This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer
File:                     BFB590FA7A04C15A07E802593C4472D77FAB7820.cer (raw, json)
Hash identifier:          1xI9s6pE9UFKQ53Kt3nuzt6pwbFX2kbjWLV6xopnyqY=
Subject key identifier:   BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       26E1093750D833C8C159FC00B3C725C63B0C82BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft
caRepository:             rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Nov 2025 06:38:44 +0000
Certificate not after:    Thu 26 Nov 2026 06:43:44 +0000
Subordinate resources:    AS: 268878
                          IP: 45.174.16.0/22
                          IP: 2804:5bf0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:52:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e1:09:37:50:d8:33:c8:c1:59:fc:00:b3:c7:25:c6:3b:0c:82:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 27 06:38:44 2025 GMT
            Not After : Nov 26 06:43:44 2026 GMT
        Subject: CN=BFB590FA7A04C15A07E802593C4472D77FAB7820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ad:6f:7e:06:ef:8d:7d:7a:d8:24:1f:c3:02:
                    00:e7:1c:f6:c1:9b:8f:10:ca:0a:18:84:f8:20:87:
                    96:db:82:91:4b:a1:75:1a:1a:39:33:6f:aa:8a:ee:
                    d9:8f:63:c1:ff:fc:5e:9c:be:50:e4:f0:87:87:bb:
                    68:09:dd:86:42:9c:f0:68:d5:7b:79:11:57:a2:6f:
                    39:37:38:f1:8f:83:36:fd:e1:36:39:c3:3c:e5:29:
                    53:32:5a:ef:51:3f:37:54:7c:bc:42:40:1b:ee:b1:
                    bb:58:74:fa:36:58:3e:ed:09:97:16:f0:91:66:08:
                    29:06:2f:1d:6f:dd:20:bf:a0:0e:a3:b5:88:c5:59:
                    13:b6:14:63:e1:54:40:c6:ab:5d:76:44:6c:91:a8:
                    e1:f3:83:3e:47:22:ff:11:a4:59:ab:6d:d8:89:0e:
                    1e:c7:84:41:bb:80:cb:a8:c4:71:8d:97:44:4b:fe:
                    8e:16:f0:da:0c:14:10:8c:ee:80:97:6e:e7:c5:18:
                    f9:7f:98:29:5e:b8:ff:4e:0b:60:79:54:c7:04:2f:
                    db:c2:80:cc:dc:ea:f9:81:8b:12:5c:ac:55:eb:7e:
                    07:24:b7:24:00:25:5e:dc:bc:bb:f9:a7:07:85:0e:
                    7a:00:d1:29:80:d2:5d:04:21:34:16:5b:d1:bf:b7:
                    2c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.16.0/22
                IPv6:
                  2804:5bf0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268878

    Signature Algorithm: sha256WithRSAEncryption
         7c:68:07:5d:39:3a:8e:64:47:18:37:e9:54:b1:3c:75:e8:79:
         b1:76:16:44:c9:3c:b0:19:a5:28:5e:7c:90:e1:fa:5b:5f:66:
         77:0e:af:10:29:ba:6b:e7:3e:87:fc:4a:3c:4d:23:4c:8e:7b:
         ee:c5:25:4c:eb:81:ac:28:3a:c1:bd:28:40:04:45:dc:c7:2a:
         94:91:f1:cf:a2:e0:1e:63:58:39:1e:d8:d0:d1:3c:7d:c0:f2:
         90:9c:09:fd:0a:a4:f6:b8:25:b7:6f:05:a4:25:69:67:e6:2e:
         2e:e4:29:b8:94:1b:ea:b4:df:c8:cd:d3:d5:45:e3:60:71:d0:
         d2:24:9e:5f:f3:26:79:50:68:8a:bd:5d:79:74:96:1f:bf:63:
         75:04:f1:9c:c5:33:d6:22:26:30:27:29:7c:d2:e4:b0:53:e6:
         6c:60:13:1b:c5:b0:e4:df:d0:40:02:48:84:b5:64:6f:40:a2:
         ac:1c:ff:b5:b5:d0:c8:4c:79:22:13:2a:e1:d3:81:98:ca:a0:
         6c:bf:9c:56:1d:58:9d:c1:f9:7c:74:d1:c5:6e:a9:a2:cb:6d:
         a9:f0:b7:ae:a3:15:e3:2e:41:41:55:29:07:9e:05:c3:37:a1:
         b7:b7:47:82:b5:bc:95:4e:89:f9:5e:f0:49:5b:11:f8:70:d2:
         13:f7:25:e4
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUJuEJN1DYM8jBWfwAs8clxjsMgr4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTExMjcwNjM4NDRaFw0yNjExMjYwNjQzNDRaMDMxMTAvBgNV
BAMTKEJGQjU5MEZBN0EwNEMxNUEwN0U4MDI1OTNDNDQ3MkQ3N0ZBQjc4MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyrW9+Bu+NfXrYJB/DAgDnHPbB
m48QygoYhPggh5bbgpFLoXUaGjkzb6qK7tmPY8H//F6cvlDk8IeHu2gJ3YZCnPBo
1Xt5EVeibzk3OPGPgzb94TY5wzzlKVMyWu9RPzdUfLxCQBvusbtYdPo2WD7tCZcW
8JFmCCkGLx1v3SC/oA6jtYjFWRO2FGPhVEDGq112RGyRqOHzgz5HIv8RpFmrbdiJ
Dh7HhEG7gMuoxHGNl0RL/o4W8NoMFBCM7oCXbufFGPl/mCleuP9OC2B5VMcEL9vC
gMzc6vmBixJcrFXrfgcktyQAJV7cvLv5pweFDnoA0SmA0l0EITQWW9G/tyyHAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS/tZD6egTBWgfo
Alk8RHLXf6t4IDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNzlL
NGlkbUxtNGVlczUyUHdZTUFKUUtXWGJjVlFUODU2OTNpa1J5enNrYm8vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzc5
SzRpZG1MbTRlZXM1MlB3WU1BSlFLV1hiY1ZRVDg1NjkzaWtSeXpza2JvLzAvQkZC
NTkwRkE3QTA0QzE1QTA3RTgwMjU5M0M0NDcyRDc3RkFCNzgyMC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLa4QMA0EAgACMAcDBQAoBFvwMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQaTjANBgkqhkiG9w0BAQsFAAOCAQEAfGgHXTk6jmRHGDfp
VLE8deh5sXYWRMk8sBmlKF58kOH6W19mdw6vECm6a+c+h/xKPE0jTI577sUlTOuB
rCg6wb0oQARF3McqlJHxz6LgHmNYOR7Y0NE8fcDykJwJ/Qqk9rglt28FpCVpZ+Yu
LuQpuJQb6rTfyM3T1UXjYHHQ0iSeX/MmeVBoir1deXSWH79jdQTxnMUz1iImMCcp
fNLksFPmbGATG8Ww5N/QQAJIhLVkb0CirBz/tbXQyEx5IhMq4dOBmMqgbL+cVh1Y
ncH5fHTRxW6posttqfC3rqMV4y5BQVUpB54Fwzeht7dHgrW8lU6J+V7wSVsR+HDS
E/cl5A==
-----END CERTIFICATE-----