This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/698EB5BA775EA8BABECAC48D50ACD998675FEC35.cer
File:                     698EB5BA775EA8BABECAC48D50ACD998675FEC35.cer (raw, json)
Hash identifier:          QJC+wQXgjRoNfPrzuqRYnyYw5rD7DPiWnFgZiLTmDnU=
Subject key identifier:   69:8E:B5:BA:77:5E:A8:BA:BE:CA:C4:8D:50:AC:D9:98:67:5F:EC:35
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       32ED3A0F3814DC927C8B0B116355FCCBD48EDA63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/62XfWzRCP9rQxb8kV3DRCbaGm8H3ZSh8ney2uZFaX8gv/0/698EB5BA775EA8BABECAC48D50ACD998675FEC35.mft
caRepository:             rsync://rpki-repo.registro.br/repo/62XfWzRCP9rQxb8kV3DRCbaGm8H3ZSh8ney2uZFaX8gv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Dec 2025 16:47:55 +0000
Certificate not after:    Mon 14 Dec 2026 16:52:55 +0000
Subordinate resources:    AS: 265249
                          IP: 168.0.112.0/23
                          IP: 2804:2ce4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ed:3a:0f:38:14:dc:92:7c:8b:0b:11:63:55:fc:cb:d4:8e:da:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 15 16:47:55 2025 GMT
            Not After : Dec 14 16:52:55 2026 GMT
        Subject: CN=698EB5BA775EA8BABECAC48D50ACD998675FEC35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:60:20:d5:17:12:fd:7f:f2:1f:56:47:ff:a1:
                    ab:80:e0:59:51:a8:c6:d8:9e:1f:67:db:8a:94:e7:
                    25:a0:7d:74:a5:fc:19:06:d6:7e:88:e2:53:df:0e:
                    8c:22:cc:58:7d:c9:40:69:67:10:c7:ba:99:8f:4d:
                    53:c6:35:85:6e:c7:ce:f3:99:3a:6d:09:fd:88:3f:
                    5f:5d:9d:b3:d9:42:59:92:18:81:b6:6d:ce:40:47:
                    b6:be:ae:68:ac:89:fc:9f:90:43:90:5a:76:de:18:
                    e4:aa:99:34:c2:16:a2:3f:ab:39:fc:cd:31:45:34:
                    a9:c5:11:a7:12:a4:1d:f3:91:3a:90:88:78:f1:f4:
                    53:5f:79:63:6f:fd:1c:8f:34:4a:f6:a7:57:b7:19:
                    3c:1e:f6:67:84:c0:c8:12:49:5c:e1:26:16:72:8f:
                    ff:8b:d3:f8:c9:7c:c1:5d:9d:18:cf:4d:15:ca:07:
                    c2:74:9e:2f:03:4d:1e:2f:70:f2:be:a6:38:e1:b4:
                    2a:6f:03:9f:52:17:8d:ef:df:e9:cc:71:84:26:06:
                    5f:72:f1:04:90:a3:f6:90:e9:a7:8e:79:91:97:6b:
                    9b:67:fa:c6:73:89:80:f8:c0:9e:9b:15:e2:e9:03:
                    98:45:55:f8:6c:fa:45:46:0d:4c:42:65:fe:cb:f9:
                    2b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:8E:B5:BA:77:5E:A8:BA:BE:CA:C4:8D:50:AC:D9:98:67:5F:EC:35
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/62XfWzRCP9rQxb8kV3DRCbaGm8H3ZSh8ney2uZFaX8gv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/62XfWzRCP9rQxb8kV3DRCbaGm8H3ZSh8ney2uZFaX8gv/0/698EB5BA775EA8BABECAC48D50ACD998675FEC35.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.112.0/23
                IPv6:
                  2804:2ce4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265249

    Signature Algorithm: sha256WithRSAEncryption
         d2:d1:e5:07:a0:51:08:11:e6:2a:d5:c0:85:45:2b:6f:6a:a9:
         a2:b8:7d:e7:01:09:6d:3c:26:09:36:34:14:48:58:62:0a:aa:
         e1:cd:c0:5f:bb:09:99:7a:b5:b5:35:01:67:4e:56:5a:94:f2:
         3c:46:f4:d7:45:36:3f:a5:91:a9:a0:6d:97:b7:15:0e:4b:23:
         e4:c8:f6:9a:fe:f7:ac:8f:e8:07:7d:2e:0f:b0:a2:ee:09:8c:
         b3:e3:16:32:3a:4a:c5:f7:cc:e9:6a:0c:02:3a:df:d7:b2:3c:
         a4:de:96:cd:26:9e:12:d3:e0:1f:d3:3f:70:d6:4f:7b:51:9a:
         5c:2b:18:89:58:85:3e:fb:28:ed:1c:2a:e0:b2:94:c1:29:14:
         41:f3:81:2d:53:4d:a8:f7:40:29:03:79:75:d8:e3:01:02:a3:
         d3:fe:01:f4:6b:4e:2f:f8:20:21:dc:7d:ed:19:19:ae:f0:e2:
         a4:59:c6:5e:68:8b:96:3e:75:2c:8f:ba:77:fe:e1:0f:49:37:
         28:e4:dd:2b:bb:4d:b2:14:fc:44:6f:73:c9:a8:a2:db:6d:61:
         88:ca:2b:3b:50:14:34:09:c8:ec:73:c8:07:f9:2f:c5:6a:c2:
         38:14:0f:eb:f3:e7:cd:82:7b:96:2e:a7:6f:2e:95:52:6f:2e:
         cd:6f:91:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----