This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A37116D5294840CDE4F645377395CD1D8833416A.cer
File:                     A37116D5294840CDE4F645377395CD1D8833416A.cer (raw, json)
Hash identifier:          6szjI7LwwJucb0AKIBiCeSGDtWWZaxXC/ObH0SshT1k=
Subject key identifier:   A3:71:16:D5:29:48:40:CD:E4:F6:45:37:73:95:CD:1D:88:33:41:6A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       62C14D2FD8730AD34BBFA36E5C055C1E06BA95AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/A37116D5294840CDE4F645377395CD1D8833416A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Dec 2025 10:31:18 +0000
Certificate not after:    Mon 30 Nov 2026 10:36:18 +0000
Subordinate resources:    AS: 262851
                          IP: 177.10.144.0/21
                          IP: 177.86.144.0/21
                          IP: 191.240.200.0/21
                          IP: 191.242.112.0/20
                          IP: 2804:1270::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c1:4d:2f:d8:73:0a:d3:4b:bf:a3:6e:5c:05:5c:1e:06:ba:95:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  1 10:31:18 2025 GMT
            Not After : Nov 30 10:36:18 2026 GMT
        Subject: CN=A37116D5294840CDE4F645377395CD1D8833416A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a6:87:5e:ac:17:d3:d5:c6:43:75:b9:61:09:
                    18:ea:df:7e:81:2d:09:dd:1a:7d:7c:ee:cf:28:fa:
                    8b:fb:64:de:72:1c:20:48:57:91:7e:d5:83:86:aa:
                    4e:cd:16:a6:b0:f9:ce:5f:ad:c9:af:ca:a8:bb:30:
                    02:ca:59:18:be:56:99:ce:38:35:06:3a:27:08:2a:
                    74:a5:27:63:5f:1f:8c:a5:40:5e:6d:bb:f9:fb:21:
                    23:32:7a:d5:90:5d:01:ec:cd:ba:a6:08:62:a4:9f:
                    7b:09:f1:24:4c:01:9f:25:4a:fe:35:f7:e3:48:71:
                    08:8a:ea:94:c9:a0:de:cb:96:30:3d:d0:83:81:17:
                    c3:60:80:75:54:34:47:85:a1:f6:b6:74:6c:27:95:
                    94:78:3b:ca:35:78:03:10:d9:9c:a2:30:31:02:1c:
                    f5:6e:f4:f5:44:9d:fe:6d:2e:4b:46:e7:02:88:65:
                    e9:24:fc:f1:50:e7:62:90:74:72:9a:54:8b:52:c6:
                    0e:57:da:6f:7f:10:80:da:89:4a:b9:f1:e9:61:cf:
                    b0:ba:a6:46:1b:e0:3f:63:87:19:5a:58:8d:6b:ae:
                    5a:26:44:70:f8:d0:42:12:ab:ea:1c:fd:69:a4:7d:
                    34:4c:80:98:50:e8:0c:fa:25:74:e3:f3:68:cb:dc:
                    7d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A3:71:16:D5:29:48:40:CD:E4:F6:45:37:73:95:CD:1D:88:33:41:6A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FJy2APg7gkmafh7wmZxrbFMFPZNVrRMX3SqYr2oFg8qD/0/A37116D5294840CDE4F645377395CD1D8833416A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.144.0/21
                  177.86.144.0/21
                  191.240.200.0/21
                  191.242.112.0/20
                IPv6:
                  2804:1270::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262851

    Signature Algorithm: sha256WithRSAEncryption
         a3:92:14:3a:11:23:83:0b:7e:d3:ff:de:1a:4a:d7:5a:ce:6b:
         31:ae:be:ce:76:45:74:d8:49:41:cd:38:72:2e:c7:55:8b:84:
         45:68:c0:b3:79:0f:1e:82:47:d4:81:55:d7:fc:d2:9e:6b:bb:
         ba:21:c2:6f:f2:27:84:5a:9f:99:03:b0:44:93:14:f6:6c:0d:
         12:6e:a2:81:01:c1:ec:01:84:2d:2d:49:13:cd:b6:c3:0d:2a:
         7d:45:f9:53:02:22:d3:6f:99:89:f7:4d:1b:eb:cd:86:a6:01:
         52:93:07:93:82:fe:fb:52:90:06:2d:de:e4:be:3c:09:2c:7d:
         bb:17:78:20:52:30:4a:9b:c5:92:74:70:e0:77:b3:71:81:58:
         99:7b:8b:7c:cd:e5:21:4c:c0:3f:6d:a1:07:0e:7d:25:fc:4a:
         ed:f6:02:31:65:6d:b9:d8:25:c0:2d:2e:90:7d:52:e6:e9:5a:
         cb:9b:0a:51:08:00:71:7d:ee:c7:c8:0a:19:5c:c9:dd:80:bb:
         6a:94:7b:f6:6f:9d:b4:3f:1c:7c:40:d6:6b:d5:55:55:0f:49:
         9c:93:ea:5f:29:ce:59:77:f2:c4:98:1f:66:03:06:6b:5d:d0:
         8d:be:fd:2a:33:a5:06:dc:5c:4f:7e:c0:54:2d:d3:50:15:98:
         87:3a:e5:73
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUYsFNL9hzCtNLv6NuXAVcHga6la4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEyMDExMDMxMThaFw0yNjExMzAxMDM2MThaMDMxMTAvBgNV
BAMTKEEzNzExNkQ1Mjk0ODQwQ0RFNEY2NDUzNzczOTVDRDFEODgzMzQxNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmpoderBfT1cZDdblhCRjq336B
LQndGn187s8o+ov7ZN5yHCBIV5F+1YOGqk7NFqaw+c5frcmvyqi7MALKWRi+VpnO
ODUGOicIKnSlJ2NfH4ylQF5tu/n7ISMyetWQXQHszbqmCGKkn3sJ8SRMAZ8lSv41
9+NIcQiK6pTJoN7LljA90IOBF8NggHVUNEeFofa2dGwnlZR4O8o1eAMQ2ZyiMDEC
HPVu9PVEnf5tLktG5wKIZekk/PFQ52KQdHKaVItSxg5X2m9/EIDaiUq58elhz7C6
pkYb4D9jhxlaWI1rrlomRHD40EISq+oc/WmkfTRMgJhQ6Az6JXTj82jL3H3RAgMB
AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSjcRbVKUhAzeT2
RTdzlc0diDNBajAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkp5
MkFQZzdna21hZmg3d21aeHJiRk1GUFpOVnJSTVgzU3FZcjJvRmc4cUQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZK
eTJBUGc3Z2ttYWZoN3dtWnhyYkZNRlBaTlZyUk1YM1NxWXIyb0ZnOHFELzAvQTM3
MTE2RDUyOTQ4NDBDREU0RjY0NTM3NzM5NUNEMUQ4ODMzNDE2QS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH
AQH/BDEwLzAeBAIAATAYAwQDsQqQAwQDsVaQAwQDv/DIAwQEv/JwMA0EAgACMAcD
BQAoBBJwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQCwzANBgkqhkiG9w0BAQsF
AAOCAQEAo5IUOhEjgwt+0//eGkrXWs5rMa6+znZFdNhJQc04ci7HVYuERWjAs3kP
HoJH1IFV1/zSnmu7uiHCb/InhFqfmQOwRJMU9mwNEm6igQHB7AGELS1JE822ww0q
fUX5UwIi02+ZifdNG+vNhqYBUpMHk4L++1KQBi3e5L48CSx9uxd4IFIwSpvFknRw
4HezcYFYmXuLfM3lIUzAP22hBw59JfxK7fYCMWVtudglwC0ukH1S5ulay5sKUQgA
cX3ux8gKGVzJ3YC7apR79m+dtD8cfEDWa9VVVQ9JnJPqXynOWXfyxJgfZgMGa13Q
jb79KjOlBtxcT37AVC3TUBWYhzrlcw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 06:36:51 2025 by rpki-client