This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B558F6219859A6C785E4275ABE0738E504D862DF.cer
File:                     B558F6219859A6C785E4275ABE0738E504D862DF.cer (raw, json)
Hash identifier:          LTpsZ3G7Hu2NA4KOi/hJkPiEQ1ib9RqaBNW4as3s/Ik=
Subject key identifier:   B5:58:F6:21:98:59:A6:C7:85:E4:27:5A:BE:07:38:E5:04:D8:62:DF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4EAE9517C2F0F0CB3C44DFDBCCA16F477D9CE143
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/B558F6219859A6C785E4275ABE0738E504D862DF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Nov 2025 15:22:46 +0000
Certificate not after:    Fri 20 Nov 2026 15:27:46 +0000
Subordinate resources:    AS: 264592
                          IP: 200.170.76.0/22
                          IP: 2804:221c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ae:95:17:c2:f0:f0:cb:3c:44:df:db:cc:a1:6f:47:7d:9c:e1:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 21 15:22:46 2025 GMT
            Not After : Nov 20 15:27:46 2026 GMT
        Subject: CN=B558F6219859A6C785E4275ABE0738E504D862DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b2:25:e5:86:cc:c3:e7:82:17:25:b5:8f:f2:
                    ff:02:52:b4:7f:9c:d3:e3:dd:7c:1a:11:6d:e2:e5:
                    61:1e:4f:a7:3f:9d:c7:ea:db:ca:40:e6:a8:87:64:
                    74:f0:f8:2a:db:44:2d:f3:53:76:44:dd:6c:4f:36:
                    a9:a3:a9:bd:c6:e4:28:ab:ab:a4:0c:7e:a6:9a:c1:
                    4a:ad:e6:49:f7:85:40:cb:c0:54:d5:07:69:9c:ee:
                    50:02:b0:40:62:5e:9d:77:1b:c0:7c:29:8f:d3:5a:
                    94:78:2e:e6:32:e5:a8:8d:c8:4e:4a:ca:99:e1:73:
                    0f:ba:fc:30:66:10:af:a8:7b:6d:cf:f6:bd:e1:d7:
                    84:87:09:ae:c6:4c:3f:0f:a6:81:98:7b:fa:97:95:
                    25:b2:39:41:db:0f:63:d5:dd:c9:8d:3e:a8:94:77:
                    40:6f:d7:a2:ec:42:d1:b0:f1:7d:6c:51:82:88:6e:
                    75:2f:6f:f9:30:24:c0:86:89:f0:da:b6:64:75:c6:
                    be:8f:1c:eb:9b:74:9a:b7:b5:87:7f:5c:e2:32:3e:
                    40:1f:65:54:7f:48:40:7e:17:a7:5a:f2:89:b4:d6:
                    60:22:12:4d:00:1e:0a:d1:ca:83:b5:ea:c1:dc:89:
                    e4:2c:64:a2:3a:df:d2:a4:c1:2d:8b:9e:21:04:3c:
                    08:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B5:58:F6:21:98:59:A6:C7:85:E4:27:5A:BE:07:38:E5:04:D8:62:DF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/B558F6219859A6C785E4275ABE0738E504D862DF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.170.76.0/22
                IPv6:
                  2804:221c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264592

    Signature Algorithm: sha256WithRSAEncryption
         34:f1:19:bb:cb:36:f3:99:7d:f8:e1:2d:68:a2:b6:c0:9f:24:
         53:12:b9:e9:46:eb:eb:21:d0:fb:57:45:d5:94:0d:56:45:0f:
         19:37:37:d7:c5:b2:f7:a2:3d:6a:f7:86:d5:b7:b5:9f:4e:ed:
         3f:98:fb:e4:94:8c:69:c7:39:31:0a:c0:17:c2:e9:8d:f4:30:
         1a:49:da:25:a6:0a:43:a4:83:57:1f:6d:8d:06:33:dc:96:91:
         91:a8:1b:00:29:e0:49:1e:dd:45:f5:6e:b5:cb:2e:aa:0c:30:
         8a:5a:0e:e1:50:63:34:b9:b6:ad:d2:38:03:a1:bd:bd:f4:98:
         a1:f5:7b:6e:59:92:45:52:93:7e:3f:04:ed:4c:ee:4b:51:17:
         21:17:9b:04:6f:58:91:5e:b6:71:d9:0f:82:27:a3:63:e6:ee:
         c3:9f:81:94:67:6d:1e:cb:ec:2a:1c:14:c8:46:28:a0:49:ed:
         17:a2:e0:60:cf:4a:49:bc:9e:6d:b8:e1:bc:7f:f2:a8:10:9c:
         06:6f:5f:5b:df:13:6d:79:e6:45:5d:3c:a8:42:90:f7:46:a8:
         5e:eb:d7:67:1d:6b:31:1a:c9:9e:38:66:37:a5:24:5c:77:6b:
         cf:bc:7e:d9:bc:bd:95:fe:a9:e8:e6:92:db:18:a3:0c:4e:e8:
         39:9e:5e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----