This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer
File:                     D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer (raw, json)
Hash identifier:          vFaFd3xK5buzJABdkclsyWkbYAanOkhawgCWYNORDEY=
Subject key identifier:   D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3E42A433FB560F6F05E93BD15F0B1BBDF9015D20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Nov 2025 05:48:47 +0000
Certificate not after:    Thu 12 Nov 2026 05:53:47 +0000
Subordinate resources:    AS: 52612
                          IP: 170.79.249.0 -- 170.79.251.255
                          IP: 177.124.20.0/22
                          IP: 2804:22fc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:42:a4:33:fb:56:0f:6f:05:e9:3b:d1:5f:0b:1b:bd:f9:01:5d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 13 05:48:47 2025 GMT
            Not After : Nov 12 05:53:47 2026 GMT
        Subject: CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3c:d4:34:16:09:a4:1b:3e:ec:0a:93:c9:29:
                    bd:12:96:27:39:a7:dd:f2:93:e0:d2:fe:cc:ea:8a:
                    23:37:6a:6c:8b:37:52:e8:56:0d:44:80:fb:d5:cb:
                    0e:c0:a2:21:04:2e:03:14:cc:60:32:7f:b9:17:0c:
                    7c:aa:88:11:90:01:d8:dc:64:87:03:cd:e9:a1:e2:
                    8c:50:09:f0:e5:3c:38:70:8e:bb:9e:12:34:ad:3d:
                    98:9a:e6:f8:58:81:d1:b0:48:f4:88:a5:49:42:c6:
                    1d:f9:af:21:cf:ad:62:8d:aa:d1:89:f6:48:21:77:
                    11:f9:d5:ea:d9:69:fb:d4:28:d4:de:90:e4:bb:f2:
                    4c:5e:a1:82:65:5f:03:5c:c5:58:f3:29:5e:f1:19:
                    07:29:f9:0a:d4:b2:92:ac:54:b7:30:9d:2c:f2:93:
                    cd:bf:53:3d:b5:ad:78:37:90:88:6c:68:81:3b:b0:
                    e2:8a:31:db:9b:2c:69:0c:b2:f0:73:7f:68:5a:1f:
                    d7:3e:89:c2:4b:16:6d:6d:82:17:02:b1:8b:51:bd:
                    67:d2:d9:38:59:5d:39:08:05:7b:8d:62:f5:af:51:
                    07:f7:8c:c8:5a:f3:53:a5:86:c7:aa:5b:7b:9d:59:
                    e9:bc:37:0d:eb:32:bd:d7:d3:31:e4:e7:81:c2:d5:
                    1a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.249.0-170.79.251.255
                  177.124.20.0/22
                IPv6:
                  2804:22fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52612

    Signature Algorithm: sha256WithRSAEncryption
         12:ff:52:b9:7d:85:0d:cc:77:8e:07:3c:8e:96:46:98:a5:f7:
         3e:2b:44:a3:9f:43:32:1a:5b:26:49:23:03:2c:97:45:d4:c5:
         44:87:b9:8e:f4:31:68:61:8c:2f:49:8d:ca:29:45:47:f5:07:
         3f:fe:bf:fd:1f:4d:08:7e:cd:53:e3:59:8c:48:03:68:bb:38:
         2b:c6:65:71:35:5d:eb:b1:1e:9d:9e:d4:02:28:7b:23:eb:12:
         a8:41:d2:6e:f0:98:d1:ca:5a:df:37:90:96:41:94:9c:e4:75:
         20:5e:e8:1a:33:5f:09:5b:de:0f:b9:06:9c:ed:12:7e:3e:44:
         1b:b8:9f:cf:ff:b2:1e:7d:42:bf:db:e4:7a:7d:cd:bf:03:dd:
         9c:7b:28:ef:55:c6:22:aa:46:e0:b5:78:24:ca:7c:ae:b8:81:
         b2:46:aa:54:d5:df:8b:ca:54:a1:e8:2a:20:d3:2b:18:b4:e1:
         36:7a:c8:ce:7d:04:ec:2f:cb:7b:71:8e:06:67:2a:73:d2:21:
         7a:09:48:a4:ae:bb:eb:a8:95:df:84:33:c9:28:ca:4f:1f:7a:
         a7:b6:2e:9a:00:07:f3:04:02:73:57:56:23:7d:fa:ed:07:97:
         1c:b7:3c:f8:4b:c4:96:bb:c3:ba:74:49:a5:47:37:cd:d4:30:
         f7:85:c5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:43:01 2025 by rpki-client