This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9CE8F24EE4AE8A06DAECAD7A04946B88E6A9146A.cer
File:                     9CE8F24EE4AE8A06DAECAD7A04946B88E6A9146A.cer (raw, json)
Hash identifier:          txGO5wJmCbvcSdKIALyZvqB08ZHY8OQ/7/RsFsB7CUo=
Subject key identifier:   9C:E8:F2:4E:E4:AE:8A:06:DA:EC:AD:7A:04:94:6B:88:E6:A9:14:6A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4CD082AF2D3FF41A6E6F0F1876E3701C03C77734
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/9CE8F24EE4AE8A06DAECAD7A04946B88E6A9146A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Dec 2025 17:48:36 +0000
Certificate not after:    Mon 21 Dec 2026 17:53:36 +0000
Subordinate resources:    AS: 28142
                          AS: 262430
                          IP: 177.39.136.0/22
                          IP: 186.224.64.0/20
                          IP: 187.49.80.0/20
                          IP: 2804:fc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 11:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d0:82:af:2d:3f:f4:1a:6e:6f:0f:18:76:e3:70:1c:03:c7:77:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 22 17:48:36 2025 GMT
            Not After : Dec 21 17:53:36 2026 GMT
        Subject: CN=9CE8F24EE4AE8A06DAECAD7A04946B88E6A9146A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b5:f3:08:6f:1e:22:9e:5c:f8:1e:c0:9a:ac:
                    42:ed:fa:cf:db:14:fe:ca:d5:93:86:b1:51:42:ca:
                    fe:9a:ce:86:d5:80:5d:19:7d:08:56:de:45:f8:dc:
                    1c:b6:53:5d:91:0f:86:73:af:33:59:5a:89:f3:45:
                    de:c5:71:e5:e6:23:3c:52:92:cf:a0:8c:eb:84:44:
                    de:77:1d:5e:51:c6:39:30:25:f7:00:d5:15:07:da:
                    70:1e:ae:42:2d:3b:d3:c4:30:8e:04:c7:12:cf:48:
                    14:1b:fb:e4:f2:0c:40:e8:0d:56:7f:60:91:fb:12:
                    64:16:e8:1f:9d:df:7b:21:16:ed:0d:08:44:91:55:
                    e0:90:3b:c6:02:64:7b:a9:20:fa:6e:b7:9f:e6:0d:
                    b3:5b:80:29:23:c8:f0:c0:76:f3:bb:76:ed:93:2a:
                    c7:42:82:e7:41:a7:c9:cc:cf:90:e5:c7:63:66:31:
                    c7:5a:e9:6c:30:cc:ab:a8:0e:b6:26:c9:c1:0c:77:
                    d5:ba:e9:97:05:5b:dc:cc:76:7c:53:16:b7:fa:5d:
                    a2:fb:26:94:22:68:ab:6e:45:b4:d8:1e:48:c9:31:
                    5c:db:25:74:cd:d5:81:29:c5:f1:86:62:41:84:65:
                    20:04:63:b4:ba:b4:47:d8:0c:9a:23:bb:b7:e4:39:
                    e2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:E8:F2:4E:E4:AE:8A:06:DA:EC:AD:7A:04:94:6B:88:E6:A9:14:6A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/9CE8F24EE4AE8A06DAECAD7A04946B88E6A9146A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.136.0/22
                  186.224.64.0/20
                  187.49.80.0/20
                IPv6:
                  2804:fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28142
                  262430

    Signature Algorithm: sha256WithRSAEncryption
         b0:f1:89:c1:98:fb:f3:90:e6:71:ff:98:b3:73:a4:3e:af:bc:
         08:8e:a6:ca:f0:8f:93:af:23:f9:10:75:f2:b1:99:ac:9a:89:
         b1:b9:49:d4:84:21:6f:83:04:00:e4:35:d7:a4:d1:fc:e6:fb:
         c5:28:86:aa:35:06:26:01:b7:ad:db:3b:06:5c:6a:16:95:e5:
         74:c8:f9:3a:82:97:56:4e:52:b1:de:88:1d:60:9d:46:d3:7a:
         b1:82:e4:d4:e8:01:ec:b9:24:4a:21:c9:f2:ae:87:9a:49:03:
         8b:28:75:34:19:1f:60:f6:07:e4:df:ed:bc:8c:5b:01:98:c4:
         f1:e6:19:b7:c3:83:24:bd:e1:a6:c6:40:c7:d4:64:3d:0a:4d:
         93:a1:58:c4:56:ba:77:81:5b:01:21:81:fd:55:3f:e0:77:a2:
         b8:a1:99:ad:c7:ab:23:e8:8e:a4:b0:56:45:67:00:6c:6c:73:
         2c:b0:b3:c2:a6:03:3e:3d:bd:b1:47:85:bd:79:10:91:87:67:
         0b:12:08:7a:2c:ad:06:9c:58:5c:cf:9b:a9:b0:fc:e6:7e:38:
         0a:47:a7:04:5a:76:10:7a:a0:e2:e2:be:56:c0:47:34:70:2a:
         e6:2b:8a:7f:75:b7:ef:e4:ed:44:91:75:20:50:70:2e:09:5a:
         26:67:f5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 12:29:15 2025 by rpki-client