This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer
File:                     B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.cer (raw, json)
Hash identifier:          6doc6hMG3lh0LeXshUWVqrrfUTt5xU6tZC6r1M3zetI=
Subject key identifier:   B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3D32E4ADDC35FA9DDDF54191CDFB409DAB036972
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.mft
caRepository:             rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Nov 2025 17:04:32 +0000
Certificate not after:    Mon 16 Nov 2026 17:09:32 +0000
Subordinate resources:    AS: 263290
                          IP: 170.150.208.0/22
                          IP: 201.7.164.0/22
                          IP: 2804:1688::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:32:e4:ad:dc:35:fa:9d:dd:f5:41:91:cd:fb:40:9d:ab:03:69:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 17 17:04:32 2025 GMT
            Not After : Nov 16 17:09:32 2026 GMT
        Subject: CN=B5DD83CDECC180B0CAEFBD3475926BF7757A4F96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bc:80:11:8c:3a:14:9d:bf:2e:c5:75:a1:9a:
                    99:6d:9c:c9:3c:55:58:6a:6c:64:05:de:8e:0e:4f:
                    15:d2:29:bc:c1:e0:47:91:04:04:6a:17:7d:23:79:
                    b9:03:35:94:05:48:c6:bb:59:e8:54:c5:c1:e3:66:
                    30:7d:53:c1:3b:db:5d:4c:39:75:30:99:a5:0b:84:
                    e9:0e:4f:a5:75:5e:f0:9a:a3:12:26:36:09:06:51:
                    0b:1d:ed:f3:18:c9:46:71:c0:a3:f3:c8:94:ce:31:
                    5c:05:00:4d:78:7e:83:5c:67:b2:a6:12:c6:63:c5:
                    ea:c4:78:a8:52:4d:eb:cd:f3:cc:df:2a:70:d2:45:
                    af:9d:63:87:01:16:1f:83:1e:58:54:04:0f:6a:bb:
                    b2:42:a0:7a:b6:69:4b:0d:c8:b6:77:1d:36:55:1a:
                    ae:26:5f:8f:fb:d3:1f:f3:fe:4d:e8:32:23:57:7f:
                    1d:52:34:9f:cf:d4:3c:c3:ef:3e:27:2a:26:47:51:
                    42:c1:66:28:4d:6e:15:9f:89:61:4f:6f:78:57:a2:
                    0a:10:31:3f:2c:85:ac:87:80:76:82:41:24:a1:19:
                    7f:61:44:ba:f9:c5:c9:e5:01:40:58:a4:41:9f:76:
                    6e:72:a1:a0:ea:e5:fa:3b:56:20:6a:1d:23:20:54:
                    f2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B5:DD:83:CD:EC:C1:80:B0:CA:EF:BD:34:75:92:6B:F7:75:7A:4F:96
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/B5DD83CDECC180B0CAEFBD3475926BF7757A4F96.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.208.0/22
                  201.7.164.0/22
                IPv6:
                  2804:1688::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263290

    Signature Algorithm: sha256WithRSAEncryption
         68:8b:bf:bc:02:9c:f9:b5:4c:58:1f:58:8a:a1:95:c7:b6:5b:
         b2:41:99:d2:63:e1:c6:ef:d9:ce:b7:bf:5b:94:9b:f9:6c:d6:
         fc:6c:34:ce:62:eb:6c:8c:93:6b:f4:f9:90:71:e8:df:64:35:
         57:49:b7:46:e8:c8:50:38:32:36:5e:4d:04:4f:b0:1e:bc:7f:
         33:97:09:18:bb:9c:f6:21:66:20:d1:e3:2b:1e:f4:93:fa:aa:
         9f:b2:ae:6e:09:14:2e:96:39:cc:d4:a5:39:46:03:23:64:28:
         76:be:7b:01:53:47:25:15:e4:15:7b:8b:16:29:be:a2:11:56:
         88:e4:f2:0a:c9:e1:2a:df:79:5f:94:55:94:da:11:5e:f6:95:
         e7:36:6e:ea:35:32:99:43:3c:8a:13:34:e1:71:d3:9b:e1:30:
         61:94:14:f5:94:3c:ac:d1:3c:3b:ca:c1:9d:29:a8:a6:9f:bb:
         2e:43:a9:fd:5f:43:a4:d3:a0:64:5f:4a:5d:9b:16:79:db:fb:
         da:73:1d:0c:00:6a:dd:c9:3f:40:bd:f8:25:f6:bc:d9:b2:e6:
         22:81:d4:6d:1d:44:8f:69:44:6a:0f:7f:61:c3:12:b8:d6:94:
         67:24:2f:7b:06:e9:7b:81:44:80:16:7d:69:91:e9:81:17:5f:
         a6:d9:12:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:37:07 2025 by rpki-client