This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2CECFC86960C437277CA4FDF82CD3F36C7D009A8.cer
File:                     2CECFC86960C437277CA4FDF82CD3F36C7D009A8.cer (raw, json)
Hash identifier:          1iPWWe5g0Y4dmdXbj6iv7ricE1ivpRFPLoWNef4jbZk=
Subject key identifier:   2C:EC:FC:86:96:0C:43:72:77:CA:4F:DF:82:CD:3F:36:C7:D0:09:A8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       22D35C37A73802F6FA160B91317AC09630A7D257
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/2CECFC86960C437277CA4FDF82CD3F36C7D009A8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Dec 2025 20:27:46 +0000
Certificate not after:    Mon 28 Dec 2026 20:32:46 +0000
Subordinate resources:    AS: 270406
                          IP: 190.111.100.0/22
                          IP: 2804:6b88::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jan 2026 08:26:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d3:5c:37:a7:38:02:f6:fa:16:0b:91:31:7a:c0:96:30:a7:d2:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 29 20:27:46 2025 GMT
            Not After : Dec 28 20:32:46 2026 GMT
        Subject: CN=2CECFC86960C437277CA4FDF82CD3F36C7D009A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b2:76:91:69:e6:8c:dc:e0:68:d9:0e:14:72:
                    9e:95:93:13:4d:b4:b9:6e:3b:0a:ad:93:70:22:f4:
                    85:a0:a4:60:78:9a:52:98:e5:be:fc:e5:53:19:da:
                    6e:66:09:9c:3d:5c:08:c4:52:e6:fc:90:da:68:46:
                    33:09:4f:cb:9b:de:20:20:25:c3:02:92:cb:e4:67:
                    f3:1d:c2:3e:97:a1:3d:3c:5e:f5:89:c8:bd:5d:84:
                    87:43:39:12:16:72:a1:d8:74:1e:89:e1:6e:89:6c:
                    66:a0:73:84:2e:6f:07:74:b7:8d:63:f6:47:69:ce:
                    d3:26:1c:8c:21:89:88:ff:75:6b:07:94:bb:3b:49:
                    73:9b:74:40:be:41:92:3f:4d:4c:0f:3c:1c:d8:45:
                    be:35:e0:87:a3:99:d9:fb:bf:4a:f1:55:da:19:46:
                    91:5e:3f:5f:0a:d8:5c:61:9f:bc:09:d3:a2:59:ce:
                    b2:a2:b9:b0:f8:a3:fe:de:91:c0:7b:45:a5:c4:8f:
                    b9:f0:ba:a0:00:c9:b5:e1:19:82:12:7a:de:dd:b7:
                    14:c4:b7:47:15:e8:b2:d5:2d:99:77:c2:8e:a0:4a:
                    24:7f:3c:d1:b2:3b:f8:f1:38:b9:39:9c:db:da:60:
                    df:a4:86:10:8c:81:3a:d6:97:c1:96:66:1e:11:35:
                    41:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:EC:FC:86:96:0C:43:72:77:CA:4F:DF:82:CD:3F:36:C7:D0:09:A8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/0/2CECFC86960C437277CA4FDF82CD3F36C7D009A8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.100.0/22
                IPv6:
                  2804:6b88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270406

    Signature Algorithm: sha256WithRSAEncryption
         b5:16:b1:d5:0b:38:2b:b3:a0:9b:13:b1:0a:4f:71:13:a6:f0:
         e9:69:bd:f9:95:ec:9a:a9:35:f7:3f:cf:9a:78:27:3f:53:29:
         e9:fd:11:3c:1d:f1:81:80:60:98:a6:94:e5:44:31:4e:5b:a6:
         54:35:6d:2c:d2:dd:ec:8c:92:6a:62:04:6b:15:22:1c:5a:cc:
         b7:a1:c6:70:9a:53:b2:74:c1:75:ae:6c:80:a2:58:b5:63:b5:
         8d:36:13:f4:8e:93:95:0b:8c:95:39:eb:8e:9c:8f:b0:79:84:
         a3:3a:2f:b0:b3:1b:ee:67:b0:cd:c7:c3:a6:ec:22:f2:b3:93:
         ed:1e:a4:e9:39:f9:ec:26:e9:d5:ff:e3:f1:06:d8:73:e3:a5:
         83:26:d5:14:41:5e:66:f8:94:e3:26:39:f1:95:81:de:df:7d:
         de:2d:ea:48:fa:db:83:6b:52:06:c8:00:13:df:95:3f:65:2c:
         fa:e6:ea:f6:4d:6d:9c:84:84:04:7a:00:85:bf:ac:56:dd:79:
         52:1c:59:50:b3:12:33:a1:af:98:9c:40:e7:b7:b4:bc:82:c1:
         1e:45:ec:31:e3:f9:eb:a2:03:3c:20:1e:8a:66:8c:0e:64:e9:
         25:a7:1d:9a:af:f7:67:a2:41:f4:e3:39:ed:d2:fa:ff:a8:82:
         fa:a9:32:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----