This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer
File:                     3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer (raw, json)
Hash identifier:          7zcl6u1GN/5/Z5ZSx/eRXai7gD5O1UB8a3fp4ei25Ys=
Subject key identifier:   3E:58:6F:99:89:49:24:5A:7B:A8:7D:54:C4:8D:B6:C4:36:0C:EB:9D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       26D3EC67AD6514AF577740D7D4D83A028CD87375
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Dec 2025 01:20:33 +0000
Certificate not after:    Thu 10 Dec 2026 01:25:33 +0000
Subordinate resources:    AS: 262953
                          IP: 186.235.248.0/22
                          IP: 2804:e68::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Dec 2025 09:04:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d3:ec:67:ad:65:14:af:57:77:40:d7:d4:d8:3a:02:8c:d8:73:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 11 01:20:33 2025 GMT
            Not After : Dec 10 01:25:33 2026 GMT
        Subject: CN=3E586F998949245A7BA87D54C48DB6C4360CEB9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dc:cc:0e:b9:dc:96:e9:ae:77:8e:94:3a:42:
                    97:6f:7d:36:b3:ae:38:4c:69:4d:0f:28:f2:c6:94:
                    f3:c1:da:f6:fb:04:7a:62:19:20:1b:fb:c4:27:e6:
                    44:f4:fc:c2:74:58:8b:cc:f1:ab:3c:57:af:c6:9f:
                    72:ee:ad:d3:af:03:0c:29:3e:81:56:0e:70:55:ec:
                    5b:6c:81:f6:2a:59:3f:9e:8f:57:46:e7:ce:c2:39:
                    11:59:ff:25:4c:85:e9:b6:be:b5:27:7f:e9:14:bf:
                    16:ce:cc:da:83:7c:7f:ad:53:2e:ce:50:a2:e0:fc:
                    95:97:97:9f:aa:39:22:3f:53:91:d2:55:82:6c:4e:
                    56:e4:67:d9:df:f2:e7:ea:0c:46:dd:d5:c1:16:1d:
                    99:a7:ea:e7:03:99:1e:04:e3:0a:54:ed:47:c9:58:
                    21:c7:a2:48:d3:a9:64:96:00:79:fd:88:08:8d:d9:
                    b8:be:ef:c1:1c:f1:60:ac:d0:53:51:b2:5b:92:40:
                    23:99:79:e3:a4:c7:a3:af:68:c5:2c:24:0c:e5:a1:
                    32:41:fc:5d:bc:99:e7:13:d7:59:bc:9d:67:7e:a3:
                    eb:cb:7a:12:2c:28:1b:d5:05:b6:3a:24:b5:13:91:
                    1a:36:97:63:4d:91:23:39:e4:ff:c9:ec:d9:a3:a9:
                    cd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:58:6F:99:89:49:24:5A:7B:A8:7D:54:C4:8D:B6:C4:36:0C:EB:9D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.248.0/22
                IPv6:
                  2804:e68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262953

    Signature Algorithm: sha256WithRSAEncryption
         43:5d:f6:30:f5:3e:a3:ea:57:12:54:80:c2:cc:0a:d3:1d:fb:
         c1:19:25:96:92:60:9e:00:da:ac:cb:cc:c4:3f:76:29:83:93:
         90:17:eb:83:f2:38:39:bb:ad:d1:d0:d6:0b:14:6f:7a:aa:5b:
         7d:70:23:e0:d5:95:a1:c6:87:a7:ac:10:cf:41:51:2b:d2:e3:
         34:78:e0:c2:75:60:90:2f:d5:f0:8b:50:5c:e6:c6:6d:48:e7:
         f2:1a:64:cb:9c:09:d6:38:71:2e:ce:70:87:ee:ac:7b:62:c1:
         41:ce:5c:9d:db:5a:d3:61:52:fb:2a:28:4e:4e:d1:d0:15:f8:
         d9:34:45:38:85:46:8e:e3:78:62:a5:e6:98:09:0f:ae:b4:48:
         78:62:29:13:8b:ef:e3:84:2e:e9:e1:80:e4:5b:19:1a:ac:6f:
         71:19:49:76:84:8d:44:15:73:34:84:5c:7b:5a:61:c6:7c:02:
         b4:45:ed:f5:49:97:47:3b:40:d6:8e:c5:5d:6e:77:8c:3a:78:
         45:82:5e:3f:0b:d6:7c:e6:52:f5:01:08:12:db:3c:0f:19:8e:
         6d:04:aa:a9:d5:6b:b6:48:88:13:c6:5d:df:4b:ab:dd:c3:c8:
         83:8b:10:ac:48:7f:0f:2f:33:9a:96:c1:4c:83:1b:4c:ca:27:
         7e:bb:1e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----