This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C424690F0D40D5A947CD0515B923B426E1FD684B.cer
File:                     C424690F0D40D5A947CD0515B923B426E1FD684B.cer (raw, json)
Hash identifier:          1pNa4/J/0odGqrWH2jedYzCVFsiAMwIvXKSJT+WjVt0=
Subject key identifier:   C4:24:69:0F:0D:40:D5:A9:47:CD:05:15:B9:23:B4:26:E1:FD:68:4B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6A56A074D860BA4738DE34865843EC89430928C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/C424690F0D40D5A947CD0515B923B426E1FD684B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Dec 2025 12:30:22 +0000
Certificate not after:    Fri 11 Dec 2026 12:35:22 +0000
Subordinate resources:    AS: 271175
                          IP: 179.51.176.0/22
                          IP: 2804:7764::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 17:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:56:a0:74:d8:60:ba:47:38:de:34:86:58:43:ec:89:43:09:28:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 12 12:30:22 2025 GMT
            Not After : Dec 11 12:35:22 2026 GMT
        Subject: CN=C424690F0D40D5A947CD0515B923B426E1FD684B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:97:89:d8:4f:1b:35:c3:a5:3b:01:f3:cb:94:
                    96:d8:91:c9:05:40:27:c5:53:86:79:81:e9:cd:d6:
                    e4:77:c0:e5:b2:cb:77:b8:4e:b0:29:46:4b:a7:68:
                    f3:0e:20:65:6d:1a:aa:e2:7e:d3:19:6c:3e:95:55:
                    2f:ea:62:23:51:29:d2:3c:3c:6e:bb:61:8a:df:a9:
                    f2:d5:d8:c0:5f:0a:80:7a:72:b6:7c:3b:44:29:94:
                    5f:8c:43:bc:a7:45:14:dd:8b:c4:ef:4d:ff:ff:cc:
                    cd:19:90:55:15:3d:93:83:b3:ff:fe:d8:49:4e:fa:
                    50:45:98:79:dc:b7:76:57:30:46:1e:81:41:38:ba:
                    13:8f:f0:4f:d6:81:13:93:c3:ec:19:d0:93:8d:0e:
                    51:2d:ff:5d:89:ae:7a:af:2d:30:d1:46:79:e1:be:
                    b2:54:d8:c8:34:97:95:f5:ce:e4:25:1d:0a:fc:6c:
                    12:64:7d:b0:e1:37:8a:c8:a8:dd:6e:3f:c6:f4:61:
                    6b:b1:29:d0:5b:5d:65:ec:17:c4:15:00:51:46:3e:
                    e2:96:8d:91:11:1a:bf:84:ab:03:c5:f0:ef:5b:25:
                    07:99:d5:30:27:f0:0f:cf:b6:2c:7d:e8:b0:af:a3:
                    74:63:70:08:ae:24:50:56:78:33:5f:e9:e7:e9:38:
                    57:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C4:24:69:0F:0D:40:D5:A9:47:CD:05:15:B9:23:B4:26:E1:FD:68:4B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/C424690F0D40D5A947CD0515B923B426E1FD684B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.176.0/22
                IPv6:
                  2804:7764::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271175

    Signature Algorithm: sha256WithRSAEncryption
         90:8a:c4:53:9e:02:24:8e:cf:82:6a:a4:8f:c7:26:ac:3c:62:
         2d:e4:e6:6f:04:24:54:88:58:1b:8c:ae:a0:72:b8:e3:66:0a:
         df:97:45:c8:26:ad:7a:15:82:4c:61:23:ed:46:78:d2:24:08:
         6d:b9:65:21:fc:16:e1:2f:36:9c:c3:50:f6:03:53:cb:68:80:
         bf:0b:32:aa:fe:e1:52:83:0a:39:40:99:19:76:7a:22:77:98:
         ed:9a:ac:7e:85:1f:8c:16:55:22:2c:10:90:8a:0e:12:d0:35:
         9e:ea:57:1f:5d:0f:d8:1b:c7:7b:45:d4:fc:a0:02:5e:d4:25:
         d0:83:67:c0:ca:64:39:43:d1:d9:2c:ef:07:4f:4a:1b:c7:c9:
         a6:5f:4d:93:74:ea:49:eb:ce:f8:d6:42:4c:f1:5f:e4:5c:af:
         f0:03:c4:b1:8e:d8:20:57:39:52:68:0d:1f:eb:df:85:3d:05:
         f6:94:e1:b8:af:02:af:72:3d:19:38:4f:7c:e1:50:9e:ed:07:
         48:f5:e4:8c:6f:f0:e3:09:f7:f6:b6:30:99:51:22:f6:6a:b8:
         40:3c:fd:af:3d:fe:91:af:33:0c:63:cc:f3:10:df:a7:c1:1f:
         00:45:f0:71:fb:68:ea:59:50:24:54:6d:fc:7c:0e:27:a1:1e:
         ba:94:a3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----