This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/99C2A53A53B7161516985068CD39F465FE646938.cer
File:                     99C2A53A53B7161516985068CD39F465FE646938.cer (raw, json)
Hash identifier:          gClalZWcC+x0BRKaarP4bIHwV4bC6yh7UbxNS3uRv6A=
Subject key identifier:   99:C2:A5:3A:53:B7:16:15:16:98:50:68:CD:39:F4:65:FE:64:69:38
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5AC89EF6C4E32F8842DEECF2099C5D9554B5C60B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Nov 2025 17:51:00 +0000
Certificate not after:    Mon 23 Nov 2026 17:56:00 +0000
Subordinate resources:    AS: 28232
                          IP: 189.127.32.0/20
                          IP: 2804:7ed8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 20:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c8:9e:f6:c4:e3:2f:88:42:de:ec:f2:09:9c:5d:95:54:b5:c6:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 24 17:51:00 2025 GMT
            Not After : Nov 23 17:56:00 2026 GMT
        Subject: CN=99C2A53A53B7161516985068CD39F465FE646938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:20:92:f1:6d:df:bc:6f:ec:f8:22:6e:b9:24:
                    04:4d:02:2c:f8:8b:ab:74:7c:aa:e9:f9:71:fa:a6:
                    af:cc:e9:1a:15:a9:a0:45:ca:a6:91:f3:5c:f4:51:
                    65:f7:67:b5:fd:2b:03:37:e3:48:68:81:db:6d:d4:
                    ab:e1:c1:8d:e6:22:12:ba:bf:d6:83:0d:d1:6c:d9:
                    07:34:ac:d4:33:c3:59:6f:b4:a2:e5:62:c4:b9:a1:
                    bd:34:d8:28:07:a1:19:cd:c6:80:bb:bb:95:e1:70:
                    3b:57:3f:90:fe:fb:39:d6:9a:48:42:23:b9:7e:dd:
                    2b:79:41:db:68:ad:20:09:54:2b:4b:43:cf:c8:f9:
                    d4:69:84:8a:6e:4f:01:7b:b6:e8:d7:09:c2:bc:2a:
                    d9:f4:ba:d1:b6:c8:9a:b1:a0:2d:ec:ef:b7:00:be:
                    c3:ea:45:1e:e3:0d:f3:ae:92:1e:c5:e9:9e:e7:84:
                    46:6c:26:33:9f:5f:2a:23:e7:2a:3d:14:4e:e3:99:
                    7f:b0:3f:75:da:13:d1:04:1f:b1:01:e7:b7:af:24:
                    a7:cb:4a:4e:f0:44:5e:1a:d1:2f:74:68:ec:91:39:
                    d9:31:e3:88:33:13:22:90:5f:cd:eb:96:7e:70:d2:
                    7d:3d:73:58:cb:06:19:89:7f:56:4f:65:35:9c:8b:
                    e5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:C2:A5:3A:53:B7:16:15:16:98:50:68:CD:39:F4:65:FE:64:69:38
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.32.0/20
                IPv6:
                  2804:7ed8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28232

    Signature Algorithm: sha256WithRSAEncryption
         47:a3:33:b8:d6:84:cd:60:a3:d8:fc:e0:da:ac:c0:59:d7:33:
         ab:7f:35:67:8c:87:eb:7c:28:ec:6c:11:92:81:9b:d0:6e:25:
         99:01:8f:c4:32:02:03:1f:a8:31:89:c5:aa:01:99:85:38:05:
         29:d6:6c:50:ae:84:90:43:29:11:11:fd:37:01:ad:40:24:3f:
         db:b0:24:a6:ff:95:e8:16:f1:73:e1:9f:67:1a:af:b3:8a:46:
         e5:f1:19:a9:d8:be:f7:6e:fb:5c:1f:0a:bc:92:c2:82:e0:45:
         7f:fb:a8:a9:02:dc:37:ba:8a:db:63:27:3c:f9:97:5d:89:e1:
         5a:cb:c7:c0:e8:99:55:7e:f5:c9:6f:59:d4:02:80:e1:ae:08:
         3a:50:57:be:d4:4f:12:22:2e:ea:f6:8a:34:69:a9:16:11:3b:
         81:b3:02:28:59:46:55:d5:7d:0d:69:d8:0e:e6:75:eb:3c:e8:
         12:3d:0f:8f:50:25:6f:94:5b:d0:b8:34:dc:77:cd:dc:c0:cd:
         cc:84:43:2c:04:22:42:55:e5:e4:7b:27:d5:75:2a:51:7c:24:
         75:3e:d3:1a:9f:44:6e:41:10:5c:5e:63:5a:49:c7:eb:71:ee:
         18:63:33:e6:3d:34:c0:14:74:fa:d2:68:b7:99:87:3a:e8:03:
         eb:13:0f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----