This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer
File:                     A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer (raw, json)
Hash identifier:          QD1ZIjgqXGRj0jdfHyFpJHKmMNEzTiDNfXzq8Z+aJoU=
Subject key identifier:   A1:CC:88:C7:FD:49:EE:B4:16:9B:CC:7F:C3:66:DD:AD:75:0C:14:78
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       292F92EC052189FF6239BEC2D2156B57813D573C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Dec 2025 08:47:50 +0000
Certificate not after:    Fri 11 Dec 2026 08:52:50 +0000
Subordinate resources:    AS: 271274
                          IP: 190.12.136.0/22
                          IP: 2804:78ec::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2f:92:ec:05:21:89:ff:62:39:be:c2:d2:15:6b:57:81:3d:57:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 12 08:47:50 2025 GMT
            Not After : Dec 11 08:52:50 2026 GMT
        Subject: CN=A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5b:7c:39:c1:e0:61:8b:e7:c5:63:48:ca:f4:
                    56:ed:31:65:7b:2d:b2:23:bc:9f:b9:10:57:b8:57:
                    ca:14:0b:3d:08:94:fb:42:dd:e4:15:60:fc:d9:d7:
                    b0:24:b4:6b:bc:25:a5:8a:eb:4c:5b:31:9d:0e:b9:
                    d9:7a:f8:ba:5c:87:01:ac:54:83:a6:28:30:fb:9c:
                    0f:2c:d7:77:d9:13:14:0a:d6:1a:99:d6:f3:7c:1d:
                    fb:e2:24:e7:5c:92:03:93:9e:d4:cd:af:5e:a5:27:
                    0e:6d:23:5a:40:1b:5b:cb:95:73:09:53:b5:03:29:
                    7e:d4:99:8f:0b:d9:c0:c8:89:a4:ed:ba:4b:c2:8d:
                    a5:b7:2c:73:00:03:a3:59:48:94:ff:16:8a:cf:d4:
                    fa:dc:36:c9:e9:92:63:89:b0:a3:0a:90:e1:29:d4:
                    90:ae:52:04:0e:84:5e:a0:7e:98:f1:c3:ea:b3:67:
                    2e:6f:59:86:05:c9:29:16:22:de:3b:fd:c4:06:42:
                    d0:36:7c:16:94:df:6c:23:fd:71:a6:c3:0b:4c:87:
                    cd:73:00:06:f9:63:53:a8:11:ca:5c:5d:c6:71:ac:
                    18:7c:de:7e:84:b1:c7:c6:b2:e1:87:09:77:32:92:
                    9c:5f:e5:97:8b:4a:30:6e:2a:fc:de:1e:18:91:60:
                    a9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:CC:88:C7:FD:49:EE:B4:16:9B:CC:7F:C3:66:DD:AD:75:0C:14:78
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.136.0/22
                IPv6:
                  2804:78ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271274

    Signature Algorithm: sha256WithRSAEncryption
         3f:a8:4b:8c:1a:d8:b5:59:ed:4c:ac:3b:4a:83:a7:5d:7c:1a:
         5f:44:52:8c:aa:9f:32:a9:4c:db:5a:d7:5a:89:e9:d0:02:c7:
         6c:1e:c2:0c:c4:bd:07:75:7f:6b:fe:de:6d:c1:2d:90:97:ba:
         0e:c8:4a:d9:ae:17:65:cd:a3:93:89:ee:03:4c:c7:68:2f:4a:
         b9:f2:0b:a7:14:91:2c:89:fc:3d:9b:3e:7a:28:67:84:f6:ea:
         8a:0d:bd:8b:42:23:cd:3b:a6:df:54:ff:0f:6b:e5:cd:1c:87:
         98:10:47:24:70:d2:60:97:b3:f0:8b:80:d6:bc:b4:4b:bc:b4:
         d3:00:68:f6:ed:e3:da:43:a9:28:0e:95:6d:5b:bb:99:79:e4:
         5c:d2:a4:5a:cc:43:e7:86:ae:78:ae:7f:b1:5b:53:09:d7:91:
         1c:4c:cf:e9:c0:5b:98:18:54:27:ec:c6:5c:c9:89:9e:65:5f:
         12:fc:2f:01:16:96:d5:55:69:d6:0a:68:9b:6d:e7:6c:56:c3:
         33:53:4e:53:fa:78:84:35:f7:f6:bc:ba:3a:f8:34:5f:71:b2:
         70:3f:6f:8f:b6:b2:d7:a2:e3:fa:4b:57:43:3c:30:ec:c9:85:
         d3:8a:17:42:ac:c5:8c:84:45:e6:14:20:ec:27:55:7f:66:e6:
         c2:d8:8d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----