This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5BE6373C05A316270E3AF2B4D2294077585C29F6.cer
File:                     5BE6373C05A316270E3AF2B4D2294077585C29F6.cer (raw, json)
Hash identifier:          7JD4nAxW7S0w6as8cLvgfKCstAaMde4B4rpAHMx/d04=
Subject key identifier:   5B:E6:37:3C:05:A3:16:27:0E:3A:F2:B4:D2:29:40:77:58:5C:29:F6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3D2C760572C308872528DA77B18B6A5D619138B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DvtrAZtFUwPALZrXQNZEoMyqLSGgugaVAaniypYooh2m/0/5BE6373C05A316270E3AF2B4D2294077585C29F6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DvtrAZtFUwPALZrXQNZEoMyqLSGgugaVAaniypYooh2m/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Dec 2025 11:59:19 +0000
Certificate not after:    Fri 11 Dec 2026 12:04:19 +0000
Subordinate resources:    AS: 274804
                          IP: 186.195.169.0/24
                          IP: 2804:93d8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 04:19:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:2c:76:05:72:c3:08:87:25:28:da:77:b1:8b:6a:5d:61:91:38:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 12 11:59:19 2025 GMT
            Not After : Dec 11 12:04:19 2026 GMT
        Subject: CN=5BE6373C05A316270E3AF2B4D2294077585C29F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e3:03:d5:49:31:3e:b2:5e:cc:6a:c5:ed:39:
                    33:ae:43:25:a6:68:c2:fe:68:74:28:97:8a:ff:5c:
                    ff:31:19:a6:77:58:9f:e6:46:e8:a1:e7:e0:e6:3c:
                    77:d0:65:78:cf:93:5a:64:0b:03:60:70:43:61:43:
                    85:8d:15:ec:a8:a7:01:98:da:95:a6:ad:50:c8:6e:
                    6d:3d:0d:a2:a3:92:da:a9:e0:0f:9f:11:1b:c0:4b:
                    2f:6c:95:05:a6:d3:12:50:b4:9f:b7:50:4c:06:b3:
                    61:03:0e:fd:9a:34:36:4a:26:22:ff:5c:46:34:74:
                    14:b6:0c:9a:a4:e1:ae:f0:76:5a:2d:fc:7e:03:77:
                    33:34:96:43:88:90:01:62:53:30:ed:92:2f:f4:03:
                    a5:e9:7f:c2:7a:0a:e1:9d:90:00:c0:7d:60:92:db:
                    cb:2f:b4:49:0a:ec:da:3a:df:a7:d7:89:39:0d:ba:
                    77:07:32:72:ce:d8:fc:e2:19:b2:b2:1e:bb:85:e7:
                    2d:86:95:16:53:6e:60:3d:16:7c:68:08:e2:67:fc:
                    d8:03:c6:94:50:ec:6a:22:5d:83:3b:d2:a1:00:c6:
                    4d:6c:1e:c2:4c:33:f5:13:1c:a7:c0:ee:52:9d:32:
                    86:3f:df:be:84:83:8f:73:2a:da:a3:11:22:49:f4:
                    2b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5B:E6:37:3C:05:A3:16:27:0E:3A:F2:B4:D2:29:40:77:58:5C:29:F6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DvtrAZtFUwPALZrXQNZEoMyqLSGgugaVAaniypYooh2m/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DvtrAZtFUwPALZrXQNZEoMyqLSGgugaVAaniypYooh2m/0/5BE6373C05A316270E3AF2B4D2294077585C29F6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.169.0/24
                IPv6:
                  2804:93d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274804

    Signature Algorithm: sha256WithRSAEncryption
         6f:7e:11:42:f1:93:8d:47:7d:79:fd:56:c9:58:c8:e6:33:5c:
         08:9b:b5:fa:0d:9b:99:60:48:8a:f8:ed:d5:3d:6d:96:25:7a:
         1c:cc:63:5b:87:91:0d:ab:c8:fd:1c:b1:75:6b:0d:44:18:e0:
         e4:81:ab:b3:26:ad:2b:2b:96:96:8a:c4:8f:cd:30:53:1f:72:
         8e:34:1a:df:25:f6:4e:6d:0e:dc:c5:c6:b3:d6:1d:3c:c8:48:
         10:e6:ea:2e:e8:d1:bb:9c:a4:93:99:68:3e:f5:7d:35:ee:4c:
         f1:4b:50:8e:b0:62:5b:b8:d1:02:e1:00:df:b9:fc:20:13:ef:
         04:d7:74:d7:51:0c:e7:1a:3b:ca:c1:ee:7e:b3:60:bd:e3:49:
         20:50:9f:90:b8:f4:71:8a:fa:fe:e9:2e:14:62:c6:c5:27:a7:
         a1:bc:72:b2:09:e9:f7:53:86:37:39:8f:c5:e1:b3:98:b5:58:
         c3:fa:89:d4:99:9b:e9:47:be:65:31:fc:5e:d8:e8:a4:86:1b:
         68:fd:14:79:e3:2d:3f:0a:8f:f7:ed:90:87:ff:a1:80:f4:61:
         b7:12:09:de:10:74:00:73:db:4d:7b:8d:e9:f9:7c:5e:e6:ed:
         0d:ed:5f:28:c3:fe:76:39:ad:2c:a8:a6:e9:e4:7b:dd:c2:3e:
         f7:18:de:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----