c:f2:66:4c:
         98:d2:fb:0a:3b:72:72:47:e7:98:a8:05:28:83:97:0e:20:00:
         ad:59:26:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----