This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer
File:                     BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer (raw, json)
Hash identifier:          4OuO3aXq0amdqTzrMXYs/4SR/uRNK9nio2ZoG1LJMX0=
Subject key identifier:   BD:C3:52:CC:4E:CC:E3:25:FD:37:EC:E7:83:E4:C5:42:0B:23:C5:03
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0DE055D5D6AA64333778C3C39D92EA6ED82ACAE4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Nov 2025 11:32:32 +0000
Certificate not after:    Mon 23 Nov 2026 11:37:32 +0000
Subordinate resources:    AS: 28306
                          IP: 177.91.176.0/20
                          IP: 177.200.96.0/20
                          IP: 187.94.80.0/20
                          IP: 189.38.0.0/20
                          IP: 2804:34::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e0:55:d5:d6:aa:64:33:37:78:c3:c3:9d:92:ea:6e:d8:2a:ca:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 24 11:32:32 2025 GMT
            Not After : Nov 23 11:37:32 2026 GMT
        Subject: CN=BDC352CC4ECCE325FD37ECE783E4C5420B23C503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:88:f1:40:05:df:38:e6:0a:7b:cd:9b:f0:29:
                    1e:ce:56:ff:98:96:e2:a3:52:d5:35:d2:cd:e4:8a:
                    a9:16:dd:95:bf:fa:25:21:5e:14:94:08:c5:f1:b4:
                    c6:ff:48:a4:f6:6f:fe:f1:d3:23:51:10:0b:0d:59:
                    b7:c6:52:bc:0b:8f:f7:10:3e:f3:36:c0:1f:5c:eb:
                    49:5e:a9:fe:8d:b7:83:f6:74:7e:d7:0c:1e:91:26:
                    ff:78:2f:00:e8:ff:c1:76:21:1d:fe:af:0a:ba:73:
                    ed:67:ca:6a:94:ac:70:54:28:b4:eb:30:03:00:7f:
                    c4:d8:83:e4:c4:f7:6b:48:5e:5c:56:22:cc:20:87:
                    e9:06:e4:6e:fa:ad:0a:1b:4a:d2:08:f9:7d:5e:e3:
                    1d:36:9c:1e:00:7e:79:69:38:09:57:3e:23:05:f8:
                    35:e2:bd:06:71:e5:0c:ff:b6:84:84:7f:fc:c2:de:
                    53:3d:d9:5c:d2:05:51:7c:1a:9a:ec:b6:2b:0c:16:
                    e3:14:eb:7a:19:8f:a7:45:a2:57:33:26:c2:30:fe:
                    2a:c0:6c:91:1f:13:4a:d1:ac:6a:3e:8d:77:fc:6e:
                    3c:b6:f2:a8:13:7c:07:e8:ea:6f:35:0f:40:44:f4:
                    1a:72:de:0b:16:72:83:8d:ba:4d:df:68:af:e6:e5:
                    69:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:C3:52:CC:4E:CC:E3:25:FD:37:EC:E7:83:E4:C5:42:0B:23:C5:03
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.176.0/20
                  177.200.96.0/20
                  187.94.80.0/20
                  189.38.0.0/20
                IPv6:
                  2804:34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28306

    Signature Algorithm: sha256WithRSAEncryption
         b7:f8:68:37:5e:4e:ab:9e:eb:55:60:f9:32:83:ca:c6:b6:96:
         b2:eb:3d:3c:a8:18:c8:14:ee:96:c0:24:58:71:74:10:89:76:
         21:4f:f6:e7:41:8b:e3:d7:82:b0:0f:c2:37:16:55:65:d5:a9:
         6d:54:f4:0a:21:c3:e1:4b:23:a3:95:05:66:59:16:09:93:f6:
         19:ae:53:bb:28:cc:9a:a7:a1:3d:11:3b:bc:c8:7e:05:0b:58:
         10:35:51:e6:48:dc:61:3d:6f:1b:85:f9:79:37:d5:df:ee:92:
         93:fc:5c:9b:27:3f:9e:06:5d:1c:42:8a:18:c5:c7:4a:4a:31:
         2c:4d:0e:2c:a1:c8:7d:a7:fe:1e:db:06:81:e6:c2:57:2f:7d:
         26:2e:5e:87:0e:07:74:cf:84:32:89:1a:d5:e0:dd:3e:17:6e:
         16:ab:8c:7c:92:d7:a3:d1:70:3f:0a:c9:93:55:4d:d5:54:42:
         ca:29:e8:f8:d7:9d:fa:db:1c:5d:b5:01:00:fe:77:82:d4:ef:
         bf:d4:bb:4a:18:56:e1:f6:1f:fe:cf:ae:a2:7c:93:99:d2:cc:
         c5:0a:61:f2:b0:9b:36:19:07:b7:ad:6b:72:12:96:e0:f8:3d:
         cd:16:d0:73:bf:fb:cb:29:39:87:f1:36:1e:ce:af:31:39:25:
         ae:55:5a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:38:10 2025 by rpki-client