This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C93CAC5F09E6490B969C734AA2FE13637FB8BAF4.cer
File:                     C93CAC5F09E6490B969C734AA2FE13637FB8BAF4.cer (raw, json)
Hash identifier:          59c/OV5w7QRAZzBL5n0Z19Ood8tZiEXHwOkiGrwb45s=
Subject key identifier:   C9:3C:AC:5F:09:E6:49:0B:96:9C:73:4A:A2:FE:13:63:7F:B8:BA:F4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0D50BEB8E11FBDCA7368CCDD68504C73A8F52581
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/0/C93CAC5F09E6490B969C734AA2FE13637FB8BAF4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 Dec 2025 12:24:21 +0000
Certificate not after:    Tue 15 Dec 2026 12:29:21 +0000
Subordinate resources:    AS: 270426
                          IP: 190.111.140.0/22
                          IP: 2804:6bcc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 02:08:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:50:be:b8:e1:1f:bd:ca:73:68:cc:dd:68:50:4c:73:a8:f5:25:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 16 12:24:21 2025 GMT
            Not After : Dec 15 12:29:21 2026 GMT
        Subject: CN=C93CAC5F09E6490B969C734AA2FE13637FB8BAF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d9:e0:90:45:19:11:bf:4c:86:70:67:45:eb:
                    0e:d0:ee:51:5e:55:01:cb:99:69:50:d2:79:20:94:
                    6e:45:dd:ff:a1:89:45:2f:fc:d7:18:12:8a:b8:3f:
                    0b:39:ab:37:2f:63:b9:bc:1b:92:d4:5b:15:2b:4f:
                    9a:77:d7:a4:d1:25:42:55:cd:39:d1:73:e1:ad:ae:
                    06:96:88:bd:6f:b1:9b:74:08:57:7e:1e:f8:47:9d:
                    e4:9f:dc:74:ac:02:f4:b2:e1:c9:8b:fc:c0:b7:c4:
                    84:e9:a0:71:03:84:00:84:70:be:c9:12:fb:5b:b8:
                    44:0f:7d:3e:d1:14:a0:da:6a:1e:20:30:a7:c4:d1:
                    b2:4b:50:8a:dc:5b:17:4c:2f:10:6d:84:5b:4a:21:
                    22:57:9a:9f:2e:29:17:c1:f3:44:9a:ee:cb:8b:65:
                    ad:67:82:bc:59:1f:8a:9b:40:71:f8:06:64:e3:19:
                    fd:74:ec:dc:5f:6e:28:46:10:66:2b:a4:de:0c:20:
                    1e:fc:d4:9e:85:df:93:e2:af:c2:5e:ef:c7:dd:9e:
                    12:9c:d9:20:fc:b9:4e:da:1a:ad:f2:11:11:4e:1e:
                    e8:bf:1c:b6:5a:c6:1e:08:5e:46:1d:df:a1:f5:38:
                    8a:1d:18:61:f2:a3:d3:55:10:c7:69:9a:0d:27:8b:
                    6a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:3C:AC:5F:09:E6:49:0B:96:9C:73:4A:A2:FE:13:63:7F:B8:BA:F4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/0/C93CAC5F09E6490B969C734AA2FE13637FB8BAF4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.140.0/22
                IPv6:
                  2804:6bcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270426

    Signature Algorithm: sha256WithRSAEncryption
         1b:19:9f:51:ea:a6:2b:b7:52:e0:f1:8c:de:50:94:c0:ba:41:
         be:94:2f:ae:06:f7:37:6f:8f:9f:4a:80:30:53:80:b1:87:2a:
         ac:e7:34:22:f2:86:df:b2:ca:1c:1e:67:e1:00:7a:cc:3d:e9:
         00:e1:20:df:7a:bc:e2:7b:d8:da:e1:40:a4:d7:69:5b:03:fe:
         93:5a:52:8b:53:7b:9f:71:0e:9a:9d:e6:b0:3b:cd:ad:4c:8c:
         50:c4:07:a3:b0:75:7a:18:b5:4f:e9:4f:06:e5:9b:a3:db:4b:
         df:62:f3:b2:b0:c9:2c:0b:bc:9d:f1:fb:42:17:c8:52:cf:53:
         9a:7c:42:b2:a0:85:64:a6:c4:d9:57:4a:d3:9e:df:74:a6:ee:
         a8:05:89:69:39:f0:21:9c:49:0e:82:72:b2:d0:14:c9:bb:91:
         e9:34:6c:ee:3e:be:4d:ec:90:3c:63:be:ae:44:70:3b:7b:44:
         27:de:75:91:38:1c:fc:68:48:19:57:83:63:8f:0b:d2:2e:11:
         59:5e:cc:5b:99:9b:d7:a4:3d:e9:e3:5c:a3:51:13:04:05:7c:
         af:72:e5:e9:f2:1e:92:22:80:8d:ae:f3:7b:0b:74:1a:1c:e7:
         03:05:30:18:5d:cc:cd:1f:ab:a6:04:13:7f:58:9d:e8:95:56:
         29:2a:3e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----