This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.cer
File:                     0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.cer (raw, json)
Hash identifier:          093vv1J768R3XHtMeVwgQp8TcSFvxQOSG00hbnKRnfI=
Subject key identifier:   0D:D7:BC:EF:DB:A4:4C:DF:A5:2E:3C:F9:3B:50:7F:D3:5B:63:8C:F5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0D79D82447056A83E7884BE5B42B2D95366F1A33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Dec 2025 20:36:45 +0000
Certificate not after:    Fri 11 Dec 2026 20:41:45 +0000
Subordinate resources:    AS: 270960
                          IP: 177.36.64.0/22
                          IP: 2804:7420::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Dec 2025 21:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:79:d8:24:47:05:6a:83:e7:88:4b:e5:b4:2b:2d:95:36:6f:1a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 12 20:36:45 2025 GMT
            Not After : Dec 11 20:41:45 2026 GMT
        Subject: CN=0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a4:6e:18:c9:c0:cc:06:4e:ff:01:af:f0:d2:
                    3f:03:4d:da:5b:e0:dc:19:0b:74:e9:88:3d:d3:91:
                    63:fc:ba:90:e1:a4:90:1e:94:a8:3d:9d:6e:db:3c:
                    1e:f7:57:5a:e8:2d:76:05:56:df:18:20:52:7b:7a:
                    4d:10:da:08:0f:07:79:ea:93:fa:f0:89:6b:64:95:
                    27:7c:2c:2d:a5:61:0f:b7:2d:7f:e1:b4:78:3a:3b:
                    85:5a:4f:8b:1e:25:f5:16:33:e2:87:15:d1:60:69:
                    3b:f2:cc:c1:a8:70:95:5d:2e:0a:4a:f1:76:ff:81:
                    6b:c0:7e:6d:74:ac:cf:54:ba:63:db:98:e1:ef:67:
                    64:1f:9b:72:05:b4:cd:29:2b:5b:3c:38:9b:ba:a1:
                    dc:07:85:10:0b:65:ea:37:d7:fb:64:a4:46:c1:ed:
                    56:9e:4c:6e:92:00:9c:75:67:3a:a1:7c:19:12:c9:
                    f8:b0:56:a4:67:14:01:e7:72:7c:b6:2b:d0:0c:8c:
                    df:a9:e3:80:28:aa:3c:cb:4c:54:11:2b:2a:11:a9:
                    ab:9a:19:3a:13:66:7a:3b:20:19:1d:e4:e4:50:cf:
                    f4:2d:33:8b:01:9b:24:32:e7:40:3b:35:4e:7c:0c:
                    f0:df:71:fe:57:e9:7e:98:91:df:67:7e:5e:5c:8c:
                    18:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:D7:BC:EF:DB:A4:4C:DF:A5:2E:3C:F9:3B:50:7F:D3:5B:63:8C:F5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FcdDg2RpqCNF6N3vbD38jVQeYasit4WedbZRMJDoJbsq/0/0DD7BCEFDBA44CDFA52E3CF93B507FD35B638CF5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.64.0/22
                IPv6:
                  2804:7420::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270960

    Signature Algorithm: sha256WithRSAEncryption
         c7:ba:05:b5:e7:5a:cb:7a:d7:01:c2:b7:91:99:96:4d:ab:d6:
         22:e9:5c:f3:a9:f9:13:51:7e:5b:18:52:4a:a8:fe:1b:38:35:
         83:79:a6:72:e7:f4:a1:9e:3f:8f:ba:e2:40:65:49:97:21:58:
         c1:f3:b8:0e:a4:f3:27:3d:91:c3:6f:9b:1d:55:8c:29:f3:aa:
         9b:9e:7c:66:42:e7:79:8a:e5:11:36:43:fe:0c:ae:19:ff:b3:
         64:ef:df:36:c6:e7:79:77:e3:b8:be:2a:5d:58:5f:4f:2b:e5:
         dd:b1:58:52:f9:7c:b3:d7:81:1b:3e:82:2c:e6:be:0c:3d:1a:
         ea:ec:c8:6f:09:f8:e2:20:e8:2a:6c:1d:d8:63:03:d4:ae:7c:
         10:e3:25:79:e1:e1:2b:da:b5:75:57:76:9d:aa:90:8b:2c:02:
         6e:22:55:74:f0:38:d3:22:b2:80:41:ac:58:7a:7f:17:af:92:
         60:40:6a:60:08:54:a1:cf:36:1a:60:45:d8:d1:9d:b5:54:51:
         17:28:59:54:9d:3f:33:52:f3:ad:ff:a4:18:3c:2e:c6:2c:50:
         63:8e:23:48:98:1b:ea:12:42:e0:98:29:29:a6:75:de:9b:20:
         3a:2e:bc:92:21:0c:4f:63:98:de:82:84:55:4c:f2:52:9b:b9:
         05:9f:2e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----