This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8C30D843551E998DF058D595483BE30C4A32AC7D.cer
File:                     8C30D843551E998DF058D595483BE30C4A32AC7D.cer (raw, json)
Hash identifier:          NjDT7AqO+IHklEJiwgASAUwhlt+29YPlnKDPhB7BbJg=
Subject key identifier:   8C:30:D8:43:55:1E:99:8D:F0:58:D5:95:48:3B:E3:0C:4A:32:AC:7D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       54FA3E6525D3C30BCAFC67C93131A226C1A23733
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/8C30D843551E998DF058D595483BE30C4A32AC7D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Dec 2025 12:29:15 +0000
Certificate not after:    Fri 11 Dec 2026 12:34:15 +0000
Subordinate resources:    AS: 268605
                          IP: 45.164.60.0/22
                          IP: 2804:53c4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 20:54:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:fa:3e:65:25:d3:c3:0b:ca:fc:67:c9:31:31:a2:26:c1:a2:37:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 12 12:29:15 2025 GMT
            Not After : Dec 11 12:34:15 2026 GMT
        Subject: CN=8C30D843551E998DF058D595483BE30C4A32AC7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a4:0c:ea:82:6f:e8:18:97:c9:9b:82:a4:48:
                    ac:b2:c9:3d:52:73:41:3c:17:3f:7b:d6:f2:e6:67:
                    71:56:2f:47:aa:49:76:20:7c:2b:d6:f5:e6:3c:db:
                    6e:0a:08:91:6d:67:89:c5:7d:01:20:fc:dc:6f:1f:
                    eb:2f:b6:7b:85:85:55:be:aa:fe:25:2c:5c:20:19:
                    3f:cd:ba:ec:6b:f4:69:34:8e:4c:7b:ca:b0:ef:fe:
                    2a:08:5e:a2:45:62:74:c0:d2:2e:f1:d1:8d:6c:c9:
                    3d:98:3c:81:9f:cc:1c:7e:87:9f:01:d7:9d:38:70:
                    70:5d:cf:fe:39:3b:25:de:85:0f:bb:09:0d:cf:af:
                    70:81:e9:53:84:45:d0:ff:c5:fb:28:ff:fb:96:54:
                    c0:14:6a:fc:0b:11:b3:8a:4f:8e:61:3f:a9:7f:93:
                    24:47:a3:0c:1f:c2:b2:f8:48:b0:2f:85:7b:71:fd:
                    fb:81:81:14:ac:9f:c4:2b:e7:39:f1:b1:e8:01:d8:
                    40:25:7e:8c:01:c8:05:8c:7b:5a:57:0b:8a:6b:4a:
                    36:e9:ea:d3:52:17:d8:0c:c2:60:a5:d2:cb:21:69:
                    1b:e2:2e:70:ac:d9:66:dd:ed:cf:e0:1c:af:a8:f6:
                    7d:17:43:90:18:b6:e6:5d:75:61:a9:65:36:b0:33:
                    0f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:30:D8:43:55:1E:99:8D:F0:58:D5:95:48:3B:E3:0C:4A:32:AC:7D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/8C30D843551E998DF058D595483BE30C4A32AC7D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.60.0/22
                IPv6:
                  2804:53c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268605

    Signature Algorithm: sha256WithRSAEncryption
         9e:75:1d:e8:2f:1e:3d:fe:56:9b:f4:9a:d2:d2:c3:0f:df:a1:
         ca:18:20:55:cf:05:83:86:de:63:be:f4:46:42:01:73:3f:54:
         f8:af:8c:46:29:cb:ca:9f:14:77:3d:a5:7b:0d:08:81:a8:58:
         57:6c:07:0b:a1:16:a8:76:8a:10:7f:84:f3:2c:54:96:25:ef:
         bf:8a:bf:77:c7:e7:c8:ea:de:1b:6b:da:69:8a:56:e2:53:c7:
         ef:fd:74:04:98:0c:7e:0e:36:4b:06:39:8d:c7:e9:e2:3b:b3:
         8b:b5:e0:80:07:1a:f9:cf:1b:d5:f3:74:5d:8d:f0:a0:47:a7:
         9c:2d:35:f2:47:f6:e6:11:55:24:ce:b4:c8:a5:a8:54:c9:84:
         cb:fd:79:54:ae:d6:69:ca:48:84:65:62:0f:1f:7a:60:a6:46:
         69:37:b5:97:69:eb:29:d5:66:de:78:c1:be:89:0a:c7:17:35:
         94:e4:1a:56:d0:11:de:20:d4:3e:7f:8b:e7:21:03:0b:00:b5:
         fe:c8:a8:3d:d1:b7:a2:7a:f4:60:98:a8:67:ec:52:12:e0:c7:
         bc:7f:5e:8b:da:b3:78:6a:7d:f0:12:04:ad:a3:1a:76:ea:fe:
         3b:31:33:29:3c:6b:c6:b3:41:10:d8:8e:71:05:89:cd:7d:fb:
         13:e5:10:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----