This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D53752ADA92E81931C29CA44ABDEEDDF373E93F7.cer
File:                     D53752ADA92E81931C29CA44ABDEEDDF373E93F7.cer (raw, json)
Hash identifier:          UmkDCYr0p50I6xCKA+DVP2NgRjXMLCpKJ+DnkdntNxE=
Subject key identifier:   D5:37:52:AD:A9:2E:81:93:1C:29:CA:44:AB:DE:ED:DF:37:3E:93:F7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1FA76811DB509E439B302FC53D3EC5EBA7D3853B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/D53752ADA92E81931C29CA44ABDEEDDF373E93F7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Nov 2025 15:12:39 +0000
Certificate not after:    Fri 13 Nov 2026 15:17:39 +0000
Subordinate resources:    AS: 267125
                          IP: 45.228.236.0/22
                          IP: 2804:4880::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 10:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a7:68:11:db:50:9e:43:9b:30:2f:c5:3d:3e:c5:eb:a7:d3:85:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 14 15:12:39 2025 GMT
            Not After : Nov 13 15:17:39 2026 GMT
        Subject: CN=D53752ADA92E81931C29CA44ABDEEDDF373E93F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8f:cb:84:3b:fd:fb:fe:6c:c5:ed:92:03:fc:
                    6b:d7:63:ac:de:d2:9c:f3:75:c2:57:bd:cc:b1:72:
                    66:de:8a:a4:d9:d2:3f:77:a2:a1:0b:4c:98:36:ba:
                    66:cf:51:3f:5e:5a:95:18:62:ed:95:bc:1e:72:b1:
                    98:84:89:50:fd:d0:b8:ee:17:c6:30:cc:88:19:76:
                    43:2d:92:52:a7:ec:d3:0a:af:b3:ec:d1:1a:d8:f1:
                    72:3f:2c:f3:c1:96:f6:0f:c0:fa:42:f3:e5:da:43:
                    66:5b:bb:00:77:33:77:d7:e3:58:70:26:4b:46:70:
                    bf:8b:b1:d5:27:dc:5a:25:22:39:94:f5:b9:37:97:
                    8c:16:42:27:85:f5:08:db:6e:23:97:42:fb:5b:51:
                    4f:e6:a5:be:a8:95:5f:fe:45:0f:8b:eb:2f:c1:ad:
                    20:3d:c9:36:46:9d:f2:56:74:e4:36:e6:78:19:d5:
                    d2:f0:77:74:db:e4:9a:af:5a:b4:85:a9:88:f5:a5:
                    d3:6b:26:67:17:0e:22:86:ec:be:4d:a0:09:93:cc:
                    63:ac:1d:25:4f:d8:17:fe:92:a7:38:89:f4:d7:31:
                    ae:f2:64:ca:92:fc:0e:47:6d:81:c0:e1:e6:85:9c:
                    0d:1e:d1:70:33:66:1c:7f:03:fb:62:04:63:23:5d:
                    d0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:37:52:AD:A9:2E:81:93:1C:29:CA:44:AB:DE:ED:DF:37:3E:93:F7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/D53752ADA92E81931C29CA44ABDEEDDF373E93F7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.236.0/22
                IPv6:
                  2804:4880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267125

    Signature Algorithm: sha256WithRSAEncryption
         1a:71:32:f6:9e:f6:32:8f:3d:a9:94:15:35:98:16:ee:53:fe:
         95:cd:0c:e8:27:83:22:cf:00:13:5a:aa:0f:d3:57:d6:d9:d6:
         c5:df:5e:c0:9a:bd:5e:56:80:17:73:4b:20:7f:f0:19:f0:b1:
         6f:57:3a:26:fd:9e:b8:6f:f6:42:2f:fb:ed:02:ac:26:0a:09:
         f8:b2:22:50:8c:7e:7d:23:66:90:f4:57:15:39:f7:31:4b:78:
         66:8e:3b:ce:be:d6:b3:eb:d1:36:06:11:75:43:db:af:eb:23:
         8a:4f:6b:5f:a8:73:66:63:17:20:4b:b6:4e:51:6a:db:9a:f6:
         1a:c5:b1:d6:47:31:da:8a:3f:88:55:78:60:e4:32:47:78:7b:
         31:a7:ed:c8:01:a4:d6:d6:7b:5c:41:84:08:63:ad:98:b9:81:
         9f:4d:cd:d7:56:18:43:9d:6a:c7:83:3f:1c:5f:eb:d6:76:b0:
         26:9b:09:3b:55:a6:04:9a:f7:66:7a:58:32:67:cb:5e:6c:83:
         c6:fc:9c:f3:20:5f:79:b7:e5:9a:d7:b2:27:bd:cd:e0:a3:be:
         63:25:6e:ce:80:63:3d:82:83:92:e2:99:90:0b:ed:79:1e:7a:
         26:ea:40:04:0d:08:b7:fe:06:3e:8f:70:8b:7d:f8:85:ee:2c:
         41:58:db:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----