This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/364CC6EACDA290A3F161DF11EF6BA76FD40ED8AA.cer
File:                     364CC6EACDA290A3F161DF11EF6BA76FD40ED8AA.cer (raw, json)
Hash identifier:          VUZ1GlxpPyW+GI1zWaomALYIGi2dmMzY5eJpxbPX704=
Subject key identifier:   36:4C:C6:EA:CD:A2:90:A3:F1:61:DF:11:EF:6B:A7:6F:D4:0E:D8:AA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       69469EC63DAA2E689785391F1DC4BF0634667EF8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HVb3eib8GzwEp9kpNHg9dEG2JiAUprJZkwCv8yAwt655/0/364CC6EACDA290A3F161DF11EF6BA76FD40ED8AA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HVb3eib8GzwEp9kpNHg9dEG2JiAUprJZkwCv8yAwt655/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 06 Dec 2025 12:04:57 +0000
Certificate not after:    Sat 05 Dec 2026 12:09:57 +0000
Subordinate resources:    AS: 269688
                          IP: 45.191.216.0/22
                          IP: 2804:6860::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 16:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:46:9e:c6:3d:aa:2e:68:97:85:39:1f:1d:c4:bf:06:34:66:7e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  6 12:04:57 2025 GMT
            Not After : Dec  5 12:09:57 2026 GMT
        Subject: CN=364CC6EACDA290A3F161DF11EF6BA76FD40ED8AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b1:61:dd:2b:59:c7:05:13:2c:bf:27:ee:10:
                    e6:f6:41:15:37:34:65:5a:03:ad:f2:ee:1e:dc:ff:
                    1c:06:f6:3a:3e:43:1e:b8:e4:d3:2f:8f:4f:36:c4:
                    3a:e8:68:31:f3:2a:0a:8f:89:67:d7:93:3c:fe:0e:
                    48:b9:da:11:8a:7e:bc:a7:5a:bd:55:e0:9b:5b:68:
                    c3:3e:37:9b:77:87:b5:33:08:85:75:a8:4e:27:df:
                    39:3e:44:00:ae:51:d4:b4:2e:97:e0:0f:67:52:89:
                    41:b1:8a:d7:6e:a7:8d:09:3d:c2:08:b8:d8:aa:f1:
                    4c:04:9f:7c:5d:05:77:91:f9:2c:5f:2e:6b:ff:2a:
                    02:ad:e5:72:c1:9d:c9:cc:ed:fb:23:6d:90:5b:0f:
                    b9:f8:52:45:9c:e9:6d:ae:f1:35:34:fe:08:9d:5c:
                    d8:93:be:64:ef:26:2c:9c:33:70:2d:92:1f:53:7c:
                    73:15:d9:47:48:bc:c8:42:fb:37:29:78:16:43:e3:
                    8c:b8:9a:46:b3:b0:bc:a3:54:79:33:c5:16:cf:37:
                    15:94:c2:b5:fb:4d:49:16:c3:93:00:1b:24:b3:9e:
                    0f:97:d3:e4:54:cd:7b:53:20:08:fc:a6:66:2b:8e:
                    46:b8:f3:49:26:5e:5e:7f:ee:a3:60:d1:24:89:19:
                    10:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                36:4C:C6:EA:CD:A2:90:A3:F1:61:DF:11:EF:6B:A7:6F:D4:0E:D8:AA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HVb3eib8GzwEp9kpNHg9dEG2JiAUprJZkwCv8yAwt655/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HVb3eib8GzwEp9kpNHg9dEG2JiAUprJZkwCv8yAwt655/0/364CC6EACDA290A3F161DF11EF6BA76FD40ED8AA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.216.0/22
                IPv6:
                  2804:6860::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269688

    Signature Algorithm: sha256WithRSAEncryption
         7f:b5:a0:9a:81:06:8a:a4:4b:a3:5b:db:70:40:85:fe:c8:7a:
         70:85:af:e1:79:25:ee:5b:cb:46:00:d1:8c:76:ec:be:51:7a:
         1f:fb:68:19:b2:53:3f:48:19:05:65:70:cb:bf:43:44:32:3a:
         6d:db:67:3a:aa:73:1c:cd:a9:22:97:aa:17:81:4a:76:10:d1:
         c3:ae:03:6b:00:93:13:d6:0d:a6:a9:22:4a:85:5f:48:34:f8:
         11:10:9b:1b:b7:d0:39:e9:be:69:c2:7f:e2:34:7b:93:ad:c7:
         96:8f:e6:9b:53:7d:e8:d7:69:c3:26:d6:00:38:8a:8b:cb:39:
         ae:11:40:cd:bb:fb:46:d6:09:a1:bc:07:1c:17:07:f6:61:0f:
         9e:62:43:c4:83:2f:db:58:1f:e4:42:20:dd:16:6d:04:d4:de:
         5d:ea:21:42:e8:fe:5c:41:d4:d3:ae:08:ea:98:f3:80:9d:06:
         39:6d:58:70:cc:51:60:fa:33:be:17:86:8f:ab:1c:bd:c2:05:
         60:30:97:3c:82:69:e4:0b:ac:9a:f9:0f:5b:66:1a:44:3e:c0:
         ff:c2:11:7a:a3:ff:c5:48:ac:12:61:4a:7c:15:bb:03:f9:29:
         07:24:02:c8:a7:21:b5:9e:9c:5b:3f:dd:b8:f5:99:98:f9:4e:
         7d:1b:f0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----