This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE.cer
File:                     9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE.cer (raw, json)
Hash identifier:          kmJOdg5SGk9d9RWZaa8aiGheXl/DIe8F5DHvLi6iQJM=
Subject key identifier:   9B:B7:FC:9A:69:CB:B0:6C:BF:7A:F7:4C:65:A4:A7:34:D2:84:C5:EE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0F0E3A062DB4713683C53D490FFFCE8EAB152ACA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F4UzVWXXk6HGr8gbzLuxpLeUVtRna4CmBppqavpDdZPE/0/9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F4UzVWXXk6HGr8gbzLuxpLeUVtRna4CmBppqavpDdZPE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Nov 2025 07:19:20 +0000
Certificate not after:    Tue 17 Nov 2026 07:24:20 +0000
Subordinate resources:    AS: 268285
                          IP: 45.237.112.0/22
                          IP: 2804:4ed4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:52:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:0e:3a:06:2d:b4:71:36:83:c5:3d:49:0f:ff:ce:8e:ab:15:2a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 18 07:19:20 2025 GMT
            Not After : Nov 17 07:24:20 2026 GMT
        Subject: CN=9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9a:ef:82:c8:d2:f3:3c:7e:6a:23:ff:d3:46:
                    c5:7b:f9:38:10:4c:d3:ca:8a:c1:ef:4b:5d:27:71:
                    1b:05:0a:a4:a5:de:00:01:32:d1:b6:7b:00:cf:0f:
                    ba:24:9b:ae:3e:7f:05:82:d0:05:06:92:50:24:80:
                    25:ab:13:76:aa:3f:94:8b:f7:89:65:97:36:c9:2c:
                    e3:f6:96:97:75:df:0a:16:a4:94:74:dd:2e:ac:fa:
                    44:c9:85:93:f9:45:15:ac:3d:03:60:b6:fa:17:d9:
                    7e:97:61:44:69:0f:ea:d1:1d:2e:4d:fe:e4:56:f1:
                    1a:e6:74:9a:75:3e:5f:a1:e2:34:0f:dc:a9:98:92:
                    bd:c6:17:2d:c6:a6:05:02:7f:29:8a:63:39:53:62:
                    c4:a2:a8:cb:2a:cd:aa:4a:e8:e9:f1:59:42:6e:b8:
                    d9:b5:dd:74:f6:89:2e:4f:40:04:41:2c:95:25:55:
                    ae:55:69:c6:65:3b:98:5d:02:31:6d:47:5b:1d:53:
                    77:64:73:63:c8:d3:d8:c4:79:bb:e3:75:e5:2e:55:
                    42:30:28:32:6a:54:7e:81:b3:fb:87:92:27:71:fe:
                    e7:37:e7:fa:b3:a8:75:2f:5d:46:61:76:a1:9e:f1:
                    9d:4b:c8:e1:37:93:49:b0:2d:9f:63:9e:9c:b6:a6:
                    28:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:B7:FC:9A:69:CB:B0:6C:BF:7A:F7:4C:65:A4:A7:34:D2:84:C5:EE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F4UzVWXXk6HGr8gbzLuxpLeUVtRna4CmBppqavpDdZPE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F4UzVWXXk6HGr8gbzLuxpLeUVtRna4CmBppqavpDdZPE/0/9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.112.0/22
                IPv6:
                  2804:4ed4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268285

    Signature Algorithm: sha256WithRSAEncryption
         51:b6:36:eb:2c:8b:54:15:3f:85:9b:6f:ff:62:b7:ea:04:a0:
         0d:f5:83:e4:db:ed:54:9d:b7:19:45:a6:d2:1b:36:fd:15:59:
         e6:4a:37:ae:cc:b6:6d:e7:b3:f6:80:48:be:e7:0f:7f:89:34:
         4d:d8:72:df:cc:45:87:e0:ea:bf:d5:5a:3c:82:ed:d4:fb:37:
         44:64:38:4e:b5:47:d8:d9:20:3a:84:ee:6e:18:ea:6d:6b:b4:
         4b:4f:74:7c:3d:64:f1:b7:b2:69:b7:75:fa:d6:35:5e:b9:ef:
         74:0d:87:ca:34:67:7f:6c:62:1e:2a:77:12:78:7a:f1:5d:aa:
         ad:66:68:01:15:8b:0a:8a:81:a6:6c:98:1c:ea:87:b3:4a:84:
         a1:cb:93:47:63:15:76:66:db:86:af:fb:2c:cf:45:c0:05:78:
         a2:3a:40:ed:ad:ef:46:df:7a:04:1f:0d:c4:49:2b:bd:2c:69:
         62:54:71:7c:25:a6:10:c6:6f:3f:02:a7:00:78:5c:2b:64:77:
         49:8e:45:5b:f0:68:f1:e1:55:7c:39:41:f1:cc:20:07:8c:8f:
         ba:ee:77:67:de:ec:7b:1f:b5:58:25:5d:56:49:46:ec:33:10:
         50:53:b3:8d:f7:60:3d:6a:dc:43:62:75:7a:db:41:fe:41:d7:
         f4:ad:3d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----