This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6498382086D279757A18E0B41BF65E6EE159F2DD.cer
File:                     6498382086D279757A18E0B41BF65E6EE159F2DD.cer (raw, json)
Hash identifier:          cCrqQyAn+qMeo7R+fTXNNlDRJ9Bk2skp/A+8GcFI/Lo=
Subject key identifier:   64:98:38:20:86:D2:79:75:7A:18:E0:B4:1B:F6:5E:6E:E1:59:F2:DD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6279D4BC8117860F6A52DC5D332AC5474CB58C8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DM8eXry83hPNqLqGvheqDwK7VB92vtzMMvZyemWERvfh/0/6498382086D279757A18E0B41BF65E6EE159F2DD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DM8eXry83hPNqLqGvheqDwK7VB92vtzMMvZyemWERvfh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Dec 2025 21:13:19 +0000
Certificate not after:    Wed 23 Dec 2026 21:18:19 +0000
Subordinate resources:    AS: 273744
                          IP: 191.7.2.0/23
                          IP: 2804:8b9c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jan 2026 08:26:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:79:d4:bc:81:17:86:0f:6a:52:dc:5d:33:2a:c5:47:4c:b5:8c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 24 21:13:19 2025 GMT
            Not After : Dec 23 21:18:19 2026 GMT
        Subject: CN=6498382086D279757A18E0B41BF65E6EE159F2DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a2:d6:5b:be:3d:83:50:3d:cc:34:2d:16:cf:
                    38:f3:c1:ec:b1:71:c6:03:5b:b5:25:95:2c:c1:e2:
                    de:a2:58:76:00:ea:d4:f5:a3:c8:a5:be:74:67:54:
                    a4:b2:94:9f:7f:ee:6a:62:23:43:67:41:1b:cb:78:
                    85:d3:95:35:22:3d:c1:55:3f:f8:53:2d:f1:7b:a7:
                    cf:8e:c1:28:a9:a1:49:07:52:ff:0f:5f:a8:26:df:
                    60:21:01:00:68:a7:a8:7f:2b:61:a9:90:12:3f:0b:
                    b6:fb:5d:d9:0c:7f:7a:7f:c6:89:9c:17:d7:68:31:
                    32:09:07:4b:1d:be:af:3d:69:c4:20:a8:74:84:b7:
                    03:65:13:c2:01:d0:33:85:8c:44:50:fc:c6:3b:b2:
                    3d:e1:74:46:cb:22:96:7a:a4:89:0e:f4:99:f3:74:
                    69:93:0f:e4:ec:39:f3:55:01:3c:57:d9:39:1c:a0:
                    17:37:c0:16:71:f5:58:ef:77:97:d1:07:1e:74:c1:
                    49:b1:a7:b8:81:61:0e:63:40:e8:78:1e:ac:07:20:
                    e6:7d:8b:5a:b0:9d:65:b7:a0:41:c0:ec:01:64:f3:
                    6b:ea:42:b0:c6:2b:2e:12:3f:81:8c:b2:f4:f5:22:
                    93:65:f9:77:3c:65:14:4b:df:89:85:fe:27:75:6a:
                    0d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                64:98:38:20:86:D2:79:75:7A:18:E0:B4:1B:F6:5E:6E:E1:59:F2:DD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DM8eXry83hPNqLqGvheqDwK7VB92vtzMMvZyemWERvfh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DM8eXry83hPNqLqGvheqDwK7VB92vtzMMvZyemWERvfh/0/6498382086D279757A18E0B41BF65E6EE159F2DD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.2.0/23
                IPv6:
                  2804:8b9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273744

    Signature Algorithm: sha256WithRSAEncryption
         65:66:bd:f8:85:26:59:10:60:60:c9:6e:49:67:7e:62:b3:20:
         17:4e:a1:18:4f:b1:fc:cb:0b:9a:48:fa:78:4f:f0:d2:b1:90:
         ae:01:8f:a7:ad:39:1d:fa:c9:8a:66:e7:b3:7b:32:aa:da:2f:
         25:63:eb:ca:53:36:28:e3:be:db:f4:f1:78:ee:64:b8:51:6b:
         5e:90:5e:81:7f:c0:af:9d:2d:bb:b7:18:86:b9:18:a6:64:f1:
         cd:56:e1:28:19:c2:9d:67:76:1d:f1:10:ef:7b:0e:fa:70:ca:
         28:7e:47:a3:4d:35:39:ba:3e:bb:6e:3a:30:45:80:3c:14:7e:
         1a:52:6c:3f:4c:ea:5b:6e:61:ed:ab:2c:3c:e0:69:c3:3b:f1:
         e2:5b:a1:c1:8f:23:80:56:68:74:c2:82:3d:4b:4e:90:48:a1:
         8b:16:a6:3a:2c:14:5e:d9:92:10:f6:6b:e1:d3:6b:60:77:f0:
         4d:2f:35:73:7e:76:63:a3:88:4c:a4:fe:cb:f4:a0:26:a5:ec:
         d7:de:eb:e7:c4:04:dc:f8:7c:fa:69:0c:ed:6e:50:4f:15:80:
         ad:3c:e5:e5:a5:5b:74:79:bd:39:ab:17:70:2b:97:95:af:af:
         9e:99:cd:ea:ec:56:f0:4a:0e:d6:c2:fc:56:e0:44:db:cf:c9:
         0d:a4:46:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----