This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer
File:                     CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer (raw, json)
Hash identifier:          XEc/G7GAmLGCJlC0MlT6oRqvfvce1qgzmmN9ZkY/DEs=
Subject key identifier:   CD:EF:1F:D6:69:0D:CC:ED:52:05:33:8E:E0:BC:7D:0E:18:8D:E8:42
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       35D3632BB72E39480F38D96DB988894D63693657
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Dec 2025 04:48:36 +0000
Certificate not after:    Tue 22 Dec 2026 04:53:36 +0000
Subordinate resources:    AS: 270418
                          IP: 190.111.168.0/22
                          IP: 2804:6bb4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 12:16:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d3:63:2b:b7:2e:39:48:0f:38:d9:6d:b9:88:89:4d:63:69:36:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 23 04:48:36 2025 GMT
            Not After : Dec 22 04:53:36 2026 GMT
        Subject: CN=CDEF1FD6690DCCED5205338EE0BC7D0E188DE842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:65:3e:67:43:1d:86:52:2c:c6:1f:7e:9a:e0:
                    fd:7e:38:b8:41:05:4b:5b:85:9e:26:57:9a:2a:80:
                    20:cd:05:b6:d1:a3:6d:6e:ac:d6:df:e2:7a:12:45:
                    3a:64:05:fc:f7:67:19:4b:c8:6a:8f:d1:e1:ee:13:
                    7a:0a:de:1b:39:33:0d:a3:49:af:e3:d0:bc:17:b4:
                    24:ce:9b:3b:d3:8f:29:fd:fe:c3:41:7d:3e:fb:3f:
                    26:28:61:da:94:fb:bf:90:e8:60:8c:d7:70:45:b2:
                    e4:50:01:47:cc:28:90:b4:72:24:32:c9:da:02:3e:
                    f8:46:7f:ed:c9:e1:9a:28:c1:82:52:89:ef:26:32:
                    63:6c:fd:4e:a5:d1:60:32:ec:ef:aa:bb:f7:a4:26:
                    12:78:8e:25:37:3e:87:14:93:f3:8c:92:5f:4d:0e:
                    74:ab:bc:5d:85:6f:5c:a6:45:05:eb:c3:b9:7f:f4:
                    5c:cc:77:99:c3:07:55:73:ad:8b:46:6b:2e:09:8b:
                    24:c9:a2:1f:8e:e8:50:30:68:52:9a:86:8f:8a:84:
                    23:9b:f0:e6:5e:ea:ea:38:7e:ed:30:2f:e2:05:1d:
                    42:47:91:df:b3:7e:03:1c:5e:ab:a5:2f:da:0c:90:
                    9d:f3:1c:f8:c4:25:c2:7f:1c:9a:d2:60:92:5e:6e:
                    f0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:EF:1F:D6:69:0D:CC:ED:52:05:33:8E:E0:BC:7D:0E:18:8D:E8:42
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.168.0/22
                IPv6:
                  2804:6bb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270418

    Signature Algorithm: sha256WithRSAEncryption
         db:be:41:a7:4a:36:1d:b5:5f:17:7a:d3:46:7d:64:fc:10:ca:
         cc:d9:0d:84:ff:44:d5:bf:b3:b3:54:bd:69:13:f8:fe:4e:03:
         9d:08:4f:1b:f7:a3:66:f4:c1:93:a6:96:64:30:0d:51:b4:3f:
         92:35:94:65:e8:8f:e8:ff:c9:d8:02:f8:f8:42:ba:0d:05:69:
         2c:e1:a7:00:3c:71:be:fb:dc:20:09:a3:d1:73:4e:43:af:e4:
         cb:5b:82:2c:c9:01:a9:c0:4d:ce:b3:a1:26:ca:a8:d6:70:5f:
         5f:c9:a7:d6:79:c8:62:b7:71:6c:01:9c:77:b3:d4:7d:38:fa:
         0d:c0:bc:b0:00:03:08:a0:a8:7c:95:5f:80:ed:6f:67:e2:75:
         2d:2a:10:72:2c:92:f4:c1:7f:e3:55:49:3a:35:ef:5e:70:a6:
         04:70:be:df:85:85:8b:df:a0:50:30:d2:20:fc:13:48:b9:cb:
         2c:5b:e4:c9:ed:14:c9:40:8a:f2:52:ff:5d:c3:3a:ac:8d:69:
         c9:2e:41:c2:32:5d:b3:3f:7c:8d:6e:e7:2b:6a:48:f5:18:c2:
         ed:2e:e7:8d:fb:11:7a:7a:02:bd:27:4f:30:a4:15:d8:2f:d6:
         6e:17:b8:34:1a:92:dd:c9:9a:e0:95:09:6d:df:7c:95:49:3d:
         bf:0b:36:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----