This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DCB53E62EFFCC56D78326139F412421505075D1F.cer
File:                     DCB53E62EFFCC56D78326139F412421505075D1F.cer (raw, json)
Hash identifier:          InD2FxI6rnP8lMi+K+xpsN6C1n7tKTKsz3Y4DOJ39z4=
Subject key identifier:   DC:B5:3E:62:EF:FC:C5:6D:78:32:61:39:F4:12:42:15:05:07:5D:1F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2903511B22B0BCF12D74866B2890A20DE3041017
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7esHpW1H8psG66QycQeLSHTp6h6ZvwvQGQPNANBGqstm/0/DCB53E62EFFCC56D78326139F412421505075D1F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7esHpW1H8psG66QycQeLSHTp6h6ZvwvQGQPNANBGqstm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Dec 2025 21:14:16 +0000
Certificate not after:    Thu 17 Dec 2026 21:19:16 +0000
Subordinate resources:    AS: 271218
                          IP: 177.10.136.0/22
                          IP: 2804:7810::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:03:51:1b:22:b0:bc:f1:2d:74:86:6b:28:90:a2:0d:e3:04:10:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 18 21:14:16 2025 GMT
            Not After : Dec 17 21:19:16 2026 GMT
        Subject: CN=DCB53E62EFFCC56D78326139F412421505075D1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7d:fc:d7:6e:68:a2:f2:93:06:6f:a2:f5:e8:
                    1d:6b:5c:7b:d8:af:0a:22:cb:7c:f7:12:d4:e6:d5:
                    79:0e:eb:6e:ba:fa:73:a5:e8:7e:8f:02:3a:e2:6a:
                    37:6e:c2:6e:d7:5b:ac:41:99:e6:82:33:10:55:92:
                    ad:21:04:8b:1f:b9:1d:51:e5:94:07:91:04:1d:da:
                    14:42:ef:ae:3d:ee:50:d9:12:ce:8f:3b:9b:fb:06:
                    4d:0a:d2:75:42:9a:2c:49:81:f0:a1:71:f0:27:3b:
                    2b:49:e6:39:03:e4:d5:5c:39:cb:db:66:9c:89:32:
                    b3:61:79:74:8d:5f:14:94:47:9e:7f:4d:6d:55:22:
                    55:a5:1e:bb:68:36:a0:b3:eb:e4:0d:ef:72:6c:01:
                    0b:15:4b:19:2a:a5:17:54:7a:8d:75:db:d4:03:c4:
                    ab:07:29:c8:cd:5a:f1:6f:d8:ce:d3:22:b6:56:3f:
                    2f:82:fb:21:8f:ea:22:7d:5b:37:5d:78:1f:29:b7:
                    67:1b:6d:6d:05:92:71:99:62:20:4a:be:f8:86:b1:
                    3f:29:35:b8:35:ee:b5:26:09:18:c5:51:8c:b1:ab:
                    67:af:cf:9a:d7:55:d6:1a:ae:63:d6:8e:f8:7e:0d:
                    19:50:65:07:83:1c:e2:49:49:e0:aa:cb:65:37:55:
                    f5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:B5:3E:62:EF:FC:C5:6D:78:32:61:39:F4:12:42:15:05:07:5D:1F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7esHpW1H8psG66QycQeLSHTp6h6ZvwvQGQPNANBGqstm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7esHpW1H8psG66QycQeLSHTp6h6ZvwvQGQPNANBGqstm/0/DCB53E62EFFCC56D78326139F412421505075D1F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.136.0/22
                IPv6:
                  2804:7810::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271218

    Signature Algorithm: sha256WithRSAEncryption
         0d:91:da:5c:e4:80:aa:82:98:93:24:79:10:bf:36:a6:ae:d3:
         ad:45:7e:fc:5c:df:e0:ca:58:90:af:74:d2:d2:6b:99:85:7b:
         75:50:bd:3a:b4:51:9c:bc:43:47:61:75:7c:87:3d:2b:12:1d:
         9e:a8:be:3f:cb:01:f9:ff:84:5f:64:8b:cb:0f:ef:c6:20:0e:
         02:0c:38:10:3a:45:0e:12:c7:6d:c9:e3:15:1d:b5:56:04:cb:
         7c:72:2f:9c:a2:93:ea:d9:d5:3b:d6:5e:41:4b:55:27:52:c5:
         b3:70:b0:8b:2e:38:af:2f:4d:41:9a:f6:56:45:1f:f4:7c:b5:
         f3:e6:87:f6:5d:6f:fe:d1:e4:8d:e0:d0:eb:ca:39:15:38:ae:
         c4:e7:8b:49:55:68:ae:01:42:ac:5a:c2:8b:71:86:0a:c7:d1:
         ab:96:a0:0a:75:3c:55:b7:f1:8d:7b:e0:f8:16:41:9f:b9:20:
         40:0a:3f:f1:87:6e:73:61:60:67:b7:5d:35:60:ab:4d:0d:96:
         38:04:b2:32:45:ae:4b:7a:15:aa:55:20:39:5f:17:8b:db:01:
         f0:86:4b:0f:88:03:d7:f3:fc:2b:28:28:52:7e:d1:a2:0a:17:
         c6:e6:c3:d6:19:27:10:35:aa:f4:da:4f:cb:76:e7:6f:75:30:
         53:f0:57:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----