This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.cer
File:                     5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.cer (raw, json)
Hash identifier:          cVvDLt2dV/SouiH8r2MgLhZyETXRqZU3Y4h3IIVLXZo=
Subject key identifier:   5C:8C:B7:59:D4:36:C5:E8:9C:5D:AA:EB:62:8D:27:A2:EA:CA:72:C0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2BE13B48F91000E8F131898D785FFC8EC10E15B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Dec 2025 18:34:15 +0000
Certificate not after:    Mon 07 Dec 2026 18:39:15 +0000
Subordinate resources:    AS: 267464
                          IP: 177.12.135.0 -- 177.12.136.255
                          IP: 192.141.108.0/22
                          IP: 2804:41e8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e1:3b:48:f9:10:00:e8:f1:31:89:8d:78:5f:fc:8e:c1:0e:15:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  8 18:34:15 2025 GMT
            Not After : Dec  7 18:39:15 2026 GMT
        Subject: CN=5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:95:ba:b1:2e:2d:84:65:6a:d3:d7:9a:e1:c5:
                    74:d9:61:34:a9:6c:4f:b4:31:d3:3f:2b:dd:49:01:
                    0a:9b:df:08:43:9d:69:bb:14:61:28:4b:fa:4d:33:
                    01:ec:05:6f:71:3b:ae:12:c2:cb:f6:c3:61:50:28:
                    29:c8:5a:ef:75:fc:2b:31:fa:ba:2e:a2:10:b0:40:
                    83:1f:7d:e0:0a:57:88:dd:d9:8c:36:98:05:0b:1c:
                    7d:68:b4:c4:24:90:89:de:f7:17:6b:67:f6:c4:14:
                    fc:73:2b:84:0e:68:3f:ac:9e:96:91:24:54:15:6e:
                    d6:03:32:0c:65:fe:98:6d:26:9f:32:1d:80:71:fc:
                    73:20:15:96:65:26:2b:6a:8f:74:f2:3e:47:06:a1:
                    2a:58:fc:81:2e:e2:d6:6e:68:70:f4:76:12:b1:65:
                    09:05:5e:ef:86:02:a7:05:31:bc:a2:81:70:f8:d3:
                    5d:62:c5:f7:96:f9:c7:a7:24:cb:89:7e:87:d9:24:
                    52:74:5c:93:ef:f7:f5:bc:99:6c:0b:60:53:5a:53:
                    8e:85:45:aa:82:44:4e:f8:3a:53:2a:24:c0:1f:d2:
                    d3:9b:ff:61:d5:84:a4:af:fc:f0:1e:5f:1f:ff:5c:
                    3a:dd:d9:1c:d7:33:79:58:d4:d7:af:c7:86:92:c9:
                    44:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5C:8C:B7:59:D4:36:C5:E8:9C:5D:AA:EB:62:8D:27:A2:EA:CA:72:C0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G1e15FKgwd2L2LhsLhWW6vuogK66qzYUbfMdE3K7kZ7R/0/5C8CB759D436C5E89C5DAAEB628D27A2EACA72C0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.135.0-177.12.136.255
                  192.141.108.0/22
                IPv6:
                  2804:41e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267464

    Signature Algorithm: sha256WithRSAEncryption
         11:9c:ae:94:79:e2:a6:eb:e4:b1:0a:86:88:ce:95:4a:58:18:
         2d:fc:e9:50:50:ca:35:50:d0:85:97:2b:34:9d:79:cd:30:dc:
         47:09:a1:4b:87:b2:ce:29:26:28:c0:39:27:29:6d:15:24:7a:
         45:05:69:33:ef:b5:ca:ab:17:1a:11:b8:7e:3c:1a:f7:f1:57:
         81:2a:8b:d2:cc:54:3e:8f:da:0e:ea:7c:b6:37:44:48:37:68:
         c6:6f:6f:31:0c:7e:aa:4f:19:fb:0e:41:e8:90:f5:31:6d:32:
         8a:b7:59:dd:56:9f:5f:49:97:bc:6e:d2:3a:31:da:9e:99:b9:
         4d:92:10:be:70:22:fc:d0:30:f0:af:f6:9d:86:1b:c9:8d:0e:
         19:e0:b7:26:1d:41:77:9a:2a:7f:f3:37:7c:cf:0a:c3:20:1c:
         9d:90:79:f6:2b:8a:9b:92:0e:f5:2c:a2:77:85:9c:bf:d1:10:
         26:1c:06:85:d8:f5:08:d6:c0:61:c3:d8:ef:1b:d8:77:b2:d4:
         a0:21:1f:ae:6c:35:1f:98:ea:d6:1c:6b:cb:ec:fb:a2:7e:15:
         69:a8:e4:c1:f1:32:d2:bc:85:35:3f:4a:02:6c:a4:09:9a:1f:
         21:52:44:46:2f:d1:fd:74:93:de:0b:83:28:61:22:b0:96:a6:
         9d:27:65:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:08:16 2025 by rpki-client