This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B63B26C9AEBF6A09AB233C518334CF88C6AFE55B.cer
File:                     B63B26C9AEBF6A09AB233C518334CF88C6AFE55B.cer (raw, json)
Hash identifier:          DUH54NbQy1JEMOJ+D0ZjhxUycRowOrlmT6hm7IYOJRY=
Subject key identifier:   B6:3B:26:C9:AE:BF:6A:09:AB:23:3C:51:83:34:CF:88:C6:AF:E5:5B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1962C984316F834AF83ABCFA189F48EF3899FEF8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/1/B63B26C9AEBF6A09AB233C518334CF88C6AFE55B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Dec 2025 20:32:09 +0000
Certificate not after:    Mon 21 Dec 2026 20:37:09 +0000
Subordinate resources:    AS: 264513
                          IP: 132.255.196.0/22
                          IP: 170.231.32.0/22
                          IP: 2804:20c4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 05:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:62:c9:84:31:6f:83:4a:f8:3a:bc:fa:18:9f:48:ef:38:99:fe:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 22 20:32:09 2025 GMT
            Not After : Dec 21 20:37:09 2026 GMT
        Subject: CN=B63B26C9AEBF6A09AB233C518334CF88C6AFE55B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:51:1f:d7:00:1f:74:1d:e3:23:6c:fc:55:30:
                    55:70:1f:01:78:a6:3e:5b:ce:18:cf:b6:28:38:93:
                    b1:39:24:1b:99:22:be:f6:49:cc:3d:3d:af:fd:74:
                    46:2d:d8:8c:21:b8:f1:84:f6:47:21:1b:86:4a:12:
                    02:4a:de:69:46:c0:46:e3:be:e9:11:a2:e9:42:48:
                    e5:1b:26:38:78:ef:ce:8f:be:9d:a4:0c:2c:78:f8:
                    19:fe:f4:24:11:43:3d:37:09:6b:d6:4d:63:7f:1b:
                    40:69:11:7c:ab:ef:04:49:2b:24:27:21:62:61:f6:
                    c2:88:04:e0:44:f9:e8:8f:65:d2:d0:4d:31:b8:00:
                    7f:21:7e:ec:cc:fb:cb:29:6a:bf:e1:07:0b:f7:1e:
                    1c:b5:73:22:69:b0:3a:e5:eb:b0:f7:1f:3c:23:21:
                    cd:92:57:7b:20:aa:a1:00:17:89:b4:38:02:49:44:
                    7c:25:ae:fe:be:b7:ef:06:cf:87:09:8a:ea:6c:fc:
                    d1:f0:6d:21:f2:30:67:0c:70:fc:cc:3c:e1:98:ba:
                    fb:05:3c:c3:7b:77:02:e7:4b:09:d0:cd:ea:4c:c4:
                    da:e9:6b:4f:0f:33:06:fe:b6:1c:ed:43:a6:4d:e0:
                    4b:e7:d6:98:c7:9f:3e:3d:f5:62:18:d3:8e:b7:b6:
                    cf:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B6:3B:26:C9:AE:BF:6A:09:AB:23:3C:51:83:34:CF:88:C6:AF:E5:5B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/1/B63B26C9AEBF6A09AB233C518334CF88C6AFE55B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.196.0/22
                  170.231.32.0/22
                IPv6:
                  2804:20c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264513

    Signature Algorithm: sha256WithRSAEncryption
         07:4e:49:d2:54:c2:58:22:49:82:21:65:f0:ad:ac:a3:aa:ce:
         7f:b2:b1:51:4a:37:7f:92:1e:7d:f8:7a:3f:83:fb:76:1e:7f:
         3f:53:4e:e1:2c:6d:93:63:e3:35:70:e8:fd:e4:28:8a:f5:f1:
         5b:cc:cd:69:3b:9c:ad:07:6e:c2:24:d8:04:08:c7:1c:54:8e:
         5c:bc:c9:12:90:c0:d5:dc:a3:92:00:2b:f1:96:c5:5d:b3:29:
         ed:ab:82:ab:33:eb:27:01:ed:92:a2:03:aa:18:3c:a0:18:7c:
         eb:26:62:85:e4:e5:bd:1c:7f:88:68:bf:37:25:38:2b:9c:00:
         39:68:f5:5e:e6:15:12:90:24:b4:31:69:fe:92:81:75:97:67:
         81:df:79:23:e0:72:d3:34:6f:46:dc:fe:ef:e6:66:d6:57:d3:
         74:68:9c:82:f8:74:b7:c8:21:0b:6b:a8:5c:e1:cb:88:2d:6a:
         d9:09:ea:e3:eb:68:2d:84:f3:cd:bc:89:a9:9d:e8:54:70:8c:
         7a:4b:37:e8:81:99:d2:56:bc:db:d2:90:6d:e3:87:75:9a:50:
         6b:3c:00:af:5e:33:d7:b4:20:ab:ca:f6:57:08:e1:c8:5e:bd:
         4f:06:da:62:93:9e:a8:e4:8b:26:7b:a3:47:0c:00:cc:fb:9f:
         09:b5:97:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----