This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/90E42BBB08F64935F183226430D88A8065D576AB.cer
File:                     90E42BBB08F64935F183226430D88A8065D576AB.cer (raw, json)
Hash identifier:          kucenVX7nBsZujgL2xEYZC+hCwjJTbv25GvTxelgSYQ=
Subject key identifier:   90:E4:2B:BB:08:F6:49:35:F1:83:22:64:30:D8:8A:80:65:D5:76:AB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       09D3D7334BE1698DDB0C90653CB98552A23AEDE7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/0/90E42BBB08F64935F183226430D88A8065D576AB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 18 Jan 2026 05:29:05 +0000
Certificate not after:    Sun 17 Jan 2027 05:34:05 +0000
Subordinate resources:    AS: 52637
                          IP: 138.121.72.0/22
                          IP: 170.81.88.0/22
                          IP: 170.84.240.0/22
                          IP: 179.96.160.0/21
                          IP: 2804:d88::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d3:d7:33:4b:e1:69:8d:db:0c:90:65:3c:b9:85:52:a2:3a:ed:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 18 05:29:05 2026 GMT
            Not After : Jan 17 05:34:05 2027 GMT
        Subject: CN=90E42BBB08F64935F183226430D88A8065D576AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7a:d1:29:6b:64:0b:71:97:3c:11:7a:64:c1:
                    e1:c3:cd:cd:f9:20:ca:8e:7b:e0:a8:58:2e:4f:1a:
                    3f:ab:01:ec:6e:f4:14:5e:98:b8:28:76:c0:f1:30:
                    36:29:a4:31:e7:85:b7:45:be:7c:55:33:5e:8f:c6:
                    6f:92:44:3b:21:c2:71:80:63:c0:3e:14:d1:53:16:
                    d2:0c:94:3d:ce:9b:d3:f3:82:f4:e8:2c:19:fb:bc:
                    c2:fc:5b:93:d9:f5:26:f4:ea:ee:e6:e0:00:ae:dd:
                    a8:dc:22:74:49:e3:b9:41:bc:fd:c2:2e:3d:84:33:
                    c0:6c:9b:39:29:bd:d5:e9:43:70:95:7d:37:5d:49:
                    d6:5e:e1:69:67:54:54:12:78:2b:ba:87:ce:10:ca:
                    3e:67:5a:8f:9f:8f:c1:24:11:98:21:a8:2b:36:b1:
                    29:75:f7:ac:a7:35:a2:1c:5f:66:86:d9:fe:bd:7d:
                    c5:c1:49:b2:d5:fa:81:b3:c1:80:59:eb:20:3b:78:
                    84:a8:13:94:61:52:9f:22:77:a5:60:a2:17:ed:cf:
                    0a:a9:d1:be:e7:05:2e:6c:fd:91:6e:ef:5b:1a:d7:
                    27:0b:72:d1:5f:85:84:f0:a9:3e:fc:fe:3b:e3:0c:
                    32:f4:12:92:5a:85:85:26:c9:f6:ab:81:41:7c:2a:
                    08:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                90:E4:2B:BB:08:F6:49:35:F1:83:22:64:30:D8:8A:80:65:D5:76:AB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/0/90E42BBB08F64935F183226430D88A8065D576AB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.72.0/22
                  170.81.88.0/22
                  170.84.240.0/22
                  179.96.160.0/21
                IPv6:
                  2804:d88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52637

    Signature Algorithm: sha256WithRSAEncryption
         9d:ad:98:4a:a7:c1:ba:f4:bb:8b:bf:36:9e:be:4b:2a:86:08:
         34:8f:07:22:02:b3:73:4b:5f:69:e0:4c:f2:5a:f5:e5:d8:bb:
         1d:42:47:d0:46:33:32:d7:43:d5:2f:41:2e:f0:98:6b:b4:04:
         47:7f:bb:a0:b5:e4:e9:16:f1:55:f4:31:ec:3e:0e:81:c2:73:
         7f:66:30:38:bd:6f:28:84:c8:3e:eb:24:04:62:db:e1:39:aa:
         ae:ba:af:8a:0f:59:52:62:bf:7d:e1:83:a8:64:63:7a:a5:35:
         29:88:5b:f0:36:0b:3b:d6:e4:46:6d:a2:0c:b3:d1:bd:b6:f0:
         75:8a:8a:47:8c:82:a4:4c:2c:04:a8:fe:d7:bf:05:a0:41:55:
         c5:60:d1:24:c0:16:21:2f:51:bf:ba:53:c7:3f:e5:cf:f9:05:
         c3:e3:f1:ad:f0:fa:41:e8:8c:ec:64:ea:46:1d:db:d4:19:00:
         5e:4f:4a:93:39:30:0c:42:a8:59:c6:10:f1:b0:b7:5b:8b:75:
         d8:ea:b0:a2:1f:33:8c:dd:99:3b:9f:8e:ad:b0:ea:45:6f:f7:
         b3:90:40:7b:e7:99:c6:53:11:fb:2e:54:77:21:38:f6:6d:c7:
         62:e5:23:d7:f8:d8:2d:45:66:e2:66:26:ea:66:2d:05:7a:0c:
         d7:86:f0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----