This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/08DDB7843FB53DE8554F73A5BFECC3A958B5110C.cer
File:                     08DDB7843FB53DE8554F73A5BFECC3A958B5110C.cer (raw, json)
Hash identifier:          t1VbxArPGEvm5/N7XvSsKbm3OMh84vvL6QE8kHw6mGg=
Subject key identifier:   08:DD:B7:84:3F:B5:3D:E8:55:4F:73:A5:BF:EC:C3:A9:58:B5:11:0C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       22BC1FB97F1EED526EB54F73ADBEF643340AE8E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/08DDB7843FB53DE8554F73A5BFECC3A958B5110C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Dec 2025 19:25:03 +0000
Certificate not after:    Tue 08 Dec 2026 19:30:03 +0000
Subordinate resources:    AS: 266965
                          IP: 45.226.60.0/22
                          IP: 2804:460c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:bc:1f:b9:7f:1e:ed:52:6e:b5:4f:73:ad:be:f6:43:34:0a:e8:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  9 19:25:03 2025 GMT
            Not After : Dec  8 19:30:03 2026 GMT
        Subject: CN=08DDB7843FB53DE8554F73A5BFECC3A958B5110C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:d5:74:12:91:b7:0c:32:0b:f4:6c:8e:0a:
                    03:59:1d:52:25:25:d4:15:a9:95:a8:1e:7d:c1:d6:
                    7c:7b:39:38:6f:11:62:a9:73:d7:82:28:fa:59:da:
                    b1:c6:a5:ff:ed:ab:df:d0:ac:28:4e:ee:8c:2a:e3:
                    61:e5:0b:dd:84:57:b4:84:90:ec:c7:75:66:51:7c:
                    9b:78:ba:bd:00:56:16:19:4e:b6:8b:e6:12:5f:c5:
                    f4:57:29:39:e9:f9:69:7e:3c:07:8c:ac:7a:a9:2e:
                    cf:84:a8:0e:2a:0d:51:19:a2:6f:ea:bd:a9:36:ec:
                    9f:5b:01:5f:5e:ee:d5:f6:ad:cc:c9:78:e3:0d:47:
                    1c:c4:0d:b4:ba:42:30:d0:2e:e3:b5:ae:15:d5:01:
                    e1:02:d9:2a:35:d7:ea:61:cc:34:5c:e1:39:a2:95:
                    4b:01:19:ef:c7:7d:29:44:19:95:6d:33:69:52:67:
                    d7:f9:a7:e1:99:58:f9:0c:d8:18:bd:df:6d:a2:6d:
                    b8:8b:ab:63:e1:9b:2f:dd:fb:7a:b5:5c:fc:9e:f5:
                    82:ae:39:1a:28:52:b2:78:23:3c:bd:76:bf:bb:3e:
                    22:bb:73:4c:3f:e6:1e:65:12:21:44:75:ff:b4:eb:
                    52:00:92:d9:ae:d0:19:b4:08:99:63:59:d2:89:a5:
                    4f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:DD:B7:84:3F:B5:3D:E8:55:4F:73:A5:BF:EC:C3:A9:58:B5:11:0C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/08DDB7843FB53DE8554F73A5BFECC3A958B5110C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.60.0/22
                IPv6:
                  2804:460c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266965

    Signature Algorithm: sha256WithRSAEncryption
         47:99:9d:58:3f:e6:16:d8:70:12:b7:c0:74:16:e6:1b:db:20:
         e7:cf:e4:0f:71:3c:77:43:64:71:68:11:64:3f:3c:10:d0:23:
         4c:ce:5e:f0:f4:17:23:72:0e:d7:55:c6:fa:38:11:e6:a7:c3:
         fc:45:86:93:f0:37:d4:6b:c3:16:52:0c:83:78:0f:0a:7d:b0:
         2b:f9:c6:3e:43:61:1e:89:a5:c7:fc:0d:78:c3:9b:01:f1:bd:
         8e:8d:93:9b:e3:38:d0:16:14:ce:b5:a3:ad:d1:1c:ec:e1:6e:
         1d:20:29:8a:50:32:7b:16:6b:c9:b6:9b:c6:d6:96:97:d3:88:
         f0:d0:0e:99:e4:54:6d:a2:e0:4c:fb:34:c2:83:75:c7:0d:7a:
         03:58:6e:53:4e:7c:d4:8b:05:42:4a:d7:b6:9a:08:12:a8:fc:
         51:9d:94:2f:9b:92:f7:cd:43:11:aa:1d:79:f9:59:d3:56:28:
         4f:55:bd:b4:74:4d:f0:69:84:b8:98:25:41:61:1b:f3:72:db:
         28:b1:7d:bb:eb:81:7d:e6:f1:b3:6f:58:df:90:2a:d0:d4:b4:
         44:5c:72:a3:55:c0:d7:cf:af:1a:cf:fa:5c:b4:a9:07:3d:e1:
         3d:d6:04:a2:21:6e:80:3e:ab:a6:8b:e3:98:6b:ba:6d:ae:56:
         5c:f3:83:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----