This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.cer
File:                     C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.cer (raw, json)
Hash identifier:          BRn3Yt3krL3R5aw3wT2rw4Oe5l+ZLkwK64Er/Ox9lxE=
Subject key identifier:   C1:1D:72:CF:8F:95:68:AA:A9:39:50:E9:97:EC:DD:40:D6:CB:F1:E8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2E28574B4DD1241B50A18D4170AEFFC82F84BE9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Nov 2025 17:12:08 +0000
Certificate not after:    Fri 20 Nov 2026 17:17:08 +0000
Subordinate resources:    AS: 273408
                          IP: 2804:8e2c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 05 Dec 2025 09:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:28:57:4b:4d:d1:24:1b:50:a1:8d:41:70:ae:ff:c8:2f:84:be:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 21 17:12:08 2025 GMT
            Not After : Nov 20 17:17:08 2026 GMT
        Subject: CN=C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:75:55:1c:23:86:2a:16:ee:9a:d6:ed:66:f3:
                    5d:8f:53:93:61:8f:8a:2a:4d:d5:6c:70:42:4d:f4:
                    09:e6:61:f3:ed:42:da:64:1d:2b:60:f6:87:38:57:
                    91:eb:ab:0d:bf:88:3a:72:ba:fc:6d:7a:7e:95:f9:
                    46:c0:d7:93:f7:ca:c9:de:3e:a5:95:c1:d6:b0:17:
                    f4:34:6c:1c:c2:5a:a6:68:b2:4e:3f:17:7e:0b:1f:
                    db:47:05:ff:21:85:98:5b:f5:45:28:a0:02:6a:1d:
                    e9:37:4b:b6:49:9a:24:aa:cc:ef:23:33:d2:1c:19:
                    8d:ff:d7:c5:49:b3:83:40:ec:4e:a6:27:2b:d8:4d:
                    b8:8b:9c:dd:40:51:0f:1c:19:86:6f:6d:b8:5b:74:
                    c2:8f:3f:9e:24:52:a6:be:fe:89:3d:2a:fe:32:2f:
                    91:ea:3a:a1:d1:50:20:97:16:85:cc:0d:60:58:01:
                    6a:a6:13:68:75:55:e9:d2:f5:db:35:ad:1b:7a:b9:
                    e1:35:0f:22:6f:34:4b:e3:ca:a8:8b:d5:f9:3b:a8:
                    75:e5:d0:55:47:c1:0f:26:83:35:46:11:6f:cb:68:
                    06:ca:e2:4e:be:48:dc:0b:c7:f0:b6:50:6d:02:af:
                    67:32:3a:20:c4:f8:c9:c2:43:fe:95:77:db:c7:d2:
                    7f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C1:1D:72:CF:8F:95:68:AA:A9:39:50:E9:97:EC:DD:40:D6:CB:F1:E8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273408

    Signature Algorithm: sha256WithRSAEncryption
         a5:16:0a:53:bf:1a:35:ab:87:b8:b1:c0:c6:6d:b5:01:7e:3e:
         05:83:ee:38:86:36:0d:8d:46:44:d3:88:cb:34:9f:bc:e4:10:
         7c:2e:41:d6:e0:57:88:bd:20:d5:b5:39:ce:18:bb:de:0f:01:
         25:46:5b:45:83:c5:11:80:c9:e6:c6:ff:cc:46:18:62:48:25:
         e2:9c:1c:32:ca:6f:28:01:c1:1c:88:4a:c1:33:05:d8:0f:65:
         dd:06:52:0c:05:cd:47:ea:57:d8:87:3d:e2:86:61:61:e4:c4:
         92:be:c0:88:c8:74:01:c1:5f:69:58:2d:27:1d:35:dd:f2:4c:
         22:2b:78:55:79:56:6d:a8:a8:81:1e:24:1e:b3:ac:af:05:8d:
         1a:1c:18:c5:77:0d:23:81:1f:a0:9c:61:b8:63:68:b3:2c:95:
         a7:4c:a1:1f:22:52:7a:ef:13:8f:bd:ac:4e:9b:93:a0:b0:a2:
         16:7d:46:4c:b1:a1:e3:9b:66:9a:a3:59:7f:28:aa:d9:ce:e4:
         7e:d0:65:55:b2:af:42:4f:72:eb:8c:e7:8c:7e:30:46:3d:d4:
         f7:6d:3a:17:48:0d:be:1a:75:ce:28:09:b9:bd:f2:08:63:f5:
         d6:67:f5:2e:ce:eb:c1:a6:4e:9a:1d:c2:36:bf:df:fe:b3:dd:
         9f:ae:21:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----