This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.cer
File:                     F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.cer (raw, json)
Hash identifier:          T83sxSRC6zpCcK0JZ9ouO4N8LrkV0N/MZ1O88TJXpR8=
Subject key identifier:   F1:1B:FF:96:E5:44:9E:E8:D9:FD:98:A0:FA:4C:B9:33:AB:AB:78:D8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       484932B2B5BA3EE273CBA657780DD8101BFD9486
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2DUnNdVqr3j2fPyiVxd9WdoX6hFNNDXJFhoCvXRHgdJb/0/F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2DUnNdVqr3j2fPyiVxd9WdoX6hFNNDXJFhoCvXRHgdJb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Nov 2025 18:00:02 +0000
Certificate not after:    Tue 10 Nov 2026 18:05:02 +0000
Subordinate resources:    AS: 264103
                          IP: 138.59.188.0/22
                          IP: 2804:2278::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:49:32:b2:b5:ba:3e:e2:73:cb:a6:57:78:0d:d8:10:1b:fd:94:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 11 18:00:02 2025 GMT
            Not After : Nov 10 18:05:02 2026 GMT
        Subject: CN=F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:62:ca:7b:6e:9f:2d:b4:d8:bf:30:c6:ea:0e:
                    47:87:2d:fb:28:68:72:fe:c9:40:f7:93:26:94:4c:
                    43:00:0c:53:8c:64:2b:eb:ec:03:26:be:2d:c5:be:
                    96:fa:91:97:b2:00:2b:37:b6:70:cc:4d:42:0e:58:
                    b3:5c:55:c9:5e:7e:76:35:7c:af:e7:f2:a8:ba:12:
                    f6:43:e5:5e:60:3d:f0:26:90:90:48:52:fe:43:41:
                    a1:c4:83:f9:e2:f4:f3:a5:d4:c7:f5:cd:58:0d:ff:
                    88:ea:9e:d6:a1:1d:0f:75:64:82:b9:40:25:16:ce:
                    31:6c:66:13:21:94:38:1d:25:91:db:de:c7:a1:8c:
                    69:5b:76:f1:0a:ee:81:90:9b:9c:b1:63:91:f5:b6:
                    17:0e:b6:08:89:d8:14:71:f3:d1:b5:49:03:88:49:
                    1e:bc:0a:2f:cb:a2:a4:a2:8a:0e:7f:b7:3d:55:1f:
                    7a:7e:26:a8:32:97:17:a9:f9:e9:31:4e:5d:d0:71:
                    4f:bf:3a:46:72:aa:35:2c:c6:fc:37:d4:e8:58:01:
                    bb:e5:24:a1:c8:bb:aa:b4:b9:47:c7:8e:e9:ce:6a:
                    22:19:3a:ba:27:cd:46:88:e6:cc:a6:2c:f4:a7:4a:
                    b1:5f:9d:55:92:7a:c8:9b:ee:b3:44:32:39:33:d9:
                    ac:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:1B:FF:96:E5:44:9E:E8:D9:FD:98:A0:FA:4C:B9:33:AB:AB:78:D8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2DUnNdVqr3j2fPyiVxd9WdoX6hFNNDXJFhoCvXRHgdJb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2DUnNdVqr3j2fPyiVxd9WdoX6hFNNDXJFhoCvXRHgdJb/0/F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.188.0/22
                IPv6:
                  2804:2278::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264103

    Signature Algorithm: sha256WithRSAEncryption
         85:27:3d:ce:ac:2f:77:99:d7:4f:b4:d5:50:46:05:f8:92:69:
         3a:bd:b7:69:40:b4:49:66:b4:52:9b:5a:1e:d0:41:f5:c5:0e:
         cd:73:0e:04:64:fc:ed:23:99:fc:23:c9:7f:7e:34:ba:80:57:
         58:d2:65:ea:92:f3:d2:c6:7e:ff:dc:00:18:62:e7:f2:c8:4e:
         6f:56:03:69:44:4d:86:44:4b:a1:c6:1e:c0:ce:ca:88:9b:20:
         45:e8:d7:55:dd:89:60:49:af:4b:12:b6:e8:ed:72:68:c0:b2:
         b8:85:d3:5b:1a:23:a1:7c:47:27:c8:ad:bc:49:48:65:52:7e:
         b3:9a:a7:a7:be:27:e3:9a:84:d9:63:84:bf:cb:d6:92:21:33:
         3a:86:a7:0d:db:03:0d:fd:3a:37:99:2d:b7:c5:45:ed:94:c5:
         0f:37:40:7a:18:ad:62:42:05:f5:52:bb:b3:ed:62:d3:da:2e:
         90:8b:fb:1e:4e:c7:a9:c0:a9:d4:b2:a3:67:20:ba:aa:83:c5:
         19:b1:f6:a5:0f:6b:99:94:b8:4f:0b:05:e5:9f:a9:f4:04:f7:
         fc:e8:ba:5d:05:dc:a9:44:b0:32:3a:bb:b2:ba:1d:18:a8:a4:
         c5:7b:32:29:a3:02:77:9c:0f:12:4e:d0:75:52:54:20:be:62:
         f3:89:48:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----