This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AC9C321F62E4F984FA376FC446EDB27A235860FC.cer
File:                     AC9C321F62E4F984FA376FC446EDB27A235860FC.cer (raw, json)
Hash identifier:          xvvWIWc9MS/XWekaA57/4pimjNg2tuts3h+gpHC7ap4=
Subject key identifier:   AC:9C:32:1F:62:E4:F9:84:FA:37:6F:C4:46:ED:B2:7A:23:58:60:FC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4F14D964990D6622A4861818428B9986688BC54B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2kBc6FE4TeB8i6UsL6rgyWJ7HN2C71FpZUkR6Fx98uqr/0/AC9C321F62E4F984FA376FC446EDB27A235860FC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2kBc6FE4TeB8i6UsL6rgyWJ7HN2C71FpZUkR6Fx98uqr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Dec 2025 15:15:41 +0000
Certificate not after:    Tue 08 Dec 2026 15:20:41 +0000
Subordinate resources:    AS: 272601
                          IP: 2804:85cc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 10:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:14:d9:64:99:0d:66:22:a4:86:18:18:42:8b:99:86:68:8b:c5:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  9 15:15:41 2025 GMT
            Not After : Dec  8 15:20:41 2026 GMT
        Subject: CN=AC9C321F62E4F984FA376FC446EDB27A235860FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:90:c5:d5:c7:3a:b4:52:54:54:cb:11:da:20:
                    5e:d4:47:4d:33:f7:d9:e0:c6:7d:ab:fa:e4:25:28:
                    b3:d5:cb:52:93:af:68:58:0f:b3:6b:05:69:6c:90:
                    46:14:8d:3f:09:47:9b:9d:bb:d8:85:5a:41:27:9f:
                    a7:6a:1e:2a:f7:f0:78:5c:78:ef:c8:07:ba:e1:c2:
                    b0:68:74:76:8d:82:37:23:77:70:86:a7:eb:23:96:
                    61:d3:c5:cc:88:a6:a0:b0:dd:bc:2e:80:8e:9d:be:
                    15:8e:20:21:ca:1b:7a:53:10:fc:17:a5:e9:ba:39:
                    3f:a4:70:4a:e4:f3:31:4f:b6:0c:20:20:04:55:dc:
                    d9:fe:09:f3:20:f0:bf:05:bd:61:e9:7f:f7:5f:86:
                    05:a2:b6:51:c0:00:2d:a3:4b:3c:eb:ae:e5:cc:63:
                    98:b0:d7:22:c8:c8:0f:ba:07:bc:7e:09:df:99:98:
                    68:e2:31:dc:8b:76:d3:bb:84:ee:88:9a:cc:a6:24:
                    60:72:c8:dd:f5:45:91:fa:45:ae:d5:09:39:24:9b:
                    cf:e3:20:76:ee:98:dd:6f:92:a6:6e:c9:d2:82:46:
                    3d:8a:e4:18:d8:71:c2:d6:54:53:fe:f2:35:10:9d:
                    b6:b0:b7:fa:9b:06:de:71:2b:53:71:36:c8:c2:ee:
                    64:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AC:9C:32:1F:62:E4:F9:84:FA:37:6F:C4:46:ED:B2:7A:23:58:60:FC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2kBc6FE4TeB8i6UsL6rgyWJ7HN2C71FpZUkR6Fx98uqr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2kBc6FE4TeB8i6UsL6rgyWJ7HN2C71FpZUkR6Fx98uqr/0/AC9C321F62E4F984FA376FC446EDB27A235860FC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:85cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272601

    Signature Algorithm: sha256WithRSAEncryption
         d0:c2:18:bc:cf:19:c6:ad:f6:e9:8b:2c:a2:a6:2b:72:c7:9e:
         aa:92:6c:17:17:ac:8f:a3:b3:b9:1d:21:06:13:f3:23:c2:4e:
         20:09:6d:20:ff:be:4b:a9:04:80:8e:2f:bf:99:0e:18:cd:57:
         2f:64:79:b9:85:7a:c4:73:0a:03:c8:f0:3f:21:e8:35:f9:df:
         0e:2b:4b:45:c9:ee:92:e2:a8:33:02:06:f9:fe:cc:3e:94:72:
         1c:56:48:29:d8:3c:89:ef:43:30:45:2c:db:e6:12:5b:93:85:
         59:87:96:a3:1d:9a:d0:88:3c:f1:c0:df:09:4a:b7:e5:f4:24:
         2c:0e:92:64:97:51:d7:16:61:de:c5:6f:68:1e:ca:60:64:3d:
         25:83:bf:83:72:75:42:8a:e6:51:9d:7b:9a:a5:1c:5f:55:01:
         a0:9b:bb:7b:ff:32:20:88:58:ac:3e:9c:7c:f6:9d:28:46:6d:
         b1:1b:5f:61:dc:aa:eb:a8:de:d5:66:b5:ac:78:82:19:cf:c3:
         ce:84:63:05:1c:3e:a1:86:35:1d:e2:ea:b2:c6:ee:15:b0:aa:
         16:fe:46:12:b9:49:22:82:8a:87:75:13:89:3a:d5:c7:f7:ce:
         80:88:c6:1f:63:6d:ee:60:a4:bb:0e:08:d0:15:41:63:f1:ba:
         8d:34:ea:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----