This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer
File:                     30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer (raw, json)
Hash identifier:          rg7Ol4hY8YO17XZUyeHAbnino6TLw8cukhyc04FIDCo=
Subject key identifier:   30:15:7C:EF:EE:BD:0C:7D:8A:29:EC:E4:A2:43:43:27:73:2F:FD:F6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3B125D18B68F61F0A587B7BB919F8769396AD0FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Dec 2025 18:06:33 +0000
Certificate not after:    Fri 18 Dec 2026 18:11:33 +0000
Subordinate resources:    AS: 263486
                          IP: 170.79.128.0/22
                          IP: 191.242.248.0/21
                          IP: 2804:1298::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:12:5d:18:b6:8f:61:f0:a5:87:b7:bb:91:9f:87:69:39:6a:d0:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 19 18:06:33 2025 GMT
            Not After : Dec 18 18:11:33 2026 GMT
        Subject: CN=30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b0:92:7d:3d:91:b0:18:1f:c5:c5:35:c2:79:
                    55:9a:cc:23:2a:8e:bf:28:4b:7f:be:27:df:31:8d:
                    9d:db:30:19:e4:fa:0d:5b:85:18:98:4c:cf:b6:53:
                    c3:24:82:15:8e:54:c0:e0:91:53:a7:1b:fe:59:de:
                    d9:5f:0a:9d:54:d9:26:48:c2:4c:e0:3e:49:48:58:
                    42:ce:c0:f6:a2:94:71:cb:ad:df:e1:de:de:f8:28:
                    32:a1:40:ee:68:0d:98:35:62:ea:62:2c:a6:e0:cd:
                    d3:95:62:f1:e3:87:3e:50:a7:7d:aa:a7:8d:40:a7:
                    4c:02:c8:5f:8f:b6:3d:f3:95:ba:14:b9:26:3f:f0:
                    b7:26:d3:31:f6:14:1e:44:ca:39:3a:b1:09:bd:e0:
                    b5:3c:4b:e9:6e:80:2b:9a:a9:37:96:a9:6b:89:a8:
                    b5:ff:5d:1b:c0:f9:2c:f0:74:2a:2b:83:99:56:4a:
                    ec:0d:48:8c:03:d3:5c:a1:bd:6b:4d:52:0e:60:d0:
                    82:94:b5:7b:1e:8a:81:2a:c0:c1:26:5c:3d:a0:87:
                    24:75:67:f2:02:93:91:93:9d:10:2f:a8:94:e4:db:
                    90:77:09:b4:1f:ff:ee:3e:df:cf:8e:79:a2:0b:b9:
                    f2:67:92:a7:d6:22:96:58:a5:11:7c:21:fe:1e:dc:
                    dd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:15:7C:EF:EE:BD:0C:7D:8A:29:EC:E4:A2:43:43:27:73:2F:FD:F6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.128.0/22
                  191.242.248.0/21
                IPv6:
                  2804:1298::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263486

    Signature Algorithm: sha256WithRSAEncryption
         34:cf:16:2b:3b:8e:04:86:fa:e1:3c:12:fd:99:56:de:67:f8:
         97:c6:fb:ed:6a:0a:e8:a4:c8:cb:72:28:b3:b8:b3:d7:02:15:
         ce:ad:73:fd:1f:d9:b0:17:62:30:cf:dc:b1:53:42:fa:9b:13:
         18:2a:f4:a5:51:98:fe:dd:db:d8:f9:f9:0d:a1:77:0d:af:c1:
         c7:32:fd:81:25:83:cd:36:46:1e:3d:36:f6:e5:26:fc:c9:54:
         e3:b4:03:e6:da:22:08:e7:85:b6:2f:63:e4:38:9b:3e:19:2a:
         93:81:f4:08:5e:14:4e:2c:bb:b0:8a:c0:a4:d9:80:45:72:34:
         7c:03:50:2e:6c:6e:b1:1e:41:17:2d:d3:a7:86:c7:2f:81:d7:
         c6:1b:5c:fa:dc:f7:ce:ef:83:0f:d6:c9:52:9b:42:a6:63:75:
         49:1e:5f:9a:8c:d5:63:73:67:38:3c:ae:fe:03:59:09:b1:91:
         74:91:7f:67:56:c4:4d:15:6c:6e:53:3e:f9:21:40:4a:77:c3:
         c8:34:81:7d:80:ee:e7:44:3a:1d:e6:03:ec:84:5c:76:e3:f8:
         53:cf:24:a6:2b:d5:27:6f:33:f0:58:53:f8:36:20:95:2b:95:
         ac:89:d3:df:83:bf:b3:70:f4:54:12:d1:51:25:95:c1:ed:75:
         15:8b:9b:12
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUOxJdGLaPYfClh7e7kZ+HaTlq0PswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEyMTkxODA2MzNaFw0yNjEyMTgxODExMzNaMDMxMTAvBgNV
BAMTKDMwMTU3Q0VGRUVCRDBDN0Q4QTI5RUNFNEEyNDM0MzI3NzMyRkZERjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCusJJ9PZGwGB/FxTXCeVWazCMq
jr8oS3++J98xjZ3bMBnk+g1bhRiYTM+2U8MkghWOVMDgkVOnG/5Z3tlfCp1U2SZI
wkzgPklIWELOwPailHHLrd/h3t74KDKhQO5oDZg1YupiLKbgzdOVYvHjhz5Qp32q
p41Ap0wCyF+Ptj3zlboUuSY/8Lcm0zH2FB5Eyjk6sQm94LU8S+lugCuaqTeWqWuJ
qLX/XRvA+SzwdCorg5lWSuwNSIwD01yhvWtNUg5g0IKUtXseioEqwMEmXD2ghyR1
Z/ICk5GTnRAvqJTk25B3CbQf/+4+38+OeaILufJnkqfWIpZYpRF8If4e3N37AgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQwFXzv7r0MfYop
7OSiQ0Mncy/99jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkZU
SGRMYTczdUpmVHA1RGFSYTVuSHdMY3hSQmlNRGZvZ3FUdzM3bmkzZmEvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZG
VEhkTGE3M3VKZlRwNURhUmE1bkh3TGN4UkJpTURmb2dxVHczN25pM2ZhLzAvMzAx
NTdDRUZFRUJEMEM3RDhBMjlFQ0U0QTI0MzQzMjc3MzJGRkRGNi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCqk+AAwQDv/L4MA0EAgACMAcDBQAoBBKYMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwQFPjANBgkqhkiG9w0BAQsFAAOCAQEANM8WKzuO
BIb64TwS/ZlW3mf4l8b77WoK6KTIy3Ios7iz1wIVzq1z/R/ZsBdiMM/csVNC+psT
GCr0pVGY/t3b2Pn5DaF3Da/BxzL9gSWDzTZGHj029uUm/MlU47QD5toiCOeFti9j
5DibPhkqk4H0CF4UTiy7sIrApNmARXI0fANQLmxusR5BFy3Tp4bHL4HXxhtc+tz3
zu+DD9bJUptCpmN1SR5fmozVY3NnODyu/gNZCbGRdJF/Z1bETRVsblM++SFASnfD
yDSBfYDu50Q6HeYD7IRcduP4U88kpivVJ28z8FhT+DYglSuVrInT34O/s3D0VBLR
USWVwe11FYubEg==
-----END CERTIFICATE-----
Generated at Sat Dec 20 08:16:33 2025 by rpki-client