This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D968B6511EF07778C01FA7FFE031522476B79B01.cer
File:                     D968B6511EF07778C01FA7FFE031522476B79B01.cer (raw, json)
Hash identifier:          dN0a+1qdCNZkyiPJJpikwmltFVSIYQ1MUxoiGQq4Keo=
Subject key identifier:   D9:68:B6:51:1E:F0:77:78:C0:1F:A7:FF:E0:31:52:24:76:B7:9B:01
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7262521358D848A6FA4D95343788304A18BC1634
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/D968B6511EF07778C01FA7FFE031522476B79B01.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Nov 2025 07:55:22 +0000
Certificate not after:    Thu 19 Nov 2026 08:00:22 +0000
Subordinate resources:    AS: 28142
                          AS: 262430
                          IP: 177.39.136.0/22
                          IP: 186.224.64.0/20
                          IP: 187.49.80.0/20
                          IP: 2804:fc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:62:52:13:58:d8:48:a6:fa:4d:95:34:37:88:30:4a:18:bc:16:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 20 07:55:22 2025 GMT
            Not After : Nov 19 08:00:22 2026 GMT
        Subject: CN=D968B6511EF07778C01FA7FFE031522476B79B01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:da:48:a1:4d:2b:6e:0f:59:18:b4:da:2c:77:
                    26:d1:49:54:2c:3b:45:24:a1:42:8b:ca:4f:86:1c:
                    66:ad:f3:6e:8c:bd:86:4c:e8:fa:5c:0e:a1:aa:6f:
                    8f:88:39:b7:d7:a7:c9:04:31:1b:12:da:00:3d:50:
                    52:33:27:28:21:79:f5:74:b2:64:77:d0:d0:3c:63:
                    31:fc:fc:09:a3:d7:ab:c4:e0:03:1c:60:8d:d7:bc:
                    6a:3a:11:c6:99:f2:42:ca:2d:e5:6b:e1:22:23:76:
                    84:5e:dd:0e:ea:0b:7f:a8:bb:bf:d6:08:a2:b2:73:
                    42:cc:b1:d1:fe:0a:b2:b8:54:e3:b2:aa:6c:8b:a6:
                    24:f1:59:16:8e:6f:39:80:c2:a2:99:ee:96:d6:01:
                    1e:c8:e5:59:4d:29:b8:ee:c3:63:98:7c:a3:b4:01:
                    e3:7a:8a:83:6b:ad:c4:3d:60:2d:18:82:39:a2:ca:
                    37:ca:10:a1:49:c4:94:51:d8:03:d0:39:ea:fe:1d:
                    57:c4:59:23:74:26:da:7b:d8:c2:eb:b1:ff:d5:ea:
                    06:da:77:c9:05:1b:42:38:9d:33:22:4f:c7:51:fe:
                    79:90:e0:8c:08:b7:93:cd:89:43:59:f4:99:69:2b:
                    05:04:5a:df:fb:07:fe:89:be:87:3d:28:ee:43:63:
                    cc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:68:B6:51:1E:F0:77:78:C0:1F:A7:FF:E0:31:52:24:76:B7:9B:01
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/D968B6511EF07778C01FA7FFE031522476B79B01.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.136.0/22
                  186.224.64.0/20
                  187.49.80.0/20
                IPv6:
                  2804:fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28142
                  262430

    Signature Algorithm: sha256WithRSAEncryption
         75:bb:ba:52:dd:d1:d2:73:b7:44:9b:cc:57:f2:6e:80:fd:33:
         a7:8c:b9:00:b5:55:6c:ce:ab:ee:1e:ef:11:3e:51:99:b4:a5:
         07:f8:f4:5f:44:7f:ad:38:83:a6:f2:94:3e:06:d7:4c:29:7e:
         d3:77:02:60:5c:95:5e:a3:76:e1:c4:31:c7:48:80:4f:12:a3:
         68:9d:bd:16:9e:13:98:fd:7d:00:3d:5e:11:35:11:b4:e5:81:
         53:b4:b3:92:ff:c0:1f:51:44:86:01:fb:84:ad:46:95:fa:57:
         d8:8d:68:ca:09:99:7d:18:64:04:21:e2:4c:63:09:f8:b8:c2:
         07:6a:36:82:30:8e:21:67:bd:cf:0a:21:c7:43:80:c3:7d:7a:
         e5:91:53:ed:8b:32:22:21:e3:4a:49:5f:02:03:09:54:05:59:
         a5:05:74:2b:94:fa:11:e9:4c:a8:1c:49:03:f2:5d:e1:2d:fe:
         75:ab:f4:93:27:af:0d:bf:64:dc:f3:84:ae:25:84:8b:6a:66:
         8d:08:07:c7:87:5a:cc:12:67:ed:bb:a5:d7:91:85:8f:75:c3:
         d2:25:79:63:6a:42:e7:e3:37:a0:2b:ed:6a:11:58:d7:db:74:
         62:70:a2:f0:a6:a1:e0:2b:71:b7:87:02:a2:63:52:d8:52:1b:
         03:a2:36:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----