This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/94DD58D6AED72AF912BF4195FC6702C5C9BEA075.cer
File:                     94DD58D6AED72AF912BF4195FC6702C5C9BEA075.cer (raw, json)
Hash identifier:          PyMrz2Ulu2AvaWNfJLls9vSGktFHZi4Nlfxsb9+6/HU=
Subject key identifier:   94:DD:58:D6:AE:D7:2A:F9:12:BF:41:95:FC:67:02:C5:C9:BE:A0:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       09A0F4D2A5C4A483020FD4C53F00ABBF12ACC257
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/94DD58D6AED72AF912BF4195FC6702C5C9BEA075.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Nov 2025 17:00:55 +0000
Certificate not after:    Fri 20 Nov 2026 17:05:55 +0000
Subordinate resources:    AS: 268737
                          IP: 45.171.252.0/22
                          IP: 2804:59f8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a0:f4:d2:a5:c4:a4:83:02:0f:d4:c5:3f:00:ab:bf:12:ac:c2:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 21 17:00:55 2025 GMT
            Not After : Nov 20 17:05:55 2026 GMT
        Subject: CN=94DD58D6AED72AF912BF4195FC6702C5C9BEA075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f9:1e:ca:9c:9d:aa:be:cb:aa:22:09:69:5c:
                    03:0b:25:d1:4b:a3:73:93:84:7b:de:aa:52:bb:76:
                    cd:03:4f:64:05:10:e2:72:0f:19:a7:52:ba:03:d1:
                    6c:5e:57:0a:62:28:0b:78:76:02:fe:9f:19:3d:91:
                    2d:ea:4d:2e:83:5d:27:0b:5c:6b:d4:5c:0d:1b:f5:
                    91:44:36:9c:ed:25:25:df:ed:02:17:6d:ec:8e:12:
                    f5:27:2b:c7:a8:41:1f:e5:1a:c6:53:9c:04:09:01:
                    04:ab:4f:9b:05:12:7b:60:16:8a:57:2e:39:32:ba:
                    f6:00:c0:b2:27:cb:cc:d8:7f:61:d7:2c:42:fb:75:
                    1e:41:1a:da:7d:ab:d3:04:ac:1a:49:22:fe:4f:a1:
                    7a:15:61:17:0c:37:c3:2f:2b:a0:63:5c:4e:9e:49:
                    5c:1e:0a:a3:fc:fb:12:6b:4d:f3:26:b5:c0:cb:6a:
                    e2:4b:d5:70:1a:80:e5:eb:21:90:e6:f1:df:b2:71:
                    19:33:bb:c5:4e:8b:64:ff:06:02:d3:04:6e:51:d3:
                    54:c5:49:d2:d3:1d:d4:53:95:74:4a:33:81:88:ac:
                    17:35:40:bd:ed:1a:6c:5a:09:56:3b:0c:1b:41:eb:
                    55:c5:e8:3f:a6:b9:fc:9f:13:54:4f:82:b2:61:26:
                    6e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:DD:58:D6:AE:D7:2A:F9:12:BF:41:95:FC:67:02:C5:C9:BE:A0:75
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/94DD58D6AED72AF912BF4195FC6702C5C9BEA075.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.252.0/22
                IPv6:
                  2804:59f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268737

    Signature Algorithm: sha256WithRSAEncryption
         c8:1b:ec:ca:f2:d6:23:fd:ed:3f:4f:63:8c:d5:9a:7d:49:44:
         ec:9c:ae:08:98:c2:77:90:48:2b:35:ae:3e:62:08:96:32:d4:
         dd:34:4e:ac:0e:c7:45:c4:2e:42:15:b4:b1:30:d4:26:54:1b:
         c1:84:d7:51:10:b2:ea:65:5b:e6:16:1e:97:55:86:32:8e:05:
         77:d7:11:83:23:98:7c:0d:69:e9:a8:98:d1:1a:16:8c:c5:03:
         5c:3f:83:af:f2:6c:e5:1c:e1:5a:c2:f3:af:af:1e:e1:d3:0b:
         ac:9a:0b:27:27:e3:a8:7f:74:a4:1e:98:ce:4f:37:03:7e:c0:
         4e:c1:24:e1:58:1b:fe:60:19:1d:94:cb:75:73:a2:30:0c:b2:
         f6:a0:a4:f9:17:83:d0:b8:b7:3c:0c:ed:d7:23:3c:8c:5e:0d:
         86:e2:2e:7c:24:19:be:e8:55:17:5b:33:74:bf:4a:c3:e0:72:
         ca:5b:98:52:92:78:e3:ab:cf:ce:2c:6c:3f:af:d8:a5:dc:9a:
         07:b6:5a:cf:1e:d4:45:a7:50:a4:41:c7:83:80:4a:8f:df:d6:
         27:65:fa:b9:50:a9:b4:e6:3e:9b:45:b4:6e:ca:e3:f8:5e:48:
         3f:ea:f1:82:7f:1f:cc:54:94:45:6b:d8:c0:81:e9:d7:20:ab:
         ea:eb:90:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----