This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4.cer
File:                     1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4.cer (raw, json)
Hash identifier:          l2ru/tc7VlkeA0F02kBhwcm1KouPHyvRfsNIw2djPiM=
Subject key identifier:   1A:50:37:E7:59:D0:BF:A5:94:AD:13:E4:DD:55:F8:C4:B5:BF:3A:D4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       017316E21852F197098876D3FFB2DAE1B0480365
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Dec 2025 14:06:52 +0000
Certificate not after:    Mon 14 Dec 2026 14:11:52 +0000
Subordinate resources:    AS: 271050
                          IP: 187.84.116.0/22
                          IP: 2804:757c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 19:23:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:73:16:e2:18:52:f1:97:09:88:76:d3:ff:b2:da:e1:b0:48:03:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 15 14:06:52 2025 GMT
            Not After : Dec 14 14:11:52 2026 GMT
        Subject: CN=1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2b:09:4f:21:b6:46:ef:b8:55:69:59:2c:06:
                    73:1a:74:89:03:a2:29:8e:cc:d2:71:10:72:bc:f7:
                    0e:6c:d7:d2:62:3c:4b:83:df:63:b3:07:65:93:c5:
                    c5:62:17:43:12:8f:d0:4a:a0:68:4a:75:dc:9f:87:
                    5f:76:8b:86:1e:d1:6c:a6:25:63:39:8e:67:ed:b4:
                    8f:6b:20:96:b0:9a:3e:b0:e5:a9:d0:d1:5e:b7:8c:
                    f8:52:a9:5f:cd:72:59:42:43:03:78:37:f5:da:28:
                    d5:a9:6a:93:1d:64:dd:04:12:b7:4e:e1:11:73:07:
                    89:7a:e4:d0:7c:1e:54:d3:cd:95:14:ff:6d:d2:f7:
                    ab:3d:69:28:4e:13:1e:60:3a:b6:89:ee:d3:dc:a6:
                    cc:16:49:ea:dd:f2:3f:2f:c6:31:e7:45:83:ca:50:
                    af:4c:c3:23:9a:9a:0d:31:cf:db:f9:f9:03:05:98:
                    0c:51:a6:0b:b2:30:8b:1f:d2:99:63:ef:53:6b:bb:
                    14:c0:a5:6d:30:35:a0:df:90:c0:3e:04:53:ff:60:
                    dd:1c:19:31:af:8d:83:5e:d6:65:9d:c7:3b:8b:d6:
                    b2:db:06:3c:e6:8b:5d:fe:c2:e2:4c:53:2c:21:aa:
                    66:2c:12:13:52:6d:a9:ea:7e:05:67:d0:3b:17:a2:
                    cc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1A:50:37:E7:59:D0:BF:A5:94:AD:13:E4:DD:55:F8:C4:B5:BF:3A:D4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.116.0/22
                IPv6:
                  2804:757c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271050

    Signature Algorithm: sha256WithRSAEncryption
         d2:09:f5:a6:28:f8:20:91:6f:3d:41:d9:f4:f1:86:a0:ec:6d:
         a8:82:93:5c:d9:fd:d2:04:53:8a:04:6d:18:e8:20:af:17:c3:
         e8:df:90:4d:00:eb:fe:09:0a:88:77:ca:99:ca:f0:0d:8c:c9:
         6b:98:c2:17:c4:0f:fb:71:16:a6:8f:e1:6e:ef:c9:6a:27:68:
         c5:dd:43:b0:dc:20:d8:b9:fa:fe:52:4f:f7:5a:de:57:73:a9:
         99:3e:ad:52:40:0e:80:e0:2e:73:72:43:a4:66:02:7f:7c:4d:
         0c:31:db:97:32:39:af:90:af:9a:a0:77:9c:c4:ad:03:0e:80:
         13:62:64:3b:9f:69:d4:5f:7f:5d:7d:43:7b:29:4f:81:9e:42:
         6d:59:59:0a:19:9f:bf:4f:f5:ed:64:06:3f:a0:20:21:e8:0e:
         c2:98:75:1b:89:81:b7:9f:98:d6:5e:19:e6:a2:46:35:8b:54:
         47:bf:e7:85:58:65:64:49:cf:18:6d:5f:88:bb:ab:84:b9:70:
         ae:ae:81:f9:95:67:55:a1:6d:3d:6f:87:4a:fc:07:71:16:d9:
         1a:b0:50:6c:0f:fa:f9:e0:8c:a8:52:98:c0:a3:d4:c2:b5:a7:
         f7:86:70:cc:5f:cf:69:8a:3a:14:3c:6d:35:26:29:4a:b8:36:
         3f:6a:a3:72
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUAXMW4hhS8ZcJiHbT/7La4bBIA2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEyMTUxNDA2NTJaFw0yNjEyMTQxNDExNTJaMDMxMTAvBgNV
BAMTKDFBNTAzN0U3NTlEMEJGQTU5NEFEMTNFNERENTVGOEM0QjVCRjNBRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaKwlPIbZG77hVaVksBnMadIkD
oimOzNJxEHK89w5s19JiPEuD32OzB2WTxcViF0MSj9BKoGhKddyfh192i4Ye0Wym
JWM5jmfttI9rIJawmj6w5anQ0V63jPhSqV/NcllCQwN4N/XaKNWpapMdZN0EErdO
4RFzB4l65NB8HlTTzZUU/23S96s9aShOEx5gOraJ7tPcpswWSerd8j8vxjHnRYPK
UK9MwyOamg0xz9v5+QMFmAxRpguyMIsf0plj71NruxTApW0wNaDfkMA+BFP/YN0c
GTGvjYNe1mWdxzuL1rLbBjzmi13+wuJMUywhqmYsEhNSbanqfgVn0DsXosy5AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQaUDfnWdC/pZSt
E+TdVfjEtb861DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUVo
UHdGYUZNd29yY3BpWnVLa1FVc3JuTTFHUnFBQnFKNERFeEFtQmJLc0wvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVF
aFB3RmFGTXdvcmNwaVp1S2tRVXNybk0xR1JxQUJxSjRERXhBbUJiS3NMLzAvMUE1
MDM3RTc1OUQwQkZBNTk0QUQxM0U0REQ1NUY4QzRCNUJGM0FENC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCu1R0MA0EAgACMAcDBQAoBHV8MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQiyjANBgkqhkiG9w0BAQsFAAOCAQEA0gn1pij4IJFvPUHZ
9PGGoOxtqIKTXNn90gRTigRtGOggrxfD6N+QTQDr/gkKiHfKmcrwDYzJa5jCF8QP
+3EWpo/hbu/Jaidoxd1DsNwg2Ln6/lJP91reV3OpmT6tUkAOgOAuc3JDpGYCf3xN
DDHblzI5r5CvmqB3nMStAw6AE2JkO59p1F9/XX1DeylPgZ5CbVlZChmfv0/17WQG
P6AgIegOwph1G4mBt5+Y1l4Z5qJGNYtUR7/nhVhlZEnPGG1fiLurhLlwrq6B+ZVn
VaFtPW+HSvwHcRbZGrBQbA/6+eCMqFKYwKPUwrWn94ZwzF/PaYo6FDxtNSYpSrg2
P2qjcg==
-----END CERTIFICATE-----