This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3.cer
File:                     513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3.cer (raw, json)
Hash identifier:          3EpoZhylIk4RNKCHvGP8THYRyKrmeVUdPxp/UMhTjiI=
Subject key identifier:   51:3A:36:B1:FE:E3:18:94:3F:A5:8A:C6:F5:09:9D:4F:CB:EC:7D:D3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4C8D60BE7276342F190C3BC589557DDC16079BCA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Dec 2025 19:23:31 +0000
Certificate not after:    Fri 11 Dec 2026 19:28:31 +0000
Subordinate resources:    AS: 270274
                          IP: 200.124.84.0/22
                          IP: 2804:6980::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Dec 2025 19:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8d:60:be:72:76:34:2f:19:0c:3b:c5:89:55:7d:dc:16:07:9b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 12 19:23:31 2025 GMT
            Not After : Dec 11 19:28:31 2026 GMT
        Subject: CN=513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:04:ee:7e:a7:ac:21:90:cd:74:8c:db:86:78:
                    ea:e5:ca:55:c5:7b:c0:62:69:fa:71:38:d7:46:16:
                    d4:35:88:18:44:d2:69:c4:38:c8:7f:e0:04:b6:12:
                    56:43:5b:99:e6:35:af:e3:fc:a7:e8:c2:fe:69:5f:
                    bc:73:b3:5f:fb:2d:1f:01:c2:ce:99:77:5b:cb:dc:
                    90:b7:91:2e:17:a0:a8:1b:7d:10:f1:70:89:ab:05:
                    c1:bf:31:a0:4e:22:a9:45:c7:c1:e1:42:4e:f5:14:
                    16:a0:80:10:6d:9e:3c:00:ed:94:bc:45:60:8f:17:
                    44:24:b1:50:8f:1e:c3:4e:11:74:3c:15:f0:78:8e:
                    ad:01:fc:23:37:6f:30:0f:62:30:67:f1:5c:3b:f8:
                    99:c7:f1:92:85:fe:cb:27:33:3a:07:9a:1e:7b:15:
                    66:a4:b5:0a:70:7b:ad:7a:c9:99:ae:7a:8e:00:78:
                    b3:a8:5d:dc:ed:63:7b:66:40:f6:df:6f:cb:69:aa:
                    78:00:35:e9:60:5b:21:53:25:bb:38:70:63:17:cd:
                    35:12:62:8a:63:03:78:d3:c4:b9:b3:79:de:23:e9:
                    fc:d1:52:d3:64:d0:63:32:e4:8b:a6:f3:69:84:e7:
                    8a:a3:15:3b:4c:b0:d9:c2:5a:97:00:af:7e:51:57:
                    d0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:3A:36:B1:FE:E3:18:94:3F:A5:8A:C6:F5:09:9D:4F:CB:EC:7D:D3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/513A36B1FEE318943FA58AC6F5099D4FCBEC7DD3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.84.0/22
                IPv6:
                  2804:6980::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270274

    Signature Algorithm: sha256WithRSAEncryption
         66:bb:c4:d0:b6:b2:4b:1f:53:86:4e:58:af:59:87:75:dd:f4:
         01:38:2e:a2:b0:02:09:38:c8:02:a7:1b:6b:4d:1d:e8:a9:63:
         58:bd:30:8a:cf:b8:13:63:00:13:53:d1:19:ca:c6:e8:da:db:
         38:24:d0:31:1a:06:42:59:e0:ea:da:7d:4f:4d:40:3d:a7:75:
         45:df:a7:7b:a5:20:86:3e:c9:3a:0b:63:9b:79:29:ee:ce:a0:
         13:f3:98:2d:52:16:5d:47:1c:8f:0d:ca:29:e3:b8:4a:74:42:
         74:9a:2e:99:4a:a1:12:b2:72:83:8b:21:a2:31:a7:8a:b0:bd:
         64:28:b6:dd:a4:0e:e0:eb:97:d3:d7:5f:5a:31:b9:61:91:bd:
         dc:d1:a7:ae:86:b6:ad:68:17:ad:26:dd:a5:70:2d:dc:34:f4:
         8a:ee:1e:0d:a0:6e:da:0d:19:99:7e:43:14:9e:d7:9c:45:de:
         ad:6d:c3:cc:77:7b:2b:d3:ed:58:c5:a6:2d:da:49:7a:7b:56:
         8e:a4:43:44:0f:d7:22:d5:87:08:c6:51:9f:e2:01:e1:6c:be:
         7c:7a:82:ab:7f:84:7b:98:12:37:a1:cb:49:5a:9a:59:38:0f:
         bb:33:44:55:d0:4a:6d:dd:ec:a3:52:85:c8:82:82:1f:9f:50:
         7d:c6:31:fa
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUTI1gvnJ2NC8ZDDvFiVV93BYHm8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEyMTIxOTIzMzFaFw0yNjEyMTExOTI4MzFaMDMxMTAvBgNV
BAMTKDUxM0EzNkIxRkVFMzE4OTQzRkE1OEFDNkY1MDk5RDRGQ0JFQzdERDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbBO5+p6whkM10jNuGeOrlylXF
e8BiafpxONdGFtQ1iBhE0mnEOMh/4AS2ElZDW5nmNa/j/Kfowv5pX7xzs1/7LR8B
ws6Zd1vL3JC3kS4XoKgbfRDxcImrBcG/MaBOIqlFx8HhQk71FBaggBBtnjwA7ZS8
RWCPF0QksVCPHsNOEXQ8FfB4jq0B/CM3bzAPYjBn8Vw7+JnH8ZKF/ssnMzoHmh57
FWaktQpwe616yZmueo4AeLOoXdztY3tmQPbfb8tpqngANelgWyFTJbs4cGMXzTUS
YopjA3jTxLmzed4j6fzRUtNk0GMy5Ium82mE54qjFTtMsNnCWpcAr35RV9DnAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRROjax/uMYlD+l
isb1CZ1Py+x90zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMjNK
cWtBSkRzbkE3TjZWcGRQSkZNZ1RjbnBKVDZNZnNpMWNiU0g5WTdFeVovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzIz
SnFrQUpEc25BN042VnBkUEpGTWdUY25wSlQ2TWZzaTFjYlNIOVk3RXlaLzAvNTEz
QTM2QjFGRUUzMTg5NDNGQTU4QUM2RjUwOTlENEZDQkVDN0REMy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyHxUMA0EAgACMAcDBQAoBGmAMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQfwjANBgkqhkiG9w0BAQsFAAOCAQEAZrvE0LaySx9Thk5Y
r1mHdd30ATguorACCTjIAqcba00d6KljWL0wis+4E2MAE1PRGcrG6NrbOCTQMRoG
Qlng6tp9T01APad1Rd+ne6Ughj7JOgtjm3kp7s6gE/OYLVIWXUccjw3KKeO4SnRC
dJoumUqhErJyg4shojGnirC9ZCi23aQO4OuX09dfWjG5YZG93NGnroa2rWgXrSbd
pXAt3DT0iu4eDaBu2g0ZmX5DFJ7XnEXerW3DzHd7K9PtWMWmLdpJentWjqRDRA/X
ItWHCMZRn+IB4Wy+fHqCq3+Ee5gSN6HLSVqaWTgPuzNEVdBKbd3so1KFyIKCH59Q
fcYx+g==
-----END CERTIFICATE-----