This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7435E25F550512B05B3A1947A023020643033726.cer
File:                     7435E25F550512B05B3A1947A023020643033726.cer (raw, json)
Hash identifier:          u7X/vsRlRfuz1zlq7c4q681jP9ZFX3YUHXjnjNimILc=
Subject key identifier:   74:35:E2:5F:55:05:12:B0:5B:3A:19:47:A0:23:02:06:43:03:37:26
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       61985CEEC92E1089681EB708E0946E6F746BADD2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/0/7435E25F550512B05B3A1947A023020643033726.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 Dec 2025 15:31:42 +0000
Certificate not after:    Tue 15 Dec 2026 15:36:42 +0000
Subordinate resources:    AS: 266203
                          IP: 192.140.52.0/22
                          IP: 2804:3c50::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 04:33:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:98:5c:ee:c9:2e:10:89:68:1e:b7:08:e0:94:6e:6f:74:6b:ad:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 16 15:31:42 2025 GMT
            Not After : Dec 15 15:36:42 2026 GMT
        Subject: CN=7435E25F550512B05B3A1947A023020643033726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:72:b0:04:e2:79:40:4c:73:98:92:fd:bb:22:
                    eb:1b:2e:65:b8:3f:6c:88:9a:73:b8:58:12:c3:40:
                    01:64:17:05:ea:81:6e:6f:25:ba:05:fd:65:87:06:
                    b2:04:22:a7:f0:5a:80:44:69:c9:06:a5:c8:e0:d8:
                    d9:d6:e5:6f:94:96:94:d4:42:ac:06:46:0e:ab:5b:
                    96:b8:ab:42:93:59:0f:d9:9c:4b:07:0d:d6:ab:42:
                    09:07:f8:c9:05:1d:50:a1:83:82:de:91:f9:ec:99:
                    5e:8d:20:42:33:42:85:85:a2:d0:b0:9d:d1:49:39:
                    ac:b3:33:53:32:6a:b6:b2:ba:1e:07:1f:27:bc:a7:
                    91:a1:dd:83:ba:bf:5d:5c:f1:1a:fe:4d:f9:bd:b2:
                    aa:b4:d3:00:d0:ec:9f:27:bc:95:8d:e5:1b:a1:c4:
                    76:84:2d:f3:11:6b:8a:60:af:b8:a0:1e:92:f0:60:
                    55:fa:ba:57:0f:c6:7c:8f:b1:e2:8a:3c:4f:54:a9:
                    5e:c3:bc:6a:48:7e:ba:db:8e:e6:0d:82:a7:9d:d0:
                    a1:32:ac:4c:09:2d:29:24:2c:68:9a:3a:34:f2:6d:
                    ea:6f:57:a5:74:ca:5b:fb:c0:5a:e6:0e:51:78:46:
                    2d:53:f0:9a:68:29:28:37:d1:fe:e7:bc:27:0a:de:
                    44:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                74:35:E2:5F:55:05:12:B0:5B:3A:19:47:A0:23:02:06:43:03:37:26
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/0/7435E25F550512B05B3A1947A023020643033726.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.52.0/22
                IPv6:
                  2804:3c50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266203

    Signature Algorithm: sha256WithRSAEncryption
         0f:93:c4:a7:06:40:f6:b1:f9:aa:6a:0a:c3:f8:95:e8:7e:7a:
         2d:b9:e6:f8:e9:70:3b:c7:81:5a:39:ff:f9:1f:17:16:b0:11:
         03:cf:9a:96:e3:5f:09:c6:67:c8:1f:e3:05:02:9c:55:57:06:
         1a:0b:d5:43:99:d9:59:44:70:a7:aa:ae:ca:4f:16:dd:df:31:
         9c:59:a8:0a:fd:4b:87:e9:08:31:40:b1:04:51:22:82:78:3b:
         2e:48:fc:39:c8:e5:0c:2d:4a:f1:74:3a:3a:1e:57:33:52:7e:
         ad:ee:b7:5c:68:65:da:4a:11:2f:e6:ff:da:4e:d0:17:52:70:
         7e:8c:c0:92:3a:a1:03:3d:b0:97:77:77:ee:27:ba:bc:5f:59:
         c9:d8:81:e4:24:67:46:7c:28:31:1c:c7:46:35:38:f6:0f:b4:
         b4:68:63:8d:55:7c:ea:6c:57:b2:ef:99:3b:dc:59:c6:eb:4a:
         a0:af:43:37:64:0e:43:ce:36:d0:1b:06:d3:45:ff:70:41:ce:
         ab:72:ff:18:fa:54:ab:a2:b5:71:62:e1:10:e6:d0:14:b4:6e:
         d2:1b:1b:b3:51:4d:5f:60:61:ad:15:01:0e:78:a6:55:aa:d1:
         28:e4:e4:7e:3e:e9:2e:97:65:a9:03:0f:c6:37:88:d5:cb:42:
         b2:28:8a:d2
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUYZhc7skuEIloHrcI4JRub3RrrdIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEyMTYxNTMxNDJaFw0yNjEyMTUxNTM2NDJaMDMxMTAvBgNV
BAMTKDc0MzVFMjVGNTUwNTEyQjA1QjNBMTk0N0EwMjMwMjA2NDMwMzM3MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJcrAE4nlATHOYkv27IusbLmW4
P2yImnO4WBLDQAFkFwXqgW5vJboF/WWHBrIEIqfwWoBEackGpcjg2NnW5W+UlpTU
QqwGRg6rW5a4q0KTWQ/ZnEsHDdarQgkH+MkFHVChg4LekfnsmV6NIEIzQoWFotCw
ndFJOayzM1Myarayuh4HHye8p5Gh3YO6v11c8Rr+Tfm9sqq00wDQ7J8nvJWN5Ruh
xHaELfMRa4pgr7igHpLwYFX6ulcPxnyPseKKPE9UqV7DvGpIfrrbjuYNgqed0KEy
rEwJLSkkLGiaOjTybepvV6V0ylv7wFrmDlF4Ri1T8JpoKSg30f7nvCcK3kQ9AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR0NeJfVQUSsFs6
GUegIwIGQwM3JjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOXYy
Nms4MThERTZNS1JYZFU4Z2dRdTVLVk1uakZnTlMybkFxbXl6aWdINEIvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzl2
MjZrODE4REU2TUtSWGRVOGdnUXU1S1ZNbmpGZ05TMm5BcW15emlnSDRCLzAvNzQz
NUUyNUY1NTA1MTJCMDVCM0ExOTQ3QTAyMzAyMDY0MzAzMzcyNi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCwIw0MA0EAgACMAcDBQAoBDxQMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQP2zANBgkqhkiG9w0BAQsFAAOCAQEAD5PEpwZA9rH5qmoK
w/iV6H56Lbnm+OlwO8eBWjn/+R8XFrARA8+aluNfCcZnyB/jBQKcVVcGGgvVQ5nZ
WURwp6quyk8W3d8xnFmoCv1Lh+kIMUCxBFEigng7Lkj8OcjlDC1K8XQ6Oh5XM1J+
re63XGhl2koRL+b/2k7QF1JwfozAkjqhAz2wl3d37ie6vF9ZydiB5CRnRnwoMRzH
RjU49g+0tGhjjVV86mxXsu+ZO9xZxutKoK9DN2QOQ8420BsG00X/cEHOq3L/GPpU
q6K1cWLhEObQFLRu0hsbs1FNX2BhrRUBDnimVarRKOTkfj7pLpdlqQMPxjeI1ctC
siiK0g==
-----END CERTIFICATE-----