This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/86AD7EC99AEA2CF39D8D894C3123FB04D81F83BC.cer
File:                     86AD7EC99AEA2CF39D8D894C3123FB04D81F83BC.cer (raw, json)
Hash identifier:          b1vzNtWhlLx91vLQrtVk5hvbDw8JYF+8cqzKr7LLZWQ=
Subject key identifier:   86:AD:7E:C9:9A:EA:2C:F3:9D:8D:89:4C:31:23:FB:04:D8:1F:83:BC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2D44603205C068A179722DBD1A4D5BCCC7935517
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/86AD7EC99AEA2CF39D8D894C3123FB04D81F83BC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 Dec 2025 00:35:13 +0000
Certificate not after:    Wed 09 Dec 2026 00:40:13 +0000
Subordinate resources:    AS: 267995
                          IP: 45.167.48.0/22
                          IP: 2804:5664::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:44:60:32:05:c0:68:a1:79:72:2d:bd:1a:4d:5b:cc:c7:93:55:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 10 00:35:13 2025 GMT
            Not After : Dec  9 00:40:13 2026 GMT
        Subject: CN=86AD7EC99AEA2CF39D8D894C3123FB04D81F83BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8c:35:ef:37:26:2c:d2:ef:04:c9:2a:52:f3:
                    c4:33:e3:b3:90:c6:35:0b:67:df:b6:4c:8c:08:67:
                    ce:0b:fe:43:09:42:9d:a1:e8:ed:eb:f8:50:77:df:
                    8d:43:1a:b0:db:fc:52:db:38:66:b8:8b:2d:21:9f:
                    5c:a6:15:44:bc:56:1b:14:29:84:32:42:37:37:85:
                    b1:ed:f8:82:cf:44:96:23:ab:22:45:41:8a:16:51:
                    94:10:ae:63:e8:43:16:4f:f4:39:18:44:18:2c:d6:
                    be:d5:04:1b:61:cc:f7:59:eb:da:0f:66:fa:b6:b2:
                    f6:e1:0e:c1:a9:db:cd:0c:76:5f:09:0f:8c:a6:0b:
                    85:6b:57:9d:02:13:dd:0f:0b:43:5e:09:07:e0:44:
                    90:63:e1:29:4a:a8:7b:fe:6c:5f:79:c2:45:c4:de:
                    8e:89:c7:57:c4:79:4e:3b:7d:6b:82:12:df:55:c7:
                    44:5e:5c:b6:b5:89:ff:58:e9:1c:0d:44:76:97:0a:
                    eb:38:b3:93:08:67:56:79:c7:82:6d:9f:1a:98:3d:
                    59:47:4f:d5:3f:fb:cc:d8:29:52:e5:9d:79:85:62:
                    79:f2:12:7d:a6:e9:84:88:08:31:dd:70:25:0c:94:
                    99:65:64:7b:7c:3f:6b:45:ac:ab:ac:86:6c:5a:96:
                    28:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                86:AD:7E:C9:9A:EA:2C:F3:9D:8D:89:4C:31:23:FB:04:D8:1F:83:BC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/86AD7EC99AEA2CF39D8D894C3123FB04D81F83BC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.48.0/22
                IPv6:
                  2804:5664::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267995

    Signature Algorithm: sha256WithRSAEncryption
         95:b1:42:20:94:be:e0:c1:2d:43:38:76:56:79:a3:f0:90:a5:
         45:fb:20:88:c8:dd:2b:25:cc:81:62:94:18:77:ed:a2:dc:17:
         51:af:49:a3:dd:0c:b2:73:03:14:1b:78:c0:56:33:02:ca:b3:
         e8:e7:1b:e1:88:bb:80:ef:ba:41:7b:2b:80:0f:c4:88:c4:9e:
         3d:fe:6b:ce:43:96:67:e4:13:bc:ce:ff:cf:1f:0b:22:8f:c4:
         b4:df:72:69:04:e7:e5:8f:c9:2c:cb:70:f6:dc:f4:71:ef:d0:
         09:f5:9c:4d:ad:3d:91:d3:4b:5c:bd:e0:82:9e:eb:c1:f0:f4:
         1d:67:31:96:b2:f7:35:32:26:01:2b:20:cc:87:25:e3:a2:98:
         91:d5:9b:2f:2b:41:59:94:6b:6b:b0:7d:50:f4:c9:9c:12:36:
         87:6c:9b:1f:75:56:6f:f6:fb:a7:b7:e1:38:1d:0d:5e:c1:df:
         98:24:e9:4e:d4:e2:3e:c3:8e:25:38:c9:fb:d7:0c:32:7a:d9:
         22:a6:db:ca:80:dd:fd:b0:85:f9:9c:bc:5f:94:97:11:2f:73:
         8c:7d:70:3e:f8:01:54:e0:9d:e7:72:f9:36:80:1f:31:07:1c:
         a8:68:eb:74:16:17:f0:d1:f3:26:c5:87:b2:3a:36:3c:4f:ba:
         39:70:6c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----