This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DC95AFE058A2A53884ABA1570BF0CB974924D055.cer
File:                     DC95AFE058A2A53884ABA1570BF0CB974924D055.cer (raw, json)
Hash identifier:          i1dJIzzwhpM2xS8n8FxkkzOE7AsCp2Te+HjWySCYK8Q=
Subject key identifier:   DC:95:AF:E0:58:A2:A5:38:84:AB:A1:57:0B:F0:CB:97:49:24:D0:55
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       26D09AD2B507C68823D92CE61536B79A5520E973
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5dJE6MCh7naMkRWJyd9imqMdVpW6x4vGHiX24XZE9Vew/0/DC95AFE058A2A53884ABA1570BF0CB974924D055.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5dJE6MCh7naMkRWJyd9imqMdVpW6x4vGHiX24XZE9Vew/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Dec 2025 18:38:52 +0000
Certificate not after:    Wed 02 Dec 2026 18:43:52 +0000
Subordinate resources:    AS: 272466
                          IP: 179.42.68.0/23
                          IP: 2804:81a0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d0:9a:d2:b5:07:c6:88:23:d9:2c:e6:15:36:b7:9a:55:20:e9:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  3 18:38:52 2025 GMT
            Not After : Dec  2 18:43:52 2026 GMT
        Subject: CN=DC95AFE058A2A53884ABA1570BF0CB974924D055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e7:72:1b:6a:ba:e1:3e:90:4f:8f:07:7d:1b:
                    58:94:71:5a:d9:a5:b9:18:17:ad:95:4a:29:59:8d:
                    e4:1d:75:92:06:12:a6:b2:af:40:a2:7f:ee:aa:21:
                    9f:c0:2f:9f:5e:e3:2c:24:c6:85:0a:c1:96:4f:70:
                    f9:79:93:a2:ea:08:47:7e:ea:e1:25:a8:35:0f:28:
                    50:25:c1:33:88:1d:bd:41:fb:02:88:36:73:33:3f:
                    3a:08:12:2c:ef:4b:2e:5b:c6:3c:65:cf:28:db:1d:
                    07:00:c7:7b:3f:f1:49:eb:4b:4e:51:35:28:d0:7e:
                    ac:db:12:ee:4d:92:ea:14:62:3c:a3:d3:bd:6b:d7:
                    99:38:4c:58:1e:af:3c:9f:c8:c8:ee:19:22:bc:7d:
                    5e:b5:9e:38:4f:e0:4e:3b:66:8c:01:8c:31:de:d3:
                    5f:42:26:d2:82:06:21:f4:d1:61:59:43:dc:f2:f9:
                    b1:b8:a3:d8:27:b3:4a:54:10:bf:0d:89:00:48:b5:
                    7d:27:36:8c:9b:68:2d:92:e7:49:3c:f8:b0:66:82:
                    e1:a0:d9:33:e6:87:5b:33:c9:88:c9:0c:9e:3e:89:
                    db:58:7c:47:b0:34:4f:c2:e0:66:43:89:6b:39:83:
                    e4:71:63:07:a8:18:1c:d6:ec:c3:f4:24:d5:94:68:
                    e7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:95:AF:E0:58:A2:A5:38:84:AB:A1:57:0B:F0:CB:97:49:24:D0:55
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5dJE6MCh7naMkRWJyd9imqMdVpW6x4vGHiX24XZE9Vew/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5dJE6MCh7naMkRWJyd9imqMdVpW6x4vGHiX24XZE9Vew/0/DC95AFE058A2A53884ABA1570BF0CB974924D055.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.68.0/23
                IPv6:
                  2804:81a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272466

    Signature Algorithm: sha256WithRSAEncryption
         5e:aa:8d:62:49:9a:76:58:2c:49:74:f8:7f:98:d2:f4:6c:fb:
         d1:79:8d:b5:e0:9d:60:9e:3e:89:f0:a9:03:a1:62:f2:7c:df:
         13:99:0f:5e:d2:1f:3f:14:eb:19:af:a7:96:58:2b:08:db:06:
         53:30:54:00:bb:7b:21:45:1c:99:bd:da:d2:50:4d:6c:1f:7d:
         26:f3:80:4b:32:8f:4a:02:df:b8:45:f1:9f:67:22:e5:44:47:
         ec:8d:d1:e0:12:9a:a9:9c:88:49:3e:96:3f:d3:ec:6e:88:70:
         af:cc:1a:08:5b:9e:d4:70:b9:15:f5:e6:2c:42:59:1d:c2:f2:
         eb:32:94:03:14:02:bd:77:ae:22:92:53:e8:f2:a2:05:a1:8f:
         47:ea:a6:59:0d:c8:65:bb:f2:35:1d:06:49:81:a7:c3:cc:35:
         f1:bd:a9:e1:3a:aa:cc:5c:08:a4:22:65:43:87:84:51:95:34:
         bf:bf:79:69:53:71:07:bb:02:6b:0f:49:4d:c8:14:cb:2d:0c:
         23:e5:32:47:32:3e:63:a9:6a:9c:47:1e:22:18:3a:46:1c:ae:
         4e:f7:ac:75:c7:7b:a1:2a:45:1e:b6:03:e1:dc:d3:ae:a6:f0:
         46:7a:08:51:d0:80:bb:50:97:6a:5b:4c:22:f9:b7:95:c6:7a:
         ed:1f:17:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----