This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A39AB07F573D04E5845A8A1E723EAE291A21091A.cer
File:                     A39AB07F573D04E5845A8A1E723EAE291A21091A.cer (raw, json)
Hash identifier:          CxYPbCUhLgZCS7YnFxswWAfEC1KgLbcqkktmV6oh3QE=
Subject key identifier:   A3:9A:B0:7F:57:3D:04:E5:84:5A:8A:1E:72:3E:AE:29:1A:21:09:1A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       45563811A703E3483687FB7285EECA142B3852D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AcM4J3E3vGyd8cxGNVdyazgfAMqUek44WDbdoG1Dkvqs/0/A39AB07F573D04E5845A8A1E723EAE291A21091A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AcM4J3E3vGyd8cxGNVdyazgfAMqUek44WDbdoG1Dkvqs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Dec 2025 18:24:09 +0000
Certificate not after:    Fri 18 Dec 2026 18:29:09 +0000
Subordinate resources:    AS: 61929
                          IP: 200.9.124.0/22
                          IP: 2804:1850::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 04:19:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:56:38:11:a7:03:e3:48:36:87:fb:72:85:ee:ca:14:2b:38:52:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 19 18:24:09 2025 GMT
            Not After : Dec 18 18:29:09 2026 GMT
        Subject: CN=A39AB07F573D04E5845A8A1E723EAE291A21091A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b8:e3:be:5d:b7:f9:07:ba:0b:30:13:2a:be:
                    9b:35:13:b3:62:f3:a2:f1:6b:db:f5:ed:0b:01:0f:
                    58:ca:10:f4:54:86:46:4a:ee:06:55:f2:0a:65:d3:
                    2b:5e:0d:82:c6:90:68:d7:b7:0a:bd:bd:a4:5e:d3:
                    3d:fa:8a:4e:e8:40:7b:03:0f:75:23:59:05:d2:7b:
                    5d:fa:86:85:c0:f7:8f:19:66:01:52:34:b5:ed:f9:
                    aa:39:5e:58:70:5b:b0:13:d3:d6:05:8a:1f:9a:6b:
                    48:61:e5:4e:b6:31:79:06:de:c8:8a:7a:62:dd:23:
                    cb:23:97:ce:d0:ad:e4:34:fe:db:03:f7:1d:34:6f:
                    ba:2a:70:e0:01:8e:5b:06:ee:f9:50:98:5b:3a:35:
                    af:30:43:e9:1d:71:fd:6b:97:fb:38:14:cc:96:78:
                    e3:e1:6f:0d:75:29:c3:75:e8:ba:56:41:cd:57:bb:
                    9c:5f:af:14:bb:bc:83:ad:1f:73:6c:bb:d4:12:00:
                    20:c4:20:d4:00:eb:11:fb:1a:8f:1a:e0:6d:56:fa:
                    ce:5f:75:b6:8e:4c:d8:e3:eb:a9:47:ba:3c:cf:82:
                    7b:a4:16:b6:a4:04:48:75:44:05:56:ee:cc:e3:38:
                    f1:8f:1c:8d:9a:1c:02:fa:d2:c0:d7:53:c5:e8:1e:
                    18:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A3:9A:B0:7F:57:3D:04:E5:84:5A:8A:1E:72:3E:AE:29:1A:21:09:1A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AcM4J3E3vGyd8cxGNVdyazgfAMqUek44WDbdoG1Dkvqs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AcM4J3E3vGyd8cxGNVdyazgfAMqUek44WDbdoG1Dkvqs/0/A39AB07F573D04E5845A8A1E723EAE291A21091A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.124.0/22
                IPv6:
                  2804:1850::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61929

    Signature Algorithm: sha256WithRSAEncryption
         1f:28:c3:f1:76:a4:19:96:9a:f2:f6:3f:ce:ba:c6:f2:6f:e3:
         09:ea:03:9b:da:db:a2:72:c9:1a:b0:06:cd:85:8a:4c:99:dc:
         eb:51:48:4d:a1:8e:0c:3f:0a:2b:17:33:33:f7:06:28:ab:b9:
         cd:de:84:2d:39:f8:36:6e:40:ee:df:c2:09:94:d3:08:41:b1:
         ac:36:36:91:30:0e:b6:03:42:dd:5b:36:7a:dc:af:0a:c1:53:
         38:0a:fe:c0:1e:15:29:ac:ef:11:c1:57:d8:f1:e3:98:8a:0c:
         59:64:cf:d2:98:da:40:62:e1:fd:cf:8c:b5:96:96:24:29:5a:
         03:2b:22:93:2a:df:74:d1:06:44:0a:6d:e6:43:03:ad:ac:93:
         db:16:ca:c0:05:10:80:2f:ff:40:a7:93:e9:c8:03:5f:a2:bd:
         e4:8b:c8:e0:9e:8d:72:ea:3c:c9:85:6c:0a:0c:27:67:f6:34:
         42:9d:d2:c2:51:5f:7f:b5:c9:2b:97:62:36:e1:7d:54:24:9b:
         78:07:15:1c:7e:e4:a8:a6:37:9c:7f:85:94:94:d2:be:b3:d8:
         8a:1f:05:08:1e:21:16:71:f2:2c:85:21:de:b6:c6:7a:d2:a8:
         b7:8b:21:c2:bd:4b:78:d1:2d:c4:3f:50:7f:3d:6d:be:65:b2:
         3b:1b:4c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----