This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E88F0A2B3C8590D329C36AB2A5C7C4C6BC247231.cer
File:                     E88F0A2B3C8590D329C36AB2A5C7C4C6BC247231.cer (raw, json)
Hash identifier:          EF4IQuJ/QlDGr+OvTGZ08EYbfC6xZR56iLrVyvhbPGE=
Subject key identifier:   E8:8F:0A:2B:3C:85:90:D3:29:C3:6A:B2:A5:C7:C4:C6:BC:24:72:31
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       54A8FE0D275F7DD97885FD325B3D7C46227AACAC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3tur98mbxWyQoMSmueu1o9tjigKX6JgUqUsRTRokgbR7/0/E88F0A2B3C8590D329C36AB2A5C7C4C6BC247231.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3tur98mbxWyQoMSmueu1o9tjigKX6JgUqUsRTRokgbR7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Dec 2025 13:30:37 +0000
Certificate not after:    Tue 01 Dec 2026 13:35:37 +0000
Subordinate resources:    AS: 270641
                          IP: 177.11.28.0/23
                          IP: 2804:6f24::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a8:fe:0d:27:5f:7d:d9:78:85:fd:32:5b:3d:7c:46:22:7a:ac:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  2 13:30:37 2025 GMT
            Not After : Dec  1 13:35:37 2026 GMT
        Subject: CN=E88F0A2B3C8590D329C36AB2A5C7C4C6BC247231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ba:53:bf:fd:0b:6f:74:e1:25:ad:0b:69:ba:
                    a9:77:07:34:5f:df:67:f5:a6:b8:68:a8:5c:a9:67:
                    7b:d2:97:91:a9:0c:6b:96:12:22:60:3f:31:84:f5:
                    1f:e8:ba:de:bc:3e:84:25:bc:5b:fa:5c:49:3e:16:
                    c5:c2:e8:c3:39:1a:8c:26:6f:c7:71:18:9e:db:0a:
                    5b:76:d3:f9:f1:8d:e1:95:6b:bc:53:6d:a8:be:50:
                    ab:1b:c2:37:e1:33:4e:c4:30:b7:98:67:15:bc:4b:
                    45:78:29:2f:ab:23:df:79:4b:7a:9a:c0:f0:d9:a6:
                    e7:a9:22:ae:37:57:e8:af:ee:f3:36:b1:22:ce:30:
                    29:73:55:fb:75:ee:da:21:31:8a:a1:dc:66:3d:44:
                    e6:97:3f:bb:3b:d8:9c:a2:7c:1f:9d:8d:51:ec:7c:
                    e0:19:70:7c:b1:96:c3:51:d1:65:4b:57:8d:cc:b3:
                    96:08:71:1a:25:67:e0:be:28:8f:15:27:26:ce:74:
                    ac:bf:e0:28:76:2b:0d:3a:d2:86:93:da:bd:44:a4:
                    eb:66:22:be:5e:dd:9e:93:0e:54:9d:36:a3:67:74:
                    ea:7c:96:06:fc:69:55:11:58:88:1b:28:b1:32:b2:
                    ca:42:76:c3:65:d1:4f:ca:d8:85:f3:63:06:86:c3:
                    16:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E8:8F:0A:2B:3C:85:90:D3:29:C3:6A:B2:A5:C7:C4:C6:BC:24:72:31
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3tur98mbxWyQoMSmueu1o9tjigKX6JgUqUsRTRokgbR7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3tur98mbxWyQoMSmueu1o9tjigKX6JgUqUsRTRokgbR7/0/E88F0A2B3C8590D329C36AB2A5C7C4C6BC247231.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.28.0/23
                IPv6:
                  2804:6f24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270641

    Signature Algorithm: sha256WithRSAEncryption
         0b:2b:d8:52:c5:99:60:75:ad:79:e3:47:5b:57:35:c7:9f:67:
         9a:67:58:a9:5b:d9:ee:0f:3c:d7:38:a8:57:21:e2:38:35:82:
         6b:54:ef:df:6c:a0:eb:ea:91:6b:6c:a5:4e:b4:3c:75:71:77:
         65:bc:25:8e:2f:93:ff:84:f1:40:e3:1f:1f:99:27:ee:8e:25:
         fb:ba:00:d1:da:2f:ad:08:f0:f0:b3:c4:8b:c9:06:1e:0f:c5:
         83:7d:60:0b:a0:fb:4d:72:31:af:64:e7:7d:99:a3:bc:3a:ba:
         5b:94:71:0c:5b:34:d9:6b:b3:9c:cf:8d:be:30:23:b6:18:60:
         2d:68:d7:3f:4b:12:46:e3:64:56:a2:bd:ec:3d:ed:04:e0:2e:
         23:30:d0:6f:37:4e:88:31:c6:bd:8d:11:8b:8d:c6:7a:7c:b6:
         b1:05:7c:d8:6e:cf:96:ed:42:f7:92:86:e6:45:6d:43:db:37:
         43:5f:82:56:fd:be:3d:0e:63:d0:bc:1b:dd:b4:46:34:a5:95:
         10:e2:61:0a:72:07:46:ea:c3:7b:97:21:5a:dd:ee:c3:79:8b:
         c2:ca:e5:f5:67:64:d2:d0:98:25:32:0a:01:ef:b6:04:3a:09:
         87:4e:be:b2:31:fd:c6:f3:26:b9:28:34:ee:be:a5:03:b1:f7:
         2e:8e:49:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----