This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.cer
File:                     DF1195DA2AA3835ACEB6C0314248212FD90A0F83.cer (raw, json)
Hash identifier:          TTJhyRP0rKhXMVQAZLtN1gUnD0gVJwsoeJBVGqGpN/4=
Subject key identifier:   DF:11:95:DA:2A:A3:83:5A:CE:B6:C0:31:42:48:21:2F:D9:0A:0F:83
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       128341517ACB4FAEDB6A72148F64475981DC63AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Dec 2025 22:06:05 +0000
Certificate not after:    Tue 22 Dec 2026 22:11:05 +0000
Subordinate resources:    AS: 61823
                          IP: 201.222.24.0/22
                          IP: 2804:19dc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 11:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:83:41:51:7a:cb:4f:ae:db:6a:72:14:8f:64:47:59:81:dc:63:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 23 22:06:05 2025 GMT
            Not After : Dec 22 22:11:05 2026 GMT
        Subject: CN=DF1195DA2AA3835ACEB6C0314248212FD90A0F83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4e:07:53:b7:01:8d:49:f7:ad:ed:d4:0d:46:
                    7c:a8:e4:65:0d:83:da:fa:3a:21:5c:42:c9:92:1f:
                    41:0d:8d:79:cf:d3:8c:26:44:82:fb:bd:34:76:7c:
                    f2:0e:f0:73:7c:20:2c:73:c2:81:10:38:11:56:6b:
                    b9:60:50:5a:7f:cd:d9:aa:a8:39:6f:54:36:1d:5c:
                    88:e5:25:8d:2f:13:1c:f5:f6:57:a4:92:ea:81:0c:
                    b4:b8:a0:79:53:06:4b:65:41:80:ff:7e:1b:26:07:
                    6a:ad:a9:29:9c:51:1a:a2:65:8c:5d:fb:93:89:85:
                    eb:f9:56:24:14:5a:0d:d7:8b:e7:c3:45:b9:83:45:
                    dc:1a:84:17:7b:3f:ac:cc:7b:8f:a0:f9:28:3b:ce:
                    c8:89:48:f0:12:31:2a:de:70:14:2c:e0:5d:05:8a:
                    0c:da:5f:cb:f8:0f:67:61:34:8f:ba:70:3d:e1:fd:
                    f6:f9:eb:43:5e:98:85:f3:5d:4b:7f:39:22:92:00:
                    96:62:f6:92:54:60:f1:71:59:9e:e0:90:4f:7a:03:
                    3f:de:54:96:1a:b3:d4:4f:2b:7b:40:f1:26:41:19:
                    3d:94:39:ee:f8:ef:8c:b1:f3:31:1e:b9:f0:32:f9:
                    23:8b:fd:45:4b:03:4b:d7:9f:41:6b:a4:e8:9e:3a:
                    f7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:11:95:DA:2A:A3:83:5A:CE:B6:C0:31:42:48:21:2F:D9:0A:0F:83
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.24.0/22
                IPv6:
                  2804:19dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61823

    Signature Algorithm: sha256WithRSAEncryption
         11:cd:40:fe:89:bd:de:68:0c:5a:6d:f4:fa:3e:67:77:dd:03:
         7a:9c:47:ac:d7:ea:55:c8:b5:2f:ad:27:31:8e:03:0a:7f:45:
         3d:ae:62:8a:cd:40:69:0f:34:1f:d0:0d:71:c6:b1:4f:b0:fe:
         96:fb:e8:59:81:0a:67:75:31:ab:ec:10:88:77:0e:63:74:96:
         4e:f2:b2:09:5c:aa:a1:41:c4:6b:1d:a0:56:46:8d:6c:d0:f3:
         00:4c:dd:d0:3d:46:03:4e:7e:ee:e0:40:67:7c:1c:a8:96:7e:
         82:3b:71:45:3e:9d:e0:96:5a:3e:84:cf:bd:5a:79:41:d0:4c:
         5d:3f:fe:61:aa:ef:39:94:c2:c2:67:3f:3f:7e:78:ff:03:17:
         3a:a9:dd:14:80:a8:67:13:27:11:39:71:e4:88:d4:00:78:47:
         14:14:9c:96:58:30:9d:d8:d4:68:b5:ea:75:f1:a6:5a:23:52:
         dc:70:a9:72:59:38:86:b5:46:43:47:99:3a:44:a3:26:d8:76:
         c8:8d:05:bf:53:81:52:d1:95:99:f0:aa:d2:70:74:bf:7b:81:
         4a:50:db:c6:03:48:58:54:47:82:42:09:fa:28:b0:42:2a:98:
         07:a4:76:69:46:51:11:2d:17:32:41:9c:e2:5e:73:e4:fd:6b:
         96:d5:be:af
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUEoNBUXrLT67banIUj2RHWYHcY6swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEyMjMyMjA2MDVaFw0yNjEyMjIyMjExMDVaMDMxMTAvBgNV
BAMTKERGMTE5NURBMkFBMzgzNUFDRUI2QzAzMTQyNDgyMTJGRDkwQTBGODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDETgdTtwGNSfet7dQNRnyo5GUN
g9r6OiFcQsmSH0ENjXnP04wmRIL7vTR2fPIO8HN8ICxzwoEQOBFWa7lgUFp/zdmq
qDlvVDYdXIjlJY0vExz19lekkuqBDLS4oHlTBktlQYD/fhsmB2qtqSmcURqiZYxd
+5OJhev5ViQUWg3Xi+fDRbmDRdwahBd7P6zMe4+g+Sg7zsiJSPASMSrecBQs4F0F
igzaX8v4D2dhNI+6cD3h/fb560NemIXzXUt/OSKSAJZi9pJUYPFxWZ7gkE96Az/e
VJYas9RPK3tA8SZBGT2UOe7474yx8zEeufAy+SOL/UVLA0vXn0FrpOieOvfNAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTfEZXaKqODWs62
wDFCSCEv2QoPgzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSEM0
M1BWaWV6bjN2V1JkUDE2a0Z6UkwydGN6cUhKMVNQUkg4UVBXTmNYalovMi8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hD
NDNQVmllem4zdldSZFAxNmtGelJMMnRjenFISjFTUFJIOFFQV05jWGpaLzIvREYx
MTk1REEyQUEzODM1QUNFQjZDMDMxNDI0ODIxMkZEOTBBMEY4My5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyd4YMA0EAgACMAcDBQAoBBncMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwDxfzANBgkqhkiG9w0BAQsFAAOCAQEAEc1A/om93mgMWm30
+j5nd90DepxHrNfqVci1L60nMY4DCn9FPa5iis1AaQ80H9ANccaxT7D+lvvoWYEK
Z3Uxq+wQiHcOY3SWTvKyCVyqoUHEax2gVkaNbNDzAEzd0D1GA05+7uBAZ3wcqJZ+
gjtxRT6d4JZaPoTPvVp5QdBMXT/+YarvOZTCwmc/P354/wMXOqndFICoZxMnETlx
5IjUAHhHFBScllgwndjUaLXqdfGmWiNS3HCpclk4hrVGQ0eZOkSjJth2yI0Fv1OB
UtGVmfCq0nB0v3uBSlDbxgNIWFRHgkIJ+iiwQiqYB6R2aUZRES0XMkGc4l5z5P1r
ltW+rw==
-----END CERTIFICATE-----