This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.cer
File:                     6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.cer (raw, json)
Hash identifier:          eLTzc4EYTkFlvhZZ3ijYRbnioT3KZoYiVVGm8qU9qqg=
Subject key identifier:   69:93:AF:0D:5F:AD:E2:F1:33:50:44:BE:3A:BC:2A:EA:EC:C9:5A:B2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       59B2E7B3E6CB7EE09F103FAD9AA035F832C2B0EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Dec 2025 15:43:36 +0000
Certificate not after:    Thu 17 Dec 2026 15:48:36 +0000
Subordinate resources:    AS: 52576
                          IP: 177.86.200.0/21
                          IP: 2804:cf0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b2:e7:b3:e6:cb:7e:e0:9f:10:3f:ad:9a:a0:35:f8:32:c2:b0:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 18 15:43:36 2025 GMT
            Not After : Dec 17 15:48:36 2026 GMT
        Subject: CN=6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:26:42:a1:c7:31:98:e3:f5:96:3f:d5:55:be:
                    6a:90:01:dd:4c:a4:81:2c:b5:0d:41:e7:91:68:d3:
                    01:e8:19:c2:76:3b:d7:1b:63:4c:13:b8:89:0d:6e:
                    a8:8e:d2:5a:55:75:d3:37:f9:56:43:fa:35:14:c0:
                    01:c2:a8:27:4d:cc:0c:4f:90:17:20:fa:38:d0:6b:
                    6e:0f:30:51:01:f2:9c:19:20:ae:5c:df:11:32:ff:
                    bb:c5:6b:57:64:f2:c9:89:72:36:73:00:17:c0:7a:
                    23:3c:fa:c6:45:cb:5f:58:65:20:bf:34:3f:e6:1d:
                    88:37:89:46:a8:48:69:19:ac:ad:43:8c:af:9e:85:
                    18:54:c0:4b:43:38:15:ff:4f:6b:03:f8:da:96:02:
                    35:56:2a:23:1d:1f:97:bf:f8:5a:0c:db:e8:3e:59:
                    c0:69:45:f9:61:5f:19:b2:78:ff:39:bd:10:ac:08:
                    9e:a6:d7:b3:29:53:5e:cd:d1:01:01:ab:ce:6d:ec:
                    47:aa:c0:34:bc:b6:30:70:d8:d2:b4:10:39:eb:c8:
                    4c:ac:8f:0e:bb:73:43:62:c6:b4:92:6e:e8:81:56:
                    dc:7f:4f:23:27:2a:8c:c5:a1:21:16:e4:60:52:fe:
                    5b:ef:e5:b0:7d:93:cb:f0:32:a8:ff:37:7a:57:e5:
                    12:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:93:AF:0D:5F:AD:E2:F1:33:50:44:BE:3A:BC:2A:EA:EC:C9:5A:B2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.200.0/21
                IPv6:
                  2804:cf0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52576

    Signature Algorithm: sha256WithRSAEncryption
         93:f3:6b:93:a1:f6:ef:21:2d:c1:bb:50:26:42:3c:2d:d8:2f:
         69:92:66:ec:42:af:95:ce:f7:1f:46:2b:ab:ff:66:14:91:c0:
         df:0f:c3:c1:04:8f:4e:22:a8:9b:70:23:9d:62:d1:67:63:62:
         87:7f:51:45:6e:68:e7:4e:dd:8b:66:28:4a:81:ba:39:5b:fc:
         12:2a:cb:ed:73:a5:71:7f:34:4d:fa:7f:27:53:9a:55:97:43:
         94:cf:39:1e:6a:2c:47:d0:c2:7f:7b:ee:58:b9:40:c5:34:86:
         28:31:c1:78:f8:d3:6a:5c:23:b8:fa:bf:c1:9b:92:a8:25:73:
         4a:7f:3c:1b:ad:bc:36:76:68:c4:ed:52:8c:bb:d4:fb:76:16:
         72:28:e5:90:c2:eb:26:38:35:dc:95:eb:68:53:9d:77:5f:d3:
         58:f8:59:8c:8f:e6:08:6f:7d:91:08:1e:26:3c:1d:6a:a4:c9:
         68:c7:11:53:ea:15:44:1e:c9:cf:3b:ce:0d:b8:ca:78:0d:20:
         59:56:cf:cd:af:46:cc:23:94:31:38:6c:e1:92:71:0b:85:45:
         ce:f7:c6:30:e0:01:3a:0a:b8:e8:3b:8d:d6:d1:cf:45:4f:cd:
         cd:58:0d:22:f0:56:1a:92:0a:b8:83:ff:ef:f8:9a:10:d8:49:
         f1:cb:7f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:08:22 2025 by rpki-client