This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.cer
File:                     DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.cer (raw, json)
Hash identifier:          mJ+xICTu5GYksHuwIJomRErEYQLVl+vTKD+snleLXGA=
Subject key identifier:   DB:49:BF:A6:AC:14:96:5D:7D:3B:14:53:23:EF:F6:A9:9C:3F:D0:6C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0FAB66413977FCEA8AA8C60ECAEB5903C3FE4E4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 Dec 2025 20:12:13 +0000
Certificate not after:    Tue 15 Dec 2026 20:17:13 +0000
Subordinate resources:    AS: 271504
                          IP: 200.53.64.0/22
                          IP: 2804:7c90::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ab:66:41:39:77:fc:ea:8a:a8:c6:0e:ca:eb:59:03:c3:fe:4e:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 16 20:12:13 2025 GMT
            Not After : Dec 15 20:17:13 2026 GMT
        Subject: CN=DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:39:44:1e:90:5b:8d:ec:c0:65:bc:67:4a:72:
                    a3:8e:35:ae:8f:af:ae:c1:71:2a:59:c3:0d:7f:a8:
                    de:40:0d:3e:a4:e3:b9:96:63:18:a9:b4:ca:bf:d5:
                    45:56:e0:f7:a3:b1:0a:c4:87:41:42:fa:cf:45:03:
                    32:d8:d7:4c:f4:7c:f4:c9:29:b4:43:3b:12:1c:1c:
                    3c:16:7c:fb:ef:c6:50:1c:f7:4d:38:ac:9f:39:a7:
                    ed:c5:a0:98:3d:da:e5:c9:6f:71:44:28:b3:d1:50:
                    7d:5d:3f:d9:b1:8f:19:e5:37:6d:50:8b:fc:cd:0a:
                    ef:64:b2:6f:af:a4:1a:d7:c7:8c:c1:ab:42:51:b1:
                    ff:3d:26:fb:71:fe:bc:62:89:85:bc:76:13:42:9b:
                    85:90:a4:2b:03:6e:4d:f1:2b:ce:8f:8a:3b:21:3e:
                    49:74:4b:db:0f:15:30:fd:e5:c3:af:95:5b:44:40:
                    77:80:a3:f4:ab:88:aa:8e:b1:42:d4:94:b8:7e:04:
                    7e:8c:2d:3f:3d:2c:7e:06:b4:20:b2:1c:1e:de:51:
                    31:ea:01:ca:18:da:f8:7b:c4:41:b9:50:bc:e1:46:
                    3b:f3:53:32:ae:e5:53:d4:b9:27:00:6d:97:06:54:
                    69:45:09:6c:4d:2c:50:c8:e3:b5:b4:16:f4:3b:23:
                    f5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:49:BF:A6:AC:14:96:5D:7D:3B:14:53:23:EF:F6:A9:9C:3F:D0:6C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.64.0/22
                IPv6:
                  2804:7c90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271504

    Signature Algorithm: sha256WithRSAEncryption
         9d:98:a5:c0:b0:9f:85:ff:a0:75:78:d3:77:1a:fe:97:4b:b7:
         1a:78:df:25:23:97:84:2b:17:aa:88:a4:b6:c7:3b:8b:e7:00:
         59:36:7d:e8:85:58:33:d0:7a:15:90:b2:59:78:38:2f:e9:02:
         b0:68:a2:a9:20:f9:f0:31:73:32:e5:74:08:4a:2e:44:74:8b:
         24:bc:d7:d9:4b:99:07:f2:2b:2d:60:4b:89:61:39:5c:e3:5d:
         68:94:cf:5a:65:73:6c:b3:69:b9:8d:dc:5b:b5:f1:7b:4f:f0:
         f0:fe:d2:18:73:ed:46:72:e3:29:65:54:21:37:08:b0:4a:91:
         95:88:a7:28:d3:c0:96:a3:f4:28:9c:ce:ac:3b:00:10:cd:ec:
         5f:06:60:97:85:46:01:ea:c3:8e:ff:55:7f:83:e6:ea:c9:91:
         8d:28:e4:8a:9d:e7:d6:62:bf:b3:58:b8:42:3f:cc:9a:56:09:
         1e:94:c2:12:11:46:df:75:99:68:63:15:6a:56:13:e6:c3:da:
         e7:fb:9e:de:50:a9:61:06:7b:96:6f:5c:63:a2:d3:73:7c:ca:
         7f:4d:c7:e4:38:f0:7f:c2:62:1e:9b:06:fc:f2:21:8b:51:b6:
         fe:5a:4b:69:4c:0e:23:81:53:c5:83:22:a5:7f:5e:09:36:ea:
         f0:32:50:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----