This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer
File:                     2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer (raw, json)
Hash identifier:          IB29HWc3yG2zHQotO+RCm1TdEJMIikJATcSgYBIo8Vk=
Subject key identifier:   2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       738A0A9E634D900FDFD6794471D16BC6153FB195
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Dec 2025 13:15:02 +0000
Certificate not after:    Mon 14 Dec 2026 13:20:02 +0000
Subordinate resources:    AS: 270770
                          IP: 189.127.138.0/23
                          IP: 2801:80:3980::/48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 04:19:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:8a:0a:9e:63:4d:90:0f:df:d6:79:44:71:d1:6b:c6:15:3f:b1:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 15 13:15:02 2025 GMT
            Not After : Dec 14 13:20:02 2026 GMT
        Subject: CN=2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:99:d3:0b:75:9a:51:a7:0a:d0:b1:0a:f4:61:
                    04:39:d8:df:0b:a0:4e:89:a7:90:1b:e9:47:6d:0e:
                    a0:80:72:90:67:ca:6d:a3:dc:8d:e2:05:65:eb:e9:
                    ca:53:ef:3f:41:37:72:4a:46:2c:2a:27:2e:3e:96:
                    14:07:1c:7a:21:87:96:df:ea:8c:d8:94:a4:cf:c7:
                    10:8f:25:85:c7:b9:8b:ad:ba:05:d7:5f:2d:30:68:
                    98:be:a4:f2:fc:ac:6b:b6:cc:18:2e:08:39:dd:80:
                    92:37:40:66:da:83:e4:c0:b4:3f:75:e1:f1:fc:8e:
                    d8:5c:cf:ad:eb:52:8c:e2:c6:83:98:68:72:57:e2:
                    9d:97:53:c9:5c:96:c4:3f:e9:f0:c3:76:75:3b:65:
                    00:f9:b6:a8:d0:f6:7a:50:e9:e7:41:6a:c4:a2:74:
                    c1:7b:8c:a6:86:b9:a5:c6:81:e1:a9:27:b2:ab:69:
                    ec:fd:d2:14:b7:a1:c4:cc:55:d3:82:08:27:06:1e:
                    34:d9:26:d8:2c:c9:87:57:5d:3d:90:85:0b:14:5c:
                    63:0e:4f:32:62:d5:da:64:d1:ee:f8:62:ea:5b:8f:
                    e7:ca:8b:87:5e:26:5d:03:84:5f:71:93:6d:1f:87:
                    b3:e8:9a:58:2a:6b:ef:69:30:65:1c:25:e3:0e:02:
                    76:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.138.0/23
                IPv6:
                  2801:80:3980::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270770

    Signature Algorithm: sha256WithRSAEncryption
         a2:fd:67:ca:e6:5f:06:1c:ec:3f:2f:fc:09:24:11:58:7e:14:
         f1:6e:ff:ff:71:d4:8f:32:09:17:31:7d:68:aa:b6:c9:31:20:
         8d:e0:92:18:88:64:33:e1:9b:6e:d1:70:2b:e2:ad:dd:50:8f:
         8e:29:6b:57:91:6a:e2:03:bb:3f:6b:e1:d7:c5:4d:6b:ed:c7:
         0c:d0:86:e7:79:48:67:18:c8:87:8f:57:5b:b7:08:19:e2:89:
         ba:f9:aa:7b:80:0c:79:05:58:2b:33:24:2b:f8:ab:24:25:08:
         29:86:69:d7:61:c4:e1:d1:14:87:6a:f1:c9:a7:e1:be:46:cb:
         67:23:6e:14:57:05:f7:98:3c:34:7a:36:17:fd:b9:cc:94:89:
         8a:c3:0b:97:eb:64:b5:10:8c:13:b4:d8:89:45:2d:d2:13:1f:
         1e:0e:3e:70:6a:4f:09:ee:81:0e:37:3c:60:75:96:4d:69:4e:
         8c:4e:e4:05:f3:ee:7e:27:ca:32:d7:81:07:4c:39:42:d5:48:
         72:5c:55:a2:ab:53:dd:0a:58:5a:e4:9b:3f:5a:13:f3:cd:4b:
         d4:ec:03:0b:51:97:01:b9:1d:68:8b:e0:b3:c1:c5:93:9a:4b:
         01:d0:62:60:a7:14:01:fe:7f:f1:8b:ea:a7:ba:2f:26:57:6d:
         a3:fa:53:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----