This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/46669CD8CCAA54E284B44792CB81ED8D401D6A03.cer
File:                     46669CD8CCAA54E284B44792CB81ED8D401D6A03.cer (raw, json)
Hash identifier:          zJXQgPUtp263qGG9PV89VHYQiHPhjk+7qnGo78KhK+M=
Subject key identifier:   46:66:9C:D8:CC:AA:54:E2:84:B4:47:92:CB:81:ED:8D:40:1D:6A:03
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       797F1F8E83B0BE756AA0A1B869C29B59142DF84A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/46669CD8CCAA54E284B44792CB81ED8D401D6A03.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Dec 2025 15:55:24 +0000
Certificate not after:    Thu 17 Dec 2026 16:00:24 +0000
Subordinate resources:    AS: 271343
                          IP: 200.39.36.0/22
                          IP: 2804:7a08::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:7f:1f:8e:83:b0:be:75:6a:a0:a1:b8:69:c2:9b:59:14:2d:f8:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 18 15:55:24 2025 GMT
            Not After : Dec 17 16:00:24 2026 GMT
        Subject: CN=46669CD8CCAA54E284B44792CB81ED8D401D6A03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bc:47:ce:dc:28:b1:3f:7a:da:07:34:59:26:
                    be:64:2e:c6:e6:2b:9c:45:a5:0c:5f:0d:e5:8b:85:
                    5d:cd:ba:ed:9f:b1:a2:9e:c6:4d:35:91:fe:bd:01:
                    cc:fe:69:ca:02:fd:7a:c3:b6:74:d0:2a:dd:91:fa:
                    90:bb:aa:6d:98:1f:27:b5:32:8c:09:1e:4c:ba:cf:
                    67:bd:5d:8f:8e:ee:4e:29:7c:1f:59:7e:55:d8:89:
                    4c:94:e4:0f:37:a3:01:37:d1:93:af:1d:18:bb:b7:
                    43:92:aa:0c:95:b7:d8:89:44:e5:35:21:ec:cb:70:
                    67:8f:f3:60:1d:86:0e:a0:a7:9c:99:d9:be:6c:e9:
                    4c:7d:e2:9a:de:50:0f:7c:2a:5d:62:86:d9:f3:6c:
                    4b:9f:93:b8:0f:49:c1:80:8a:0f:bb:8e:51:9b:bd:
                    76:4c:44:21:3a:7f:9a:b7:6f:b0:f9:7b:08:49:81:
                    93:68:a6:66:c1:eb:99:d0:17:f9:78:19:2f:e4:fd:
                    58:0b:12:c3:bf:4e:e2:ff:18:5b:ac:a8:14:e9:49:
                    6b:62:ad:17:a3:f9:62:87:b8:43:99:b8:71:b7:e2:
                    46:ca:0f:11:a6:9b:0e:46:1b:eb:c9:8e:3f:12:b0:
                    44:07:62:ef:40:c7:15:db:c2:e3:27:ac:a5:ec:f2:
                    33:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:66:9C:D8:CC:AA:54:E2:84:B4:47:92:CB:81:ED:8D:40:1D:6A:03
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/46669CD8CCAA54E284B44792CB81ED8D401D6A03.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.36.0/22
                IPv6:
                  2804:7a08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271343

    Signature Algorithm: sha256WithRSAEncryption
         0d:53:2a:62:ae:53:02:31:d6:1d:44:90:0d:8c:ce:99:e9:37:
         bb:31:e6:a7:aa:41:25:fa:91:53:18:ee:95:6e:25:55:0f:0b:
         54:d9:37:21:02:17:aa:d1:67:e6:3a:5e:e3:3b:f3:a4:d3:d3:
         95:75:c2:6f:78:80:24:b4:e1:ec:af:e0:c4:da:68:83:85:83:
         fb:09:c6:df:b5:e9:35:eb:37:73:fd:bf:46:d6:63:13:c8:ea:
         42:bf:7c:bd:04:7d:7b:ef:f5:89:b7:8f:07:1d:31:2f:b1:d3:
         82:2a:0d:a7:fb:2b:0b:43:91:58:48:f2:2b:73:a1:73:07:bf:
         6f:b5:b8:05:3c:43:7c:b5:42:dc:a5:42:6c:7f:de:8f:4f:f8:
         71:a6:d5:ef:29:ab:4c:d7:fe:ef:be:e7:07:8c:ef:ef:77:ad:
         86:5d:73:b1:a7:3c:7e:6a:8e:94:9b:92:6c:6b:9c:13:44:7b:
         f0:c6:94:ee:52:f8:cb:41:ff:56:3f:1f:e6:37:51:4f:33:5a:
         e0:3d:b9:c6:f7:42:96:24:8a:78:a9:30:36:a8:21:3f:a4:2e:
         e9:73:95:a6:c7:5e:3e:f5:82:f4:f0:f5:7f:26:38:31:92:16:
         dd:e6:40:4d:5f:88:32:c2:56:c1:7d:54:13:94:6d:63:77:5e:
         1d:26:73:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----