This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
File:                     D05E9D7E25FDD9255E0A8745221B447549A33F95.cer (raw, json)
Hash identifier:          KG4G+5z4oEB3CF/J8jdH5X3wn5fDvIGuiRgKVWkZ5DE=
Subject key identifier:   D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       270B50B5DD7242E923615EA92C6C5F1F99E9BD23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Jan 2026 12:11:27 +0000
Certificate not after:    Tue 05 Jan 2027 12:16:27 +0000
Subordinate resources:    AS: 28352
                          IP: 187.0.48.0/20
                          IP: 189.51.192.0/20
                          IP: 2804:ae0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 14:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:0b:50:b5:dd:72:42:e9:23:61:5e:a9:2c:6c:5f:1f:99:e9:bd:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  6 12:11:27 2026 GMT
            Not After : Jan  5 12:16:27 2027 GMT
        Subject: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c1:7f:b5:91:88:6e:a3:d0:17:ab:83:f4:49:
                    a9:92:fd:50:04:7c:c1:e7:b2:d6:d2:a3:d6:b3:46:
                    12:54:59:9f:2f:e4:ad:94:18:99:8f:e9:a1:6c:eb:
                    85:d9:ab:47:a1:a1:ef:25:8c:d6:8c:9f:2d:89:b7:
                    ca:be:6d:a9:ce:61:64:3d:db:5a:69:5f:fd:c0:4a:
                    76:2e:91:a4:17:44:06:9f:d6:0f:d7:4f:06:14:27:
                    9f:12:99:83:c7:74:a4:65:cf:59:d9:fb:58:71:0b:
                    b3:a5:52:10:3d:fd:c0:f7:b8:4d:08:5b:86:39:68:
                    85:3b:a6:b4:49:9d:2a:49:56:db:ab:5e:cc:6b:ca:
                    92:4d:4b:25:02:6c:a3:ed:8c:6f:c3:0d:bc:c2:64:
                    71:ef:63:35:8c:82:33:15:45:70:a0:ea:8f:ea:75:
                    e9:2d:ad:82:3e:11:d6:f7:1d:32:7a:3f:97:08:b3:
                    75:22:30:89:54:ea:9b:58:d3:8f:ef:77:c5:a4:f3:
                    cb:03:4f:da:fd:fc:68:a8:d4:3e:5e:ee:d1:f1:5c:
                    5b:45:4b:97:3a:cc:58:ce:15:ce:f0:4f:c3:1f:a2:
                    60:43:95:5b:88:bd:df:e0:6a:e6:a9:c5:c4:32:75:
                    07:3a:a7:4f:68:17:c0:4c:8e:6d:8d:70:7f:67:ae:
                    ba:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.48.0/20
                  189.51.192.0/20
                IPv6:
                  2804:ae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28352

    Signature Algorithm: sha256WithRSAEncryption
         18:2f:ce:a4:29:37:7c:e1:2f:68:f2:1b:e7:87:02:66:c8:fa:
         1a:b9:20:00:8c:c4:29:02:c9:2e:59:05:91:40:1c:cf:b7:82:
         63:0b:72:2b:38:65:9f:67:db:8e:90:e9:f6:04:d5:b3:c9:c1:
         e3:92:e0:80:62:dd:9c:f4:b3:7d:a1:7b:c1:ed:1d:29:6b:f2:
         08:5f:12:61:eb:05:69:97:83:c5:e0:05:cd:05:05:a6:fa:6f:
         76:27:9c:47:3e:a9:7a:50:25:31:a4:37:10:7e:7f:53:9e:09:
         d1:a7:73:0f:c5:b0:19:7c:14:55:43:1c:89:3a:5d:c7:0f:77:
         9d:c9:d6:61:0a:e7:75:72:9d:58:d1:f3:3a:2d:bf:3d:16:93:
         d7:5a:53:de:61:22:5e:88:ff:98:38:b0:21:b6:b2:03:d3:da:
         9f:78:44:c4:9c:9b:1b:7a:bc:22:b7:97:8d:0e:0b:65:d3:54:
         ac:f5:ac:76:85:e1:7f:c7:97:98:81:a5:b2:f2:fe:d5:2f:d2:
         08:aa:15:38:8e:80:10:e4:77:64:d8:73:85:ab:9e:05:41:df:
         90:94:e6:07:b7:35:78:c1:92:2d:38:42:34:5a:52:95:7d:4b:
         a8:96:6d:1a:93:d1:81:f6:8f:5f:1c:24:47:1e:16:a5:8c:74:
         37:ee:f1:f2
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgIUJwtQtd1yQukjYV6pLGxfH5npvSMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAxMDYxMjExMjdaFw0yNzAxMDUxMjE2MjdaMDMxMTAvBgNV
BAMTKEQwNUU5RDdFMjVGREQ5MjU1RTBBODc0NTIyMUI0NDc1NDlBMzNGOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGwX+1kYhuo9AXq4P0SamS/VAE
fMHnstbSo9azRhJUWZ8v5K2UGJmP6aFs64XZq0ehoe8ljNaMny2Jt8q+banOYWQ9
21ppX/3ASnYukaQXRAaf1g/XTwYUJ58SmYPHdKRlz1nZ+1hxC7OlUhA9/cD3uE0I
W4Y5aIU7prRJnSpJVturXsxrypJNSyUCbKPtjG/DDbzCZHHvYzWMgjMVRXCg6o/q
dektrYI+Edb3HTJ6P5cIs3UiMIlU6ptY04/vd8Wk88sDT9r9/Gio1D5e7tHxXFtF
S5c6zFjOFc7wT8MfomBDlVuIvd/gauapxcQydQc6p09oF8BMjm2NcH9nrrrxAgMB
AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTQXp1+Jf3ZJV4K
h0UiG0R1SaM/lTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGk2
ODZQYktMWHZHY0ZXcjZ2cHN5R3VXdDdDRHczVDFYQ0Y1bXpxdG9lSHMvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhp
Njg2UGJLTFh2R2NGV3I2dnBzeUd1V3Q3Q0R3M1QxWENGNW16cXRvZUhzLzAvRDA1
RTlEN0UyNUZERDkyNTVFMEE4NzQ1MjIxQjQ0NzU0OUEzM0Y5NS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQEuwAwAwQEvTPAMA0EAgACMAcDBQAoBArgMBkGCCsG
AQUFBwEIAQH/BAowCKAGMAQCAm7AMA0GCSqGSIb3DQEBCwUAA4IBAQAYL86kKTd8
4S9o8hvnhwJmyPoauSAAjMQpAskuWQWRQBzPt4JjC3IrOGWfZ9uOkOn2BNWzycHj
kuCAYt2c9LN9oXvB7R0pa/IIXxJh6wVpl4PF4AXNBQWm+m92J5xHPql6UCUxpDcQ
fn9TngnRp3MPxbAZfBRVQxyJOl3HD3edydZhCud1cp1Y0fM6Lb89FpPXWlPeYSJe
iP+YOLAhtrID09qfeETEnJsberwit5eNDgtl01Ss9ax2heF/x5eYgaWy8v7VL9II
qhU4joAQ5Hdk2HOFq54FQd+QlOYHtzV4wZItOEI0WlKVfUuolm0ak9GB9o9fHCRH
HhaljHQ37vHy
-----END CERTIFICATE-----