This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.cer
File:                     8F4C8CA3FDA8BF306949F8978F69041FE55BA994.cer (raw, json)
Hash identifier:          bfMXf20xVomIIleev2yKMwCxmOwxU/u6TylU9mBPAfk=
Subject key identifier:   8F:4C:8C:A3:FD:A8:BF:30:69:49:F8:97:8F:69:04:1F:E5:5B:A9:94
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       086918075FEF57F89EC8EACAB575910E4328FC3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Nov 2025 18:10:11 +0000
Certificate not after:    Thu 12 Nov 2026 18:15:11 +0000
Subordinate resources:    AS: 271263
                          IP: 177.85.8.0/22
                          IP: 2804:78c0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:69:18:07:5f:ef:57:f8:9e:c8:ea:ca:b5:75:91:0e:43:28:fc:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 13 18:10:11 2025 GMT
            Not After : Nov 12 18:15:11 2026 GMT
        Subject: CN=8F4C8CA3FDA8BF306949F8978F69041FE55BA994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7a:04:18:7c:c4:a1:80:68:02:c1:73:de:9e:
                    9e:aa:02:09:81:aa:6d:0e:20:b8:19:28:aa:51:02:
                    a1:b5:03:0b:d7:00:c7:23:0d:87:9b:7d:dc:13:34:
                    66:9f:7c:f0:ba:ce:83:b6:3d:d3:c2:f8:45:0d:7e:
                    7c:4c:79:6d:04:01:66:47:16:2d:9d:55:4a:0b:db:
                    80:0e:26:e4:3c:00:7c:7b:6d:7d:35:8a:e1:dc:21:
                    e4:94:05:62:be:2d:bc:cf:94:1d:9c:63:13:dd:89:
                    01:95:38:42:59:35:04:57:c7:93:3f:f2:56:b4:92:
                    38:97:d8:c6:20:4b:88:93:f4:c8:9f:c4:c9:b0:81:
                    45:55:e2:07:fb:dd:d8:5e:a4:7b:31:4f:70:37:e6:
                    22:22:30:24:21:61:04:d7:f1:a1:ba:70:9b:ab:9c:
                    85:85:83:c7:f5:59:b2:80:33:a9:7e:8c:1c:20:dc:
                    c6:5d:58:3b:66:a8:bd:aa:d9:3b:83:f2:fd:1d:ec:
                    c2:46:50:fc:1b:31:98:97:a3:8b:7a:fc:8f:3b:74:
                    c1:ca:e0:d2:0b:a1:99:c6:d5:e9:4c:8a:84:b0:3f:
                    a0:45:49:a0:01:6e:9e:00:a2:3c:23:44:49:6a:f1:
                    bb:8f:bb:c3:0d:39:45:ee:a8:f0:31:92:81:8f:65:
                    26:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:4C:8C:A3:FD:A8:BF:30:69:49:F8:97:8F:69:04:1F:E5:5B:A9:94
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.8.0/22
                IPv6:
                  2804:78c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271263

    Signature Algorithm: sha256WithRSAEncryption
         37:7e:29:f8:6d:86:e7:ff:df:80:e5:68:7a:4c:d9:fe:34:69:
         7c:22:76:36:a5:f3:ce:da:59:40:0d:2a:bd:9b:11:c3:1f:80:
         35:67:04:74:eb:bf:84:12:2f:6a:f8:f0:61:27:7a:8a:72:01:
         fc:27:15:ed:89:33:20:10:f2:31:5d:39:66:87:ab:e2:02:87:
         e5:fb:7a:73:38:b7:96:fb:15:dd:44:b4:74:d2:e5:dc:91:f3:
         d9:c1:02:67:c8:8b:b7:4e:cb:bd:47:84:76:14:80:fe:19:5e:
         95:46:36:06:fd:b8:70:c0:7e:24:81:eb:41:ce:db:5c:63:4b:
         d2:fd:12:51:95:1e:52:81:f7:0b:5a:aa:e4:2c:c6:b6:25:f3:
         af:ca:29:5d:94:f4:b4:f3:8f:e5:ed:1f:81:62:f3:6d:92:99:
         8f:db:3d:54:20:c4:69:43:b8:3c:30:3d:86:92:50:69:ab:c4:
         56:a4:ca:29:75:76:93:0e:64:98:a7:82:7d:b4:79:47:98:29:
         df:8f:aa:a1:d7:0f:d3:e6:f3:1f:a3:1d:2c:d8:f7:7c:14:7e:
         d7:ae:00:9b:36:90:7c:97:8f:03:5a:c0:a1:a6:3f:4e:9a:ec:
         a0:39:21:bc:54:35:73:e7:8a:aa:87:37:19:9d:29:dd:18:fa:
         9f:1b:32:e0
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUCGkYB1/vV/ieyOrKtXWRDkMo/D0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTExMTMxODEwMTFaFw0yNjExMTIxODE1MTFaMDMxMTAvBgNV
BAMTKDhGNEM4Q0EzRkRBOEJGMzA2OTQ5Rjg5NzhGNjkwNDFGRTU1QkE5OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqegQYfMShgGgCwXPenp6qAgmB
qm0OILgZKKpRAqG1AwvXAMcjDYebfdwTNGaffPC6zoO2PdPC+EUNfnxMeW0EAWZH
Fi2dVUoL24AOJuQ8AHx7bX01iuHcIeSUBWK+LbzPlB2cYxPdiQGVOEJZNQRXx5M/
8la0kjiX2MYgS4iT9MifxMmwgUVV4gf73dhepHsxT3A35iIiMCQhYQTX8aG6cJur
nIWFg8f1WbKAM6l+jBwg3MZdWDtmqL2q2TuD8v0d7MJGUPwbMZiXo4t6/I87dMHK
4NILoZnG1elMioSwP6BFSaABbp4AojwjRElq8buPu8MNOUXuqPAxkoGPZSZ9AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSPTIyj/ai/MGlJ
+JePaQQf5VuplDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNHRQ
bkxydER0cUFpQnJBY25xTk5rb3hWSjJndjV2ZjdGNXNHRnpYYnM4eksvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzR0
UG5McnREdHFBaUJyQWNucU5Oa294VkoyZ3Y1dmY3RjVzR0Z6WGJzOHpLLzAvOEY0
QzhDQTNGREE4QkYzMDY5NDlGODk3OEY2OTA0MUZFNTVCQTk5NC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCsVUIMA0EAgACMAcDBQAoBHjAMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQjnzANBgkqhkiG9w0BAQsFAAOCAQEAN34p+G2G5//fgOVo
ekzZ/jRpfCJ2NqXzztpZQA0qvZsRwx+ANWcEdOu/hBIvavjwYSd6inIB/CcV7Ykz
IBDyMV05Zoer4gKH5ft6czi3lvsV3US0dNLl3JHz2cECZ8iLt07LvUeEdhSA/hle
lUY2Bv24cMB+JIHrQc7bXGNL0v0SUZUeUoH3C1qq5CzGtiXzr8opXZT0tPOP5e0f
gWLzbZKZj9s9VCDEaUO4PDA9hpJQaavEVqTKKXV2kw5kmKeCfbR5R5gp34+qodcP
0+bzH6MdLNj3fBR+164AmzaQfJePA1rAoaY/TprsoDkhvFQ1c+eKqoc3GZ0p3Rj6
nxsy4A==
-----END CERTIFICATE-----