This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E35C46B07BDFD3BE5620121FF3CF80B746251C04.cer
File:                     E35C46B07BDFD3BE5620121FF3CF80B746251C04.cer (raw, json)
Hash identifier:          uol3mX0WLozvsYuk1LRP1H0AwbA24Xv1zTHSN1dUlPg=
Subject key identifier:   E3:5C:46:B0:7B:DF:D3:BE:56:20:12:1F:F3:CF:80:B7:46:25:1C:04
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       04E2522A8AB407B6DD6F31E389CF8E3EB0193756
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/E35C46B07BDFD3BE5620121FF3CF80B746251C04.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 29 Nov 2025 12:04:00 +0000
Certificate not after:    Sat 28 Nov 2026 12:09:00 +0000
Subordinate resources:    AS: 274672
                          IP: 2804:91e0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e2:52:2a:8a:b4:07:b6:dd:6f:31:e3:89:cf:8e:3e:b0:19:37:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 29 12:04:00 2025 GMT
            Not After : Nov 28 12:09:00 2026 GMT
        Subject: CN=E35C46B07BDFD3BE5620121FF3CF80B746251C04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6f:92:64:e1:fc:66:eb:38:12:b9:2e:17:1f:
                    d1:bb:11:ea:04:ba:bf:31:1b:48:73:81:7c:83:13:
                    17:78:30:ef:10:42:39:dc:64:75:d7:52:81:48:78:
                    ac:75:92:e8:c3:42:45:41:2e:fc:ac:5c:11:a0:32:
                    d4:2f:bf:5f:48:d1:dc:6c:07:5e:e6:32:50:e0:90:
                    10:85:e6:94:4c:d0:b9:18:37:10:74:c2:7b:79:cb:
                    58:c6:47:b7:72:d4:37:e9:cc:4e:f3:aa:2e:5a:38:
                    5e:b4:e4:6f:b0:2b:21:74:1b:d6:41:a1:2a:8f:d4:
                    35:f4:06:f9:32:3a:90:21:bc:28:4c:26:d0:95:d6:
                    74:f1:d9:27:4a:85:6f:3f:ce:6a:16:53:05:59:94:
                    86:96:91:33:56:10:93:e5:37:40:18:3f:19:67:6d:
                    ac:41:4e:a6:09:64:cc:d9:47:27:74:58:65:2a:d3:
                    26:af:19:4f:a1:3d:13:a6:3f:04:e4:ac:c2:d2:ee:
                    6a:5b:84:1c:71:e0:54:f2:83:3c:9f:2d:b9:39:71:
                    88:6a:09:4e:98:6c:66:1e:6d:ce:a7:70:c2:cc:00:
                    d7:37:f3:f5:62:b4:21:04:9d:b9:70:fb:1a:01:d5:
                    90:88:37:a8:8b:55:3b:35:49:62:dd:25:65:03:ac:
                    ea:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E3:5C:46:B0:7B:DF:D3:BE:56:20:12:1F:F3:CF:80:B7:46:25:1C:04
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/E35C46B07BDFD3BE5620121FF3CF80B746251C04.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274672

    Signature Algorithm: sha256WithRSAEncryption
         a0:d2:e4:96:9b:1b:ea:47:9e:2d:02:9e:35:69:29:17:3e:c6:
         66:65:e8:93:12:c9:09:8c:cb:da:3c:e9:ee:ee:3c:36:6b:e7:
         f3:af:10:9b:0f:56:03:f7:e1:db:5a:24:0c:23:39:0f:6b:29:
         ff:68:d3:fb:8f:7e:9d:3d:28:f2:4b:28:a9:49:b5:32:06:ba:
         f3:37:17:ca:1c:a5:cc:3b:fd:74:7b:4b:83:57:27:af:0e:b5:
         90:63:40:e4:ea:d6:ae:0a:f7:e9:55:d4:4f:f6:a9:27:87:8d:
         c0:15:dc:8f:d1:86:d1:42:b6:cd:53:c0:34:ae:a7:a5:5c:10:
         7f:98:a9:18:6a:31:96:41:6e:80:20:6a:0b:31:99:9c:34:86:
         d5:3b:3b:47:f2:ef:21:c2:0c:32:1d:e0:96:b3:ff:20:86:c4:
         0c:ce:55:53:9f:2f:90:71:da:72:0d:a1:ab:60:c9:8d:67:f8:
         fc:fd:09:bb:81:81:70:ae:ac:2e:9e:61:ae:7e:71:84:29:08:
         78:e2:17:33:3e:b8:a8:dc:bb:9b:34:80:1c:b8:33:43:d7:36:
         f2:39:f0:f4:90:5f:97:6e:5c:e4:fe:63:40:66:fb:b7:ec:02:
         13:51:e7:0e:4d:85:62:a6:79:77:76:83:1c:f0:38:cd:23:19:
         9e:e8:ed:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----