This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A1094579006C578C3C40E1209D78B293E4001933.cer
File:                     A1094579006C578C3C40E1209D78B293E4001933.cer (raw, json)
Hash identifier:          u0dYiMCitzmavu/yZIAieZCkfuwiZu9TcqzVrCa64bk=
Subject key identifier:   A1:09:45:79:00:6C:57:8C:3C:40:E1:20:9D:78:B2:93:E4:00:19:33
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       01884080CF284871E8DE25F9090951437CDE2FDD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5PEmGmBRijivhAWeVDmxZa86BgJsSaMXNz8hMx268zjP/0/A1094579006C578C3C40E1209D78B293E4001933.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5PEmGmBRijivhAWeVDmxZa86BgJsSaMXNz8hMx268zjP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Nov 2025 10:51:42 +0000
Certificate not after:    Wed 25 Nov 2026 10:56:42 +0000
Subordinate resources:    AS: 271153
                          IP: 177.129.56.0/22
                          IP: 2804:7714::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:40:80:cf:28:48:71:e8:de:25:f9:09:09:51:43:7c:de:2f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 26 10:51:42 2025 GMT
            Not After : Nov 25 10:56:42 2026 GMT
        Subject: CN=A1094579006C578C3C40E1209D78B293E4001933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a5:2b:9f:aa:cf:1d:cd:0b:4a:49:30:29:c5:
                    36:3e:00:48:7b:70:20:ba:4b:99:15:28:38:cf:8c:
                    92:de:46:71:5c:b3:87:25:cb:74:9b:da:e8:dd:ab:
                    97:bc:09:af:d9:e1:57:4d:aa:bc:6c:f1:15:38:42:
                    f5:12:2c:68:7b:ab:31:4f:51:8f:0d:11:8a:7b:21:
                    24:76:f7:4f:52:90:ea:cf:8b:ed:6b:20:c6:d7:82:
                    d0:ab:ef:ba:ed:2c:7b:e9:66:6c:ca:73:3b:57:8c:
                    1a:1c:ce:4e:5e:d3:80:a9:07:bf:ae:4d:97:4e:61:
                    d4:10:1f:33:ad:75:ca:67:f9:f3:d0:f2:34:03:cb:
                    68:6e:f1:e5:ea:ed:7f:cd:b1:f3:4b:81:c9:ea:cf:
                    87:e5:1f:92:01:df:e8:01:47:0f:83:8a:50:62:95:
                    5b:a7:1c:0a:7a:f5:ad:85:c6:b1:86:5c:dd:12:c8:
                    95:aa:36:62:8f:c7:7c:ca:38:25:90:90:83:92:26:
                    f1:28:80:bf:96:05:0b:94:e5:3e:3e:13:2a:a9:0c:
                    9a:4a:cc:e1:2d:db:a0:2c:fc:63:da:3d:94:99:99:
                    65:82:8d:46:e3:2a:a1:2f:91:2e:aa:2a:66:bd:89:
                    cd:22:e2:47:f7:84:52:d8:d9:05:3b:0d:4f:f9:ff:
                    5b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:09:45:79:00:6C:57:8C:3C:40:E1:20:9D:78:B2:93:E4:00:19:33
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5PEmGmBRijivhAWeVDmxZa86BgJsSaMXNz8hMx268zjP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5PEmGmBRijivhAWeVDmxZa86BgJsSaMXNz8hMx268zjP/0/A1094579006C578C3C40E1209D78B293E4001933.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.56.0/22
                IPv6:
                  2804:7714::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271153

    Signature Algorithm: sha256WithRSAEncryption
         9f:6c:dc:b9:82:c3:6a:5f:ec:93:a0:d2:c4:04:0b:8a:b2:d5:
         5a:61:07:c7:89:14:86:78:f9:0d:01:94:c0:75:48:b2:94:fa:
         6b:1a:0a:81:ea:6c:ae:15:ab:2a:18:af:cc:4d:b5:37:d9:c2:
         bf:1c:68:41:1f:f7:3b:38:39:49:26:8f:c3:0a:23:4e:07:f9:
         40:b5:b4:8f:5f:a5:b5:80:aa:c8:f3:0f:62:b4:af:9c:80:6f:
         29:62:fa:33:a8:c9:cd:ef:5b:ca:01:c7:88:f3:6f:e5:6b:87:
         f1:46:ed:34:41:6f:6b:9f:58:f5:c7:54:ae:27:4f:ba:cf:39:
         2e:cf:f2:b4:2e:6f:ab:59:21:76:2c:f2:ff:1c:b8:63:1b:78:
         5e:b5:79:82:43:60:24:b2:d8:b0:92:f8:35:6e:6d:44:5b:4e:
         2c:18:19:ec:65:18:a7:fa:c4:51:f6:65:c3:f5:76:0c:c1:29:
         ae:7b:8c:39:1d:6a:54:e6:cf:f2:60:c2:b1:4b:36:78:55:ae:
         34:74:13:d2:ea:83:91:45:0c:f9:7d:8f:f7:17:b3:09:f0:a3:
         2a:b8:89:e5:83:7f:95:6f:5f:72:7a:71:9d:fa:02:b5:a5:8d:
         f5:21:83:ba:16:17:af:8b:3d:fa:17:42:eb:b5:96:4f:dc:58:
         07:b7:00:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----