This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.cer
File:                     D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.cer (raw, json)
Hash identifier:          99lwx7zBLlh7XedKXr9At5My3HGJ1+bgJ0bDP3kMzAE=
Subject key identifier:   D9:8A:38:6B:89:19:34:0A:BB:0A:ED:BE:4A:18:A5:05:60:B4:E3:D1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1B5DF4106D43F8AF4F85F9E5EC70615CBB617858
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Nov 2025 12:45:59 +0000
Certificate not after:    Thu 05 Nov 2026 12:50:59 +0000
Subordinate resources:    AS: 271428
                          IP: 200.36.192.0/22
                          IP: 2804:7b60::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5d:f4:10:6d:43:f8:af:4f:85:f9:e5:ec:70:61:5c:bb:61:78:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  6 12:45:59 2025 GMT
            Not After : Nov  5 12:50:59 2026 GMT
        Subject: CN=D98A386B8919340ABB0AEDBE4A18A50560B4E3D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3a:fd:d4:98:03:3a:20:16:bb:ac:93:77:54:
                    58:16:0b:d3:04:14:75:da:e4:ec:0b:15:77:a1:83:
                    88:1d:0b:19:0e:36:06:dc:1a:4a:06:57:e3:c8:e0:
                    89:b4:a0:a1:5b:d3:89:f6:52:9b:fc:a3:63:ba:7c:
                    fe:7f:84:50:45:04:dc:8b:fb:62:b9:d2:b8:70:45:
                    68:e0:fa:b8:4f:a2:4a:96:d1:88:7a:75:cf:44:dd:
                    b2:21:d2:4f:34:da:a1:47:46:fb:62:84:f2:1b:8b:
                    7b:00:1e:b6:ef:b6:ba:e6:5c:38:ac:5f:82:31:ac:
                    7f:0a:6a:6a:86:33:5a:a5:52:0e:2a:d1:31:51:50:
                    b9:84:8f:3c:79:9e:a2:a7:68:bc:1b:f8:06:b5:67:
                    2c:0b:1b:07:f4:e9:5f:2a:df:b4:c8:70:01:95:4a:
                    e3:2e:56:f4:50:f0:28:db:86:3b:ac:87:59:8c:c6:
                    b4:c1:92:4d:5d:d0:25:4f:31:44:95:fa:e3:e2:75:
                    b8:c1:c2:42:15:e6:21:dc:2e:22:91:93:12:e8:5c:
                    96:39:a9:2a:8b:17:fe:dc:2a:c3:f7:9f:5d:e9:fc:
                    8b:44:65:a0:f3:4e:d7:b2:18:c9:d1:da:4b:93:a1:
                    c7:ea:35:de:9b:87:03:ab:9e:d8:ae:ee:26:88:15:
                    a7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:8A:38:6B:89:19:34:0A:BB:0A:ED:BE:4A:18:A5:05:60:B4:E3:D1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/D98A386B8919340ABB0AEDBE4A18A50560B4E3D1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.192.0/22
                IPv6:
                  2804:7b60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271428

    Signature Algorithm: sha256WithRSAEncryption
         a6:70:ec:b4:aa:6d:eb:d2:2c:6d:89:ea:21:2c:30:82:33:f1:
         29:ea:24:17:7f:c7:9b:f4:ad:85:71:a9:fc:14:00:bf:94:a3:
         7f:7b:8d:d7:fb:44:5e:e8:44:7a:a8:e7:ef:1a:3a:22:a1:8d:
         98:98:d3:33:76:0b:be:4d:7c:c7:77:fa:b1:95:cc:2f:05:01:
         f1:3d:07:75:70:a7:67:eb:8b:7a:bf:7e:09:af:74:d0:ba:85:
         0e:09:72:ae:2d:a8:33:f5:91:6f:28:77:2e:3f:a0:3d:b7:1a:
         97:0d:bc:eb:28:95:55:65:66:3b:24:ba:4a:79:8f:ff:b1:c1:
         86:ef:77:65:24:90:2c:3e:09:b1:ce:13:b3:e2:b6:ee:96:fe:
         a8:50:98:c2:55:a5:a9:5e:4d:8f:11:1a:ff:55:ac:b2:9a:1c:
         07:60:e2:16:36:a7:1b:4e:ed:2a:48:d9:7f:61:ac:88:be:09:
         a2:17:f6:0e:72:b6:06:54:a6:86:bd:d0:fd:bc:01:34:e2:66:
         bd:68:68:34:de:25:0d:00:e2:a3:09:cf:44:74:78:1e:4d:e3:
         40:ad:ea:e6:1f:f2:d9:a6:d8:ed:56:4c:58:a3:84:5b:4f:96:
         c3:07:7d:bf:cc:a8:a6:f5:6e:05:99:58:87:e0:f6:96:b9:fc:
         32:29:1d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----