This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.cer
File:                     99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.cer (raw, json)
Hash identifier:          GLv1Bi6xS7CpyRxbju3bm4vesSzJPKKHSmkN8Q14e6A=
Subject key identifier:   99:42:8C:53:7B:0E:E9:F6:8F:FC:A1:5D:AB:1F:9D:FC:26:5D:A8:D4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       35FC5754BD2917E1C3A8D27E7DD9C42BBAAC54A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Dec 2025 13:47:55 +0000
Certificate not after:    Mon 14 Dec 2026 13:52:55 +0000
Subordinate resources:    AS: 265085
                          IP: 170.233.24.0/22
                          IP: 2804:3290::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:fc:57:54:bd:29:17:e1:c3:a8:d2:7e:7d:d9:c4:2b:ba:ac:54:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 15 13:47:55 2025 GMT
            Not After : Dec 14 13:52:55 2026 GMT
        Subject: CN=99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:05:54:93:79:11:fc:2f:b9:9d:87:d7:31:
                    73:9e:b8:83:e8:34:8e:8b:f1:8d:fc:d3:91:28:cb:
                    d0:f4:8b:f8:e8:dd:e6:44:69:ea:51:2c:49:d8:f7:
                    25:3c:84:8f:da:a5:64:c7:50:41:18:12:ea:3d:c2:
                    64:c5:85:b4:c6:4a:47:63:08:82:bd:f0:94:ea:16:
                    e1:81:f6:89:b6:c7:af:ff:f6:6e:69:e0:59:46:8c:
                    29:c3:63:c0:98:d9:6f:25:1e:52:86:14:8e:ad:7f:
                    ec:bf:e0:2a:b5:59:bb:ee:f6:20:f0:f1:87:74:f9:
                    89:5c:33:4f:a7:be:60:de:f9:92:9d:5f:56:cc:34:
                    26:e8:e9:c1:c4:ca:65:52:88:77:b4:46:59:54:67:
                    e3:67:08:0f:2c:04:58:65:20:23:48:bf:5e:aa:03:
                    26:b8:b8:89:f1:18:a1:2d:64:ee:30:4d:21:6d:73:
                    0c:b8:aa:8a:db:67:7f:75:5b:a3:30:b4:1a:4b:3f:
                    3a:e5:ee:85:92:d7:21:4b:06:89:1c:d5:2c:1e:cc:
                    f6:64:35:2c:18:ad:ee:bf:9d:7d:0d:3f:a6:35:bc:
                    2f:2a:e2:63:32:14:e0:e8:00:a7:31:f2:b4:fe:56:
                    f2:d9:9f:44:15:14:cc:54:a9:04:50:ff:18:dc:b2:
                    83:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:42:8C:53:7B:0E:E9:F6:8F:FC:A1:5D:AB:1F:9D:FC:26:5D:A8:D4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.24.0/22
                IPv6:
                  2804:3290::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265085

    Signature Algorithm: sha256WithRSAEncryption
         0a:ad:15:66:bc:69:c2:98:c7:41:95:a5:7b:80:0c:8d:de:a4:
         c2:ba:c7:d5:6a:57:60:2d:90:cf:e9:3a:b0:16:1b:0d:ab:10:
         35:54:6c:77:c0:76:20:fa:16:2f:9c:bd:1d:a4:f8:8f:69:ac:
         07:c3:ba:a6:71:62:63:bc:63:ac:23:61:c6:4d:6d:de:a8:96:
         13:7f:76:6f:56:39:77:ff:23:23:5a:2b:f5:f5:2f:50:c6:d7:
         90:e2:79:7b:13:23:7f:12:9c:ed:7d:e4:5d:3b:cc:b0:9e:8c:
         fc:9a:63:24:13:65:c6:c4:1e:e9:96:99:ed:ba:6c:b5:1d:0e:
         1d:22:e8:1b:f8:ff:96:33:14:e1:5f:cf:ca:68:40:fd:b7:46:
         ad:4f:ed:94:be:92:89:4d:e2:16:44:b7:81:d8:ea:8b:ec:e9:
         eb:82:20:41:b3:41:6e:4b:3a:3f:d7:16:b4:97:6d:eb:18:41:
         15:2e:c4:9d:48:2d:70:05:1d:e7:f5:bc:af:5c:0f:23:5f:bf:
         fa:dc:a2:66:ac:c7:bf:16:b2:83:6c:8d:1c:1c:0c:f1:29:36:
         2f:01:47:52:59:2a:65:fb:52:e0:75:a8:ea:7c:e1:d3:5b:e2:
         d2:71:88:93:d4:d4:6a:c7:a5:0e:96:01:ef:75:04:56:91:36:
         d0:be:fc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----