This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.cer
File:                     5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.cer (raw, json)
Hash identifier:          cooNtPY6kQxWth2Dx+U+gJRr2Zhf9xAKEIZEUkLFj74=
Subject key identifier:   5F:A9:C0:1F:53:41:C7:DB:EC:4A:1A:09:BA:0B:2C:17:68:61:39:8E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6FF38E5A5CD10A92808FF61777C0A196A42A8630
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 08 Nov 2025 19:03:11 +0000
Certificate not after:    Sat 07 Nov 2026 19:08:11 +0000
Subordinate resources:    AS: 268149
                          IP: 45.170.92.0/22
                          IP: 2804:58c8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f3:8e:5a:5c:d1:0a:92:80:8f:f6:17:77:c0:a1:96:a4:2a:86:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  8 19:03:11 2025 GMT
            Not After : Nov  7 19:08:11 2026 GMT
        Subject: CN=5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b9:57:54:f0:3b:91:8e:4a:17:d9:0b:f7:cf:
                    13:31:35:30:fb:a5:ca:af:6e:1f:19:49:65:28:7d:
                    12:f8:9e:94:68:89:67:10:33:88:ed:81:71:dd:b8:
                    2a:f7:22:d8:be:25:af:5e:d5:da:77:a7:e9:0d:e7:
                    4a:40:32:0c:ce:89:e0:9f:ff:c3:da:0e:66:93:b5:
                    dc:fc:90:df:27:9b:a4:f8:49:2a:44:e6:83:e2:1c:
                    1d:5d:b8:97:a4:89:9b:6b:51:13:0a:e9:24:cb:f1:
                    b4:9b:b3:c1:cc:e7:3e:9e:9a:72:3a:f5:b3:b1:0f:
                    91:b8:39:19:0f:ce:b2:d9:73:96:bd:a8:cc:c7:35:
                    b2:67:07:0e:41:a3:6b:59:73:fc:2e:76:41:62:de:
                    80:92:58:3f:36:fd:51:14:ca:00:ec:48:27:8f:e5:
                    7d:d7:d9:1f:e8:38:4f:77:3c:84:5d:68:80:3b:ce:
                    08:e0:8c:f5:1f:ef:44:fb:3d:18:00:a1:62:5d:70:
                    b8:51:61:6f:db:0a:73:9e:4e:6a:0f:92:55:0d:c1:
                    a7:02:e2:29:8a:2b:02:ff:55:c4:8c:a4:17:d9:73:
                    6d:86:bd:d0:14:de:21:86:04:f5:5c:a9:10:6d:41:
                    f0:9c:e0:56:bc:af:55:2d:9d:ed:44:9b:1a:0c:7f:
                    63:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5F:A9:C0:1F:53:41:C7:DB:EC:4A:1A:09:BA:0B:2C:17:68:61:39:8E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.92.0/22
                IPv6:
                  2804:58c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268149

    Signature Algorithm: sha256WithRSAEncryption
         be:a3:31:09:31:63:37:bf:3d:a0:97:c9:61:48:ae:db:9b:1e:
         ac:5d:9f:7c:2a:e8:0d:6c:19:62:d8:10:b0:c2:95:0a:9b:2a:
         5c:2e:df:61:4b:28:8e:a5:01:2d:66:6f:de:4c:a4:8e:6c:f5:
         ee:b5:eb:de:2b:5c:90:84:10:5b:4d:6e:1b:c1:6b:b6:8e:df:
         52:92:40:6d:6f:7c:20:99:eb:48:f6:42:f8:b8:bf:61:14:8a:
         60:39:3a:26:29:2f:a6:3c:48:40:28:46:c8:75:5f:6c:86:49:
         bd:50:bd:da:bf:bc:dd:b2:ac:96:75:a3:5c:b5:f2:66:cf:b6:
         d9:1d:57:af:1e:be:90:00:67:2e:0e:94:37:18:7e:b4:5a:c3:
         fb:de:d0:b7:fb:32:52:11:76:1a:bb:3e:09:96:a9:6d:8a:d4:
         13:29:cd:3e:d2:68:58:c9:b8:13:67:87:c3:f7:64:cb:ca:b4:
         76:cf:27:13:ed:65:6b:cf:ed:d5:ee:ce:8e:06:97:26:aa:04:
         eb:63:c9:5b:1f:9f:40:b3:7b:5c:f3:14:25:2b:11:52:57:fb:
         6d:2a:d4:b7:17:81:8e:9e:46:a9:85:ac:80:f4:46:8c:c8:fc:
         23:13:8e:7f:1a:bd:33:35:a1:3c:3f:b5:66:e7:11:8f:25:43:
         db:6a:83:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----