This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C87A68538669B5BE6143466DC5BDBD7D31975E45.cer
File:                     C87A68538669B5BE6143466DC5BDBD7D31975E45.cer (raw, json)
Hash identifier:          ppFvCk1BL2HFvDVASTAB9/ou/SVwzrnNtE5PjGP3IHY=
Subject key identifier:   C8:7A:68:53:86:69:B5:BE:61:43:46:6D:C5:BD:BD:7D:31:97:5E:45
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       09BE60FB9EFF7DF22C15672262CBDE9EB936EF12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7G3svKhDmdj3b7mrTfaTdsyrLMKPYANMRmzmMU69QaNh/0/C87A68538669B5BE6143466DC5BDBD7D31975E45.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7G3svKhDmdj3b7mrTfaTdsyrLMKPYANMRmzmMU69QaNh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Nov 2025 17:27:42 +0000
Certificate not after:    Wed 11 Nov 2026 17:32:42 +0000
Subordinate resources:    AS: 268805
                          IP: 45.173.108.0/22
                          IP: 2804:5aec::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:be:60:fb:9e:ff:7d:f2:2c:15:67:22:62:cb:de:9e:b9:36:ef:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 12 17:27:42 2025 GMT
            Not After : Nov 11 17:32:42 2026 GMT
        Subject: CN=C87A68538669B5BE6143466DC5BDBD7D31975E45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:44:d4:b6:b2:0a:c4:38:c8:b4:c2:96:b6:5c:
                    d9:cf:46:6b:b9:35:43:7e:e1:f8:e8:0b:34:fb:e4:
                    2a:d3:13:15:76:3e:c9:bf:1b:69:ef:bf:68:94:60:
                    92:31:db:85:ab:f6:dc:86:f1:48:4b:64:c6:d0:96:
                    38:89:ca:e4:87:e9:45:84:b9:99:aa:81:a2:16:11:
                    d1:c4:7c:e3:c1:a7:bb:1f:91:e1:a1:d0:b3:dc:58:
                    ef:fe:43:e0:b5:8a:eb:d9:dd:bb:8a:40:4e:b6:03:
                    ea:9d:f0:2f:22:46:cb:2f:10:b9:b9:0a:62:eb:ab:
                    b4:f2:d3:80:37:10:e9:54:3a:b6:44:43:7a:57:cc:
                    e3:55:0b:23:e4:ee:fb:84:a0:75:6b:e1:f5:13:87:
                    f6:b2:85:a6:ad:d5:92:96:a8:05:34:58:ac:fb:b2:
                    0b:d9:5f:42:c5:d6:dd:e8:a5:7b:40:8e:9c:76:2c:
                    5f:03:7e:72:c6:2b:c3:80:29:2d:93:ff:f1:0f:60:
                    b4:47:9a:12:a8:12:1e:d6:e8:75:6e:67:d3:ee:6d:
                    00:d8:fd:e6:53:90:ec:93:5a:9e:ed:ba:fa:25:4b:
                    84:58:a8:3b:a5:d6:d2:b2:1a:be:53:3f:73:c2:50:
                    20:b1:fa:8d:a5:63:7e:81:7e:65:c6:da:00:bb:93:
                    ee:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C8:7A:68:53:86:69:B5:BE:61:43:46:6D:C5:BD:BD:7D:31:97:5E:45
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7G3svKhDmdj3b7mrTfaTdsyrLMKPYANMRmzmMU69QaNh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7G3svKhDmdj3b7mrTfaTdsyrLMKPYANMRmzmMU69QaNh/0/C87A68538669B5BE6143466DC5BDBD7D31975E45.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.108.0/22
                IPv6:
                  2804:5aec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268805

    Signature Algorithm: sha256WithRSAEncryption
         9f:ec:aa:bb:55:05:f7:43:f5:8a:cd:08:e3:4d:7d:40:e6:e3:
         96:99:ff:13:b0:25:39:6b:7d:25:c7:7a:1c:62:c9:43:87:0b:
         67:cf:21:15:da:56:68:3c:c5:7b:23:1b:b1:13:fe:2f:81:24:
         84:72:7d:41:41:8c:6f:32:f2:8d:f8:16:36:38:d5:31:c8:55:
         89:ea:56:69:63:bf:8f:6d:67:04:3f:c2:f8:b2:9c:0b:3d:11:
         7f:fd:9f:96:cd:5d:0f:e8:ff:96:d0:6f:82:d1:f0:3c:11:a8:
         18:03:01:13:c7:e6:21:58:8f:94:31:6b:af:4d:2c:b5:0a:25:
         b0:a2:0b:17:c7:87:2c:29:4f:98:63:8d:82:27:46:69:2f:20:
         8c:64:da:db:e2:74:c7:6c:43:63:d7:65:bd:aa:68:a5:d7:ff:
         56:27:fa:10:4b:a9:1f:19:73:3b:3e:de:2c:50:27:3b:9d:3a:
         99:ee:1b:4f:db:48:6e:7e:30:eb:ff:6d:fb:16:fa:11:10:66:
         a0:de:cc:72:17:8e:c6:bc:93:4d:d4:75:86:f5:de:90:ba:a1:
         dd:a2:ce:43:a4:e1:fc:6f:05:72:b7:8a:a5:58:1f:44:db:33:
         fd:b6:0a:2e:e7:f6:c1:dc:cc:6c:2d:01:42:1e:68:9c:2b:9b:
         ae:3c:3a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----