This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/28C222B8380EDA26588BC99D18AE110A348BF3D6.cer
File:                     28C222B8380EDA26588BC99D18AE110A348BF3D6.cer (raw, json)
Hash identifier:          g8nWnTdkzOxAN2HQFhHaD9B+HABvE0pbXXYD9r2SsmQ=
Subject key identifier:   28:C2:22:B8:38:0E:DA:26:58:8B:C9:9D:18:AE:11:0A:34:8B:F3:D6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2679037B94BDF4519FDCBD7D197B19EA37986061
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/0/28C222B8380EDA26588BC99D18AE110A348BF3D6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Dec 2025 19:52:07 +0000
Certificate not after:    Fri 18 Dec 2026 19:57:07 +0000
Subordinate resources:    AS: 266224
                          IP: 200.9.16.0/22
                          IP: 2804:3c9c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:79:03:7b:94:bd:f4:51:9f:dc:bd:7d:19:7b:19:ea:37:98:60:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 19 19:52:07 2025 GMT
            Not After : Dec 18 19:57:07 2026 GMT
        Subject: CN=28C222B8380EDA26588BC99D18AE110A348BF3D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:95:93:05:7c:b6:da:47:f9:34:a3:5a:da:2c:
                    e0:fa:3d:28:c1:87:b6:0c:0e:6d:bf:dc:97:48:76:
                    bd:12:52:0a:a4:cb:e0:9d:5e:6b:20:bb:3d:03:c6:
                    78:63:93:3e:0b:61:71:fb:c4:05:f3:21:5b:c2:79:
                    43:d5:49:87:96:6a:6c:c0:60:d0:f2:45:92:8b:33:
                    94:2d:c1:22:54:75:ca:33:64:7a:52:39:d1:2f:96:
                    30:94:2f:54:9c:06:a7:2c:18:0c:59:5b:f5:74:1f:
                    ae:05:1e:e3:f7:33:24:1f:bc:83:f9:33:e4:78:f6:
                    09:e7:97:d7:2c:ee:3b:1e:cb:a7:81:f2:a6:28:d2:
                    66:a9:d7:c7:35:47:bf:a2:d0:a1:46:c4:95:10:0a:
                    ab:ce:8b:fe:ae:26:9b:70:af:bf:33:82:15:7c:62:
                    66:fa:2c:97:46:7a:c6:ac:72:62:4d:23:c3:55:14:
                    0d:13:fd:c5:de:85:e5:64:af:0c:59:a8:2d:23:6c:
                    d1:0e:6d:95:d5:aa:c4:ff:f9:0e:64:db:ec:f3:dd:
                    84:3c:ef:2d:b0:2d:b2:76:1f:6f:e5:57:8a:7c:0f:
                    6f:bf:b0:22:ac:4f:5f:bc:72:b0:d6:90:2b:f3:f9:
                    89:a7:da:e7:d3:9b:d7:c3:a3:3a:75:9b:1e:03:3a:
                    47:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                28:C2:22:B8:38:0E:DA:26:58:8B:C9:9D:18:AE:11:0A:34:8B:F3:D6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/0/28C222B8380EDA26588BC99D18AE110A348BF3D6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.16.0/22
                IPv6:
                  2804:3c9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266224

    Signature Algorithm: sha256WithRSAEncryption
         bc:70:24:8d:e4:34:55:76:45:d4:2a:7b:e8:38:ec:63:91:ee:
         36:a4:47:64:bb:41:0c:c0:9a:ee:87:6b:9e:a8:e1:7a:4c:d1:
         8d:c8:18:19:11:c4:87:b1:c9:28:ce:40:a4:ca:99:10:17:93:
         be:8c:dc:0c:b8:ce:ef:4a:53:70:a1:38:0e:d2:5f:ca:d4:84:
         3a:be:ca:82:ed:6e:75:b5:2c:3e:f3:3d:50:2c:fd:ce:04:92:
         5a:31:59:a1:3e:ce:f1:98:27:a7:a2:e1:f6:2d:ac:54:79:9a:
         be:18:59:78:50:f3:db:a9:d4:14:97:23:33:8f:0d:19:4d:36:
         fe:ec:3f:46:05:bc:bb:5a:b3:a8:df:9c:36:86:1d:0c:99:6a:
         ac:ed:ee:9a:4a:4c:18:b8:96:5b:3f:68:74:64:8b:b2:f3:5d:
         e5:01:3a:ac:7d:a0:05:cc:04:06:e2:52:af:d1:f5:32:d3:ee:
         80:c1:2d:d5:d5:d2:53:71:61:fd:2b:7e:ac:94:c2:02:15:2c:
         09:d2:27:a1:8c:50:c1:d3:eb:5f:41:d8:05:aa:cd:f9:18:f8:
         42:ee:6e:94:60:c4:b6:2c:67:f7:b2:0d:a7:80:f5:0c:ce:a8:
         3f:47:11:21:27:c4:26:1b:95:35:73:73:0c:91:e5:eb:dd:e9:
         be:8f:75:dc
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUJnkDe5S99FGf3L19GXsZ6jeYYGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEyMTkxOTUyMDdaFw0yNjEyMTgxOTU3MDdaMDMxMTAvBgNV
BAMTKDI4QzIyMkI4MzgwRURBMjY1ODhCQzk5RDE4QUUxMTBBMzQ4QkYzRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7lZMFfLbaR/k0o1raLOD6PSjB
h7YMDm2/3JdIdr0SUgqky+CdXmsguz0Dxnhjkz4LYXH7xAXzIVvCeUPVSYeWamzA
YNDyRZKLM5QtwSJUdcozZHpSOdEvljCUL1ScBqcsGAxZW/V0H64FHuP3MyQfvIP5
M+R49gnnl9cs7jsey6eB8qYo0map18c1R7+i0KFGxJUQCqvOi/6uJptwr78zghV8
Ymb6LJdGesascmJNI8NVFA0T/cXeheVkrwxZqC0jbNEObZXVqsT/+Q5k2+zz3YQ8
7y2wLbJ2H2/lV4p8D2+/sCKsT1+8crDWkCvz+Ymn2ufTm9fDozp1mx4DOkfBAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQowiK4OA7aJliL
yZ0YrhEKNIvz1jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMnI5
eHdKaFZweWpCVDVmbUNYbnl4TkNWUExleE10VldGNFFxcHJEUmtiWksvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJy
OXh3SmhWcHlqQlQ1Zm1DWG55eE5DVlBMZXhNdFZXRjRRcXByRFJrYlpLLzAvMjhD
MjIyQjgzODBFREEyNjU4OEJDOTlEMThBRTExMEEzNDhCRjNENi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyAkQMA0EAgACMAcDBQAoBDycMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQP8DANBgkqhkiG9w0BAQsFAAOCAQEAvHAkjeQ0VXZF1Cp7
6DjsY5HuNqRHZLtBDMCa7odrnqjhekzRjcgYGRHEh7HJKM5ApMqZEBeTvozcDLjO
70pTcKE4DtJfytSEOr7Kgu1udbUsPvM9UCz9zgSSWjFZoT7O8Zgnp6Lh9i2sVHma
vhhZeFDz26nUFJcjM48NGU02/uw/RgW8u1qzqN+cNoYdDJlqrO3umkpMGLiWWz9o
dGSLsvNd5QE6rH2gBcwEBuJSr9H1MtPugMEt1dXSU3Fh/St+rJTCAhUsCdInoYxQ
wdPrX0HYBarN+Rj4Qu5ulGDEtixn97INp4D1DM6oP0cRISfEJhuVNXNzDJHl693p
vo913A==
-----END CERTIFICATE-----