This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9B679E5B793CBDF49D875F5BD7BDF01252A88452.cer
File:                     9B679E5B793CBDF49D875F5BD7BDF01252A88452.cer (raw, json)
Hash identifier:          gKA5zObEul6lTq5uXzQjk+5nppk2ryZurUXYN+J22ck=
Subject key identifier:   9B:67:9E:5B:79:3C:BD:F4:9D:87:5F:5B:D7:BD:F0:12:52:A8:84:52
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       22580923E476C8C76EE050443C89CE2A3A0BC383
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/9B679E5B793CBDF49D875F5BD7BDF01252A88452.mft
caRepository:             rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Nov 2025 13:16:13 +0000
Certificate not after:    Thu 05 Nov 2026 13:21:13 +0000
Subordinate resources:    AS: 268036
                          IP: 45.168.24.0/22
                          IP: 2804:56fc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:58:09:23:e4:76:c8:c7:6e:e0:50:44:3c:89:ce:2a:3a:0b:c3:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  6 13:16:13 2025 GMT
            Not After : Nov  5 13:21:13 2026 GMT
        Subject: CN=9B679E5B793CBDF49D875F5BD7BDF01252A88452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:31:3d:ac:ca:7e:57:e0:42:37:a7:5c:fc:6a:
                    96:6e:a4:e3:c1:a4:c5:fc:c6:c7:a1:ec:44:47:f3:
                    02:09:50:4d:68:c8:07:b2:7d:7c:ad:75:5e:c1:0d:
                    da:a7:3b:a9:72:f7:dd:fd:bc:c5:23:b2:97:97:2a:
                    3b:be:13:82:ab:09:81:96:22:ec:c4:c7:92:1e:1d:
                    ea:2a:d1:0c:2f:cd:f4:56:44:b4:fb:37:50:54:a3:
                    50:09:a9:12:ee:eb:dc:11:6a:eb:9c:db:fb:4b:49:
                    bb:a3:20:35:5f:41:86:db:2e:9e:96:75:fb:cd:b6:
                    c3:f9:15:7d:c7:c6:64:61:c7:21:eb:b0:4d:2f:ac:
                    07:59:57:25:99:d4:aa:a3:f5:ae:c5:63:47:bf:dc:
                    1f:52:e7:d7:58:0a:1b:d0:53:16:48:46:b0:0b:94:
                    d9:49:0b:42:6e:a0:2c:f8:58:59:f4:51:dd:e6:91:
                    6a:d8:51:55:00:66:07:89:62:dd:8a:41:e9:c5:4f:
                    25:ae:96:2f:1c:01:23:03:ed:b7:e6:76:39:d6:f6:
                    7c:65:18:e4:ef:71:0b:ad:cf:aa:b9:40:81:90:f9:
                    0e:d4:79:35:b5:53:1a:96:99:2a:e7:ca:93:84:6e:
                    76:a9:3a:3e:29:51:25:31:ac:a4:ef:47:ef:a2:6b:
                    55:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:67:9E:5B:79:3C:BD:F4:9D:87:5F:5B:D7:BD:F0:12:52:A8:84:52
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/9B679E5B793CBDF49D875F5BD7BDF01252A88452.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.24.0/22
                IPv6:
                  2804:56fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268036

    Signature Algorithm: sha256WithRSAEncryption
         96:c4:c8:29:83:f4:b8:29:81:cb:3e:fe:23:af:29:64:be:6f:
         3b:3e:38:3a:37:27:9d:f5:44:f1:02:5b:29:73:73:a3:64:67:
         91:24:2e:64:83:f1:47:79:e7:dd:eb:4b:0b:f1:83:28:75:2c:
         9e:62:44:bd:2b:a2:7e:54:f1:30:3c:40:0d:b1:0a:3a:f9:4a:
         47:c5:c4:a0:5b:66:2f:ef:48:81:c0:4c:c2:04:91:88:2c:b6:
         ad:84:32:87:6b:ec:91:86:2e:ae:50:a5:5c:46:db:67:fb:4b:
         55:ea:1c:5c:34:4b:88:9e:68:57:ca:0e:2a:5f:ed:ab:c0:5e:
         47:fc:7e:0e:bc:7c:5c:3d:5a:6f:ba:a8:e6:ab:7f:18:05:93:
         83:12:9e:a7:ad:5e:99:fe:92:fe:37:c5:54:6f:fd:51:bc:a9:
         49:f2:03:7a:13:3e:8e:de:84:7c:03:e0:be:4f:f2:95:be:26:
         4b:b5:32:07:5a:30:12:96:62:a1:75:21:f1:0b:bf:d2:35:d7:
         9d:27:d6:d7:c2:06:55:8c:5f:47:e5:f6:53:2b:2c:a3:e0:2a:
         07:42:c5:44:5a:b4:65:68:e8:24:55:8b:43:c5:b4:06:46:cc:
         ba:9c:7d:4b:ab:e4:f4:b9:76:75:ec:d6:7c:b2:38:d2:31:0c:
         80:21:9e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----