This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.cer
File:                     A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.cer (raw, json)
Hash identifier:          yyp9Q1kdYT6nF8WYIvhJr1uoGC5AfEUCTjYCNgUEv7o=
Subject key identifier:   A0:D4:8A:48:1A:FA:B5:F1:D8:DA:16:FD:31:01:AC:40:1F:7A:16:C8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2D5AF3F2911C4B9B9AF89F667BF1503137F953CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Dec 2025 18:20:52 +0000
Certificate not after:    Fri 04 Dec 2026 18:25:52 +0000
Subordinate resources:    AS: 270466
                          IP: 200.106.136.0/22
                          IP: 2804:6c68::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:5a:f3:f2:91:1c:4b:9b:9a:f8:9f:66:7b:f1:50:31:37:f9:53:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  5 18:20:52 2025 GMT
            Not After : Dec  4 18:25:52 2026 GMT
        Subject: CN=A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:b4:c2:91:c3:2b:66:47:58:e2:1b:4c:03:25:
                    dc:e7:fd:31:88:90:40:f9:0e:87:c6:54:7c:05:4e:
                    a6:2a:43:c1:98:5e:27:89:22:3d:3b:25:07:7c:07:
                    9f:b9:a6:47:41:43:80:a1:3c:62:53:a9:3a:6c:91:
                    77:f5:4b:ea:37:d2:d0:65:b7:5c:ab:89:64:48:c9:
                    55:8a:ad:95:72:38:96:8f:f2:fc:e3:5a:aa:17:59:
                    c1:9e:45:a0:0f:c5:a2:ca:0c:61:e4:a7:82:c5:80:
                    a6:29:47:b0:c7:7d:80:20:e3:eb:67:30:ce:41:a4:
                    94:fb:88:20:10:a9:f2:b9:f3:fa:3a:2b:3e:d6:34:
                    a5:e1:92:9c:6e:8d:53:44:54:e0:05:86:dc:e0:49:
                    22:25:e0:72:01:f0:c5:13:25:bd:2d:1d:64:33:e6:
                    29:a2:48:22:a3:ce:3f:e0:5f:ff:dd:93:0f:c3:f2:
                    96:28:62:2e:4a:7b:60:f7:4b:ba:59:64:02:84:80:
                    45:bf:e6:89:92:26:bb:9e:88:3f:82:37:ed:59:ff:
                    62:70:f3:bb:09:c1:b3:c7:b7:fb:99:04:b6:9d:c7:
                    8e:b5:6d:e5:58:4d:d0:fd:a6:e5:4e:f8:5a:02:31:
                    43:9c:c4:17:7a:73:2d:c9:2b:d8:95:ab:c6:c6:0b:
                    79:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:D4:8A:48:1A:FA:B5:F1:D8:DA:16:FD:31:01:AC:40:1F:7A:16:C8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.136.0/22
                IPv6:
                  2804:6c68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270466

    Signature Algorithm: sha256WithRSAEncryption
         c6:6e:71:5b:6e:88:38:e7:71:09:6c:67:5f:85:a4:fd:c6:33:
         d2:db:1a:bd:61:03:e8:1f:6f:f4:a4:98:95:8f:e0:c7:e3:95:
         2c:71:eb:0b:51:4c:da:66:f4:9d:dd:9f:ee:c0:6e:01:38:b4:
         b6:0c:2f:7e:4b:3a:dd:ea:0e:3a:0e:00:89:b7:23:9d:0c:08:
         79:05:49:4f:0f:ff:68:f8:a8:62:ff:06:27:3d:1c:f8:1b:10:
         06:fe:c7:e1:4b:0e:37:cf:56:17:28:86:07:9e:0d:03:36:c7:
         7a:27:04:c8:5c:02:5b:1a:aa:d2:4a:d7:72:35:12:bf:dd:e1:
         b0:b6:d0:e8:6d:ac:57:02:fe:0a:cf:f4:63:b0:5e:68:07:eb:
         87:40:d7:6b:01:93:88:14:91:53:ac:ef:02:92:ff:88:fd:2b:
         e4:df:db:b4:3e:4a:f0:02:16:58:05:fc:a1:c6:dd:f5:3e:f4:
         3a:88:90:e9:7f:86:bc:c6:2d:87:f7:01:88:52:1c:77:8f:48:
         fe:bc:ec:1a:a1:53:33:50:b1:b7:33:5c:e1:e5:dd:ea:8e:55:
         94:d8:c0:d9:74:28:d4:85:88:06:65:94:a8:93:24:a2:f6:81:
         da:2f:47:5e:ab:c2:bf:cc:70:88:5b:e3:e1:af:05:d3:93:c0:
         e7:47:75:88
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIULVrz8pEcS5ua+J9me/FQMTf5U8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEyMDUxODIwNTJaFw0yNjEyMDQxODI1NTJaMDMxMTAvBgNV
BAMTKEEwRDQ4QTQ4MUFGQUI1RjFEOERBMTZGRDMxMDFBQzQwMUY3QTE2QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0tMKRwytmR1jiG0wDJdzn/TGI
kED5DofGVHwFTqYqQ8GYXieJIj07JQd8B5+5pkdBQ4ChPGJTqTpskXf1S+o30tBl
t1yriWRIyVWKrZVyOJaP8vzjWqoXWcGeRaAPxaLKDGHkp4LFgKYpR7DHfYAg4+tn
MM5BpJT7iCAQqfK58/o6Kz7WNKXhkpxujVNEVOAFhtzgSSIl4HIB8MUTJb0tHWQz
5imiSCKjzj/gX//dkw/D8pYoYi5Ke2D3S7pZZAKEgEW/5omSJrueiD+CN+1Z/2Jw
87sJwbPHt/uZBLadx461beVYTdD9puVO+FoCMUOcxBd6cy3JK9iVq8bGC3m1AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSg1IpIGvq18dja
Fv0xAaxAH3oWyDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREE3
TXFyRHBGeDlKazhOOGtHRVpEYjJqaWo4eWd2ZlpuaEN0eFk2QlZBdWEvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RB
N01xckRwRng5Sms4TjhrR0VaRGIyamlqOHlndmZabmhDdHhZNkJWQXVhLzEvQTBE
NDhBNDgxQUZBQjVGMUQ4REExNkZEMzEwMUFDNDAxRjdBMTZDOC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyGqIMA0EAgACMAcDBQAoBGxoMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQggjANBgkqhkiG9w0BAQsFAAOCAQEAxm5xW26IOOdxCWxn
X4Wk/cYz0tsavWED6B9v9KSYlY/gx+OVLHHrC1FM2mb0nd2f7sBuATi0tgwvfks6
3eoOOg4AibcjnQwIeQVJTw//aPioYv8GJz0c+BsQBv7H4UsON89WFyiGB54NAzbH
eicEyFwCWxqq0krXcjUSv93hsLbQ6G2sVwL+Cs/0Y7BeaAfrh0DXawGTiBSRU6zv
ApL/iP0r5N/btD5K8AIWWAX8ocbd9T70OoiQ6X+GvMYth/cBiFIcd49I/rzsGqFT
M1CxtzNc4eXd6o5VlNjA2XQo1IWIBmWUqJMkovaB2i9HXqvCv8xwiFvj4a8F05PA
50d1iA==
-----END CERTIFICATE-----