This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63.cer
File:                     1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63.cer (raw, json)
Hash identifier:          46a+9n/LmYopYt32D7siNlbcvxrk7RwztZku4ExK384=
Subject key identifier:   1C:19:E8:0D:BA:A1:2B:8C:EF:CA:D9:E3:8B:BC:56:2A:49:BF:6E:63
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       58D7F894C9504FE357ABC447149B282FFDE790A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Dec 2025 12:00:19 +0000
Certificate not after:    Mon 21 Dec 2026 12:05:19 +0000
Subordinate resources:    AS: 273431
                          IP: 186.227.76.0/22
                          IP: 191.7.0.0/23
                          IP: 2804:8e84::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 13:36:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d7:f8:94:c9:50:4f:e3:57:ab:c4:47:14:9b:28:2f:fd:e7:90:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 22 12:00:19 2025 GMT
            Not After : Dec 21 12:05:19 2026 GMT
        Subject: CN=1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:47:cc:b3:4c:ab:fc:d8:f0:fc:e0:93:bd:ba:
                    ea:2f:ce:f6:bd:2e:fc:81:8e:a8:19:49:aa:94:ce:
                    49:f7:7f:8e:bb:9a:1b:20:55:49:51:ec:e8:a1:a0:
                    79:b5:19:bf:5f:04:ad:7c:43:f8:dd:eb:f5:a0:f1:
                    31:46:0d:79:61:5b:db:ec:3d:37:b2:51:68:31:b7:
                    35:70:f2:2c:dc:c5:3d:84:56:bd:3b:c7:03:c5:50:
                    ae:87:8e:82:aa:29:90:cc:c0:56:e1:7b:57:53:34:
                    23:0d:73:fa:0f:e9:ca:22:a9:ba:3e:22:f6:59:8e:
                    61:5a:d1:dc:41:29:52:88:70:21:89:1f:26:a1:4f:
                    bb:36:48:4d:0b:87:f1:6d:13:d8:03:b5:2c:43:c9:
                    34:e7:40:ae:25:10:73:a2:2a:45:5f:60:15:c8:91:
                    df:3a:02:7c:1d:ed:43:d9:f3:57:50:22:12:b1:54:
                    97:c4:bf:4c:ca:e1:87:e7:7d:33:f0:70:69:13:6c:
                    2b:c0:81:64:45:92:ae:21:c5:fe:23:ed:ba:6b:43:
                    00:ca:32:fc:94:43:8a:a7:ee:7d:92:01:a0:fe:cd:
                    42:fa:43:86:d0:2e:f1:4f:11:09:21:33:4c:1c:61:
                    65:2b:1e:42:32:87:02:c9:0a:17:63:ad:d0:04:7a:
                    a6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:19:E8:0D:BA:A1:2B:8C:EF:CA:D9:E3:8B:BC:56:2A:49:BF:6E:63
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.76.0/22
                  191.7.0.0/23
                IPv6:
                  2804:8e84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273431

    Signature Algorithm: sha256WithRSAEncryption
         65:79:99:3d:82:db:59:22:79:a0:79:9b:40:b2:c9:50:a3:8a:
         f2:c6:ae:ea:d9:4f:45:0c:78:fc:53:ec:a5:0a:77:a7:68:52:
         61:42:a2:f5:72:4e:81:40:42:87:22:59:e6:fd:29:3e:bb:52:
         2e:82:01:a7:b3:0e:07:ff:19:fc:f2:86:cf:e5:35:f9:42:22:
         58:8d:51:f4:8c:75:97:d4:04:b4:60:ca:7e:6e:0c:75:49:0c:
         9d:81:19:21:09:a6:78:36:20:25:cb:d5:4b:fb:6d:f9:c7:f6:
         95:0f:85:26:7f:e3:e1:e6:56:99:4e:6d:7c:0c:bc:37:f7:1b:
         6a:22:e6:38:83:61:d7:d3:e1:f1:c7:fb:f5:4c:4f:a5:34:75:
         e6:44:d6:ba:63:20:e2:40:ca:98:22:a4:41:30:0f:f8:23:68:
         a9:35:2c:4a:c0:6e:09:1b:7a:55:1f:60:55:a6:26:92:1e:aa:
         a5:ba:7d:f7:e7:55:38:d1:05:c4:7d:a5:a7:21:a1:bb:7e:73:
         75:5d:b5:81:45:6a:19:c3:12:e5:d1:02:93:74:76:79:03:bb:
         f6:47:3c:69:f3:1d:c4:64:0f:d6:54:5c:33:2d:da:79:dc:45:
         4f:db:6d:67:da:9f:0e:df:61:22:5d:74:a5:47:a2:e1:d8:f5:
         29:29:02:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----