This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9D66B56B4AFD93AF70B202794EBF969A62E29886.cer
File:                     9D66B56B4AFD93AF70B202794EBF969A62E29886.cer (raw, json)
Hash identifier:          xaHS3V3Y+E8zp4tapBPewiAhMgxIGP6RDjjSLA/Hi70=
Subject key identifier:   9D:66:B5:6B:4A:FD:93:AF:70:B2:02:79:4E:BF:96:9A:62:E2:98:86
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       666B4BB2797B40EAF9354C0984EFF8B660CCEA35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7scznUHTnGnMq5FpgQvmvG1VE7vRhw6yhQLnL8tQWQ4H/0/9D66B56B4AFD93AF70B202794EBF969A62E29886.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7scznUHTnGnMq5FpgQvmvG1VE7vRhw6yhQLnL8tQWQ4H/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Nov 2025 15:13:16 +0000
Certificate not after:    Thu 12 Nov 2026 15:18:16 +0000
Subordinate resources:    AS: 268105
                          IP: 45.168.132.0/22
                          IP: 2804:5814::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:6b:4b:b2:79:7b:40:ea:f9:35:4c:09:84:ef:f8:b6:60:cc:ea:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 13 15:13:16 2025 GMT
            Not After : Nov 12 15:18:16 2026 GMT
        Subject: CN=9D66B56B4AFD93AF70B202794EBF969A62E29886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:73:fc:f3:ee:07:4c:17:bb:98:ef:e9:14:b7:
                    9f:99:34:70:2a:ca:70:39:f7:59:04:aa:a2:84:12:
                    be:e4:b5:2f:4f:31:32:af:1b:59:10:7c:87:38:d4:
                    be:4a:6a:c6:c2:d7:33:af:54:0b:f2:d9:a1:f6:b2:
                    27:e3:d3:ba:81:28:a8:fa:43:9f:f1:10:52:36:ef:
                    43:a2:82:b6:67:08:b9:c0:84:4c:a2:9c:fd:a3:6f:
                    b3:d0:49:db:86:ce:fc:3c:cb:b7:10:ab:20:7a:a0:
                    ff:57:72:3d:53:a5:f4:bc:09:c5:59:5d:6c:cf:8f:
                    d8:fe:5a:24:a9:ad:d8:16:53:b1:0e:a3:d0:b3:89:
                    7b:03:93:5a:37:26:4b:2e:99:df:52:6f:3b:dc:83:
                    e2:df:38:48:46:47:0c:3e:10:76:55:21:27:c0:43:
                    37:5b:7e:97:c4:df:b9:66:e3:ae:c7:4f:29:96:a9:
                    2f:5f:70:15:b8:38:47:b9:43:9d:ee:a3:2d:d6:bb:
                    ec:f8:fd:d8:c1:42:33:47:c6:62:b9:e4:b4:0b:c6:
                    bd:16:dd:f9:44:f9:1e:34:08:bb:fb:c7:bc:8e:b6:
                    20:2a:60:30:c9:cb:95:00:d1:12:be:50:82:88:91:
                    eb:3e:cf:3c:79:f5:d6:3d:80:78:ca:46:d1:62:02:
                    a3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:66:B5:6B:4A:FD:93:AF:70:B2:02:79:4E:BF:96:9A:62:E2:98:86
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7scznUHTnGnMq5FpgQvmvG1VE7vRhw6yhQLnL8tQWQ4H/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7scznUHTnGnMq5FpgQvmvG1VE7vRhw6yhQLnL8tQWQ4H/0/9D66B56B4AFD93AF70B202794EBF969A62E29886.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.132.0/22
                IPv6:
                  2804:5814::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268105

    Signature Algorithm: sha256WithRSAEncryption
         d0:d1:14:a4:1e:ec:42:7f:e9:5b:94:c2:b0:19:d8:98:c5:f3:
         a1:a9:2d:31:29:f7:18:2e:6f:21:a6:da:c9:57:e0:21:96:f3:
         f0:09:3f:9a:23:6f:0f:0a:11:d8:86:9e:06:b9:47:71:b4:49:
         5f:3b:3e:89:19:58:08:e0:0e:20:43:1f:5b:9b:6c:2b:50:79:
         18:7c:6d:1d:34:8f:6c:3a:cb:92:3e:f3:0a:c0:a4:d6:39:f2:
         b6:04:3f:a0:70:04:da:7f:d7:10:d8:05:86:11:24:11:4f:80:
         f5:84:41:a7:c7:e0:71:5f:10:ca:69:ba:72:60:61:3a:21:1c:
         0a:3f:39:bc:d2:43:a1:a2:8b:09:38:7b:ab:d5:32:2c:9c:c5:
         2d:ad:c9:ec:b8:c9:26:ef:99:8f:e6:7f:ac:bb:a2:fc:5d:73:
         46:c5:0b:38:4f:c7:8d:48:60:31:14:19:24:1e:44:06:1a:56:
         42:36:a7:3a:06:c3:50:a4:33:c1:47:2d:16:c7:d7:cd:43:21:
         d4:03:d2:4e:d2:bb:4f:4b:05:70:d8:1f:0d:31:04:90:63:4a:
         22:52:4a:13:4e:26:6b:5a:97:cf:d7:a7:87:90:87:c1:42:d2:
         76:12:1f:ef:bf:cb:82:29:ff:49:4c:fb:45:79:d0:b6:74:66:
         39:27:f7:bb
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUZmtLsnl7QOr5NUwJhO/4tmDM6jUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTExMTMxNTEzMTZaFw0yNjExMTIxNTE4MTZaMDMxMTAvBgNV
BAMTKDlENjZCNTZCNEFGRDkzQUY3MEIyMDI3OTRFQkY5NjlBNjJFMjk4ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXc/zz7gdMF7uY7+kUt5+ZNHAq
ynA591kEqqKEEr7ktS9PMTKvG1kQfIc41L5KasbC1zOvVAvy2aH2sifj07qBKKj6
Q5/xEFI270OigrZnCLnAhEyinP2jb7PQSduGzvw8y7cQqyB6oP9Xcj1TpfS8CcVZ
XWzPj9j+WiSprdgWU7EOo9CziXsDk1o3Jksumd9Sbzvcg+LfOEhGRww+EHZVISfA
QzdbfpfE37lm467HTymWqS9fcBW4OEe5Q53uoy3Wu+z4/djBQjNHxmK55LQLxr0W
3flE+R40CLv7x7yOtiAqYDDJy5UA0RK+UIKIkes+zzx59dY9gHjKRtFiAqNZAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSdZrVrSv2Tr3Cy
AnlOv5aaYuKYhjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3Nj
em5VSFRuR25NcTVGcGdRdm12RzFWRTd2Umh3NnloUUxuTDh0UVdRNEgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdz
Y3puVUhUbkduTXE1RnBnUXZtdkcxVkU3dlJodzZ5aFFMbkw4dFFXUTRILzAvOUQ2
NkI1NkI0QUZEOTNBRjcwQjIwMjc5NEVCRjk2OUE2MkUyOTg4Ni5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLaiEMA0EAgACMAcDBQAoBFgUMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQXSTANBgkqhkiG9w0BAQsFAAOCAQEA0NEUpB7sQn/pW5TC
sBnYmMXzoaktMSn3GC5vIabayVfgIZbz8Ak/miNvDwoR2IaeBrlHcbRJXzs+iRlY
COAOIEMfW5tsK1B5GHxtHTSPbDrLkj7zCsCk1jnytgQ/oHAE2n/XENgFhhEkEU+A
9YRBp8fgcV8Qymm6cmBhOiEcCj85vNJDoaKLCTh7q9UyLJzFLa3J7LjJJu+Zj+Z/
rLui/F1zRsULOE/HjUhgMRQZJB5EBhpWQjanOgbDUKQzwUctFsfXzUMh1APSTtK7
T0sFcNgfDTEEkGNKIlJKE04ma1qXz9enh5CHwULSdhIf77/Lgin/SUz7RXnQtnRm
OSf3uw==
-----END CERTIFICATE-----