This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/049C86AED090D820BC9DFDA1465ACE658A61D801.cer
File:                     049C86AED090D820BC9DFDA1465ACE658A61D801.cer (raw, json)
Hash identifier:          hUt4Z+svSBs7BhZACe93cte6GKffpGfgZHD7aI3XSK0=
Subject key identifier:   04:9C:86:AE:D0:90:D8:20:BC:9D:FD:A1:46:5A:CE:65:8A:61:D8:01
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       60031F181BC7EFE77FFB05227F3FC8930FCB2CC1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/049C86AED090D820BC9DFDA1465ACE658A61D801.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Dec 2025 20:36:48 +0000
Certificate not after:    Fri 11 Dec 2026 20:41:48 +0000
Subordinate resources:    AS: 270722
                          IP: 187.102.248.0/22
                          IP: 2804:705c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:03:1f:18:1b:c7:ef:e7:7f:fb:05:22:7f:3f:c8:93:0f:cb:2c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 12 20:36:48 2025 GMT
            Not After : Dec 11 20:41:48 2026 GMT
        Subject: CN=049C86AED090D820BC9DFDA1465ACE658A61D801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:58:dc:35:98:dc:82:b2:12:32:96:80:13:af:
                    9c:81:f5:93:12:56:f2:e6:ce:1e:95:63:4b:e0:22:
                    00:af:a4:c1:2c:df:3f:6a:77:e0:c3:01:de:ca:45:
                    f4:b4:e3:d7:fd:fb:fe:46:63:2c:76:22:f1:06:81:
                    f0:87:ce:1e:69:c2:dd:71:8c:f5:74:e4:10:f4:a2:
                    43:5e:2c:a0:2c:35:9c:04:0f:10:71:93:c6:05:1c:
                    1c:e9:0f:f5:57:2c:49:1b:f3:51:16:00:c5:3a:04:
                    35:48:52:6c:f3:5c:9e:7a:04:ff:5a:c8:03:ff:97:
                    9a:a7:bb:55:44:00:7e:2e:8a:5c:e1:e8:04:83:47:
                    d8:98:fb:9e:eb:13:56:19:6a:09:d5:69:77:b7:00:
                    19:7c:d0:45:12:e2:9d:35:60:2d:a1:d8:54:02:87:
                    2f:55:0f:ed:0a:f6:73:94:e7:c9:70:38:bc:17:58:
                    22:90:e3:0b:7b:f0:f5:bb:6b:d5:55:86:ba:2d:67:
                    1c:5a:b4:05:35:09:b0:1b:a9:f9:60:b3:f7:c2:30:
                    ea:ec:aa:a3:2e:7e:e5:9e:c4:17:b9:07:78:35:1a:
                    0e:3f:fb:16:bf:3b:62:a5:ab:f9:76:7f:19:14:01:
                    ee:62:45:58:c3:96:15:11:72:bb:1f:19:39:2f:ba:
                    1c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                04:9C:86:AE:D0:90:D8:20:BC:9D:FD:A1:46:5A:CE:65:8A:61:D8:01
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/049C86AED090D820BC9DFDA1465ACE658A61D801.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.248.0/22
                IPv6:
                  2804:705c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270722

    Signature Algorithm: sha256WithRSAEncryption
         ce:a2:f4:3e:13:b8:39:98:f0:8f:ff:31:43:6b:db:fb:62:f4:
         26:dc:cb:d8:4f:65:5e:59:35:d4:75:52:35:ac:43:2c:a9:c0:
         9a:56:5a:7e:9c:15:a9:47:43:78:20:1f:1a:dc:62:e0:02:e7:
         f7:8e:7d:54:ee:6d:59:c0:95:62:6c:73:7e:06:d9:47:e8:8d:
         f9:69:a1:cf:48:c3:e1:2a:2e:c6:f7:2b:5a:43:d4:d8:15:2f:
         f6:7b:a7:64:4d:30:42:7a:89:03:8c:c2:ae:a9:9a:b6:bb:8a:
         f7:fb:4f:60:e1:47:8d:b9:a1:93:c4:db:c8:cc:2e:46:76:a0:
         1c:97:68:fd:78:bf:29:27:32:1c:d2:20:ae:dd:a1:70:60:32:
         70:bc:f9:95:0d:12:18:90:ba:6f:6c:90:56:d3:25:c1:2a:57:
         07:09:01:4a:a1:df:94:68:2a:ca:b9:0b:57:1b:59:5d:5c:3f:
         11:33:1f:2a:69:9f:47:9c:db:50:f1:44:7b:9c:f3:b3:c9:c9:
         e0:7d:1e:6f:4a:3f:7e:6e:16:6d:31:b0:00:01:90:90:b4:63:
         9f:94:7a:cf:7c:3e:fe:09:6e:44:c3:c3:02:f0:9c:9d:53:01:
         7d:58:89:35:31:6c:e5:7c:d2:ed:68:0d:cd:fb:e8:45:df:9e:
         56:b1:24:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----