This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DBB8F652599017C13A5576AE91B2AD338A9DF1EA.cer
File:                     DBB8F652599017C13A5576AE91B2AD338A9DF1EA.cer (raw, json)
Hash identifier:          GRSiy3/xR1ArRrdCqG/dv5fHxZDlQlz0iWztPeJSdxc=
Subject key identifier:   DB:B8:F6:52:59:90:17:C1:3A:55:76:AE:91:B2:AD:33:8A:9D:F1:EA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5E8A4078C88308199022C7E1C6985D208D63A671
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/DBB8F652599017C13A5576AE91B2AD338A9DF1EA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 19 Nov 2025 20:48:21 +0000
Certificate not after:    Wed 18 Nov 2026 20:53:21 +0000
Subordinate resources:    AS: 268353
                          IP: 45.239.52.0/22
                          IP: 2804:4fd8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:8a:40:78:c8:83:08:19:90:22:c7:e1:c6:98:5d:20:8d:63:a6:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 19 20:48:21 2025 GMT
            Not After : Nov 18 20:53:21 2026 GMT
        Subject: CN=DBB8F652599017C13A5576AE91B2AD338A9DF1EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c4:65:49:cf:ec:68:ee:65:ea:c5:af:75:fc:
                    69:40:88:9b:5d:10:ca:b0:b2:c8:e3:0a:7a:7f:63:
                    11:66:f4:dc:78:95:56:8e:4f:dd:16:8a:c0:68:03:
                    bb:47:97:64:8f:0d:45:07:b2:aa:40:19:6d:c9:b7:
                    62:0d:ef:15:d3:88:2d:7c:da:ae:8e:5b:53:a7:b4:
                    ae:38:8b:7b:09:14:fe:2c:2b:61:50:8b:e1:5e:66:
                    3d:15:fb:29:28:4e:9f:c0:fb:66:5d:53:e0:62:59:
                    30:01:31:a1:7e:ac:6f:fa:b0:2d:57:d4:03:24:26:
                    a0:f4:c0:2f:c7:69:d5:36:59:6f:91:85:b5:13:6f:
                    84:e9:e8:d5:02:3a:42:a4:2b:5a:fe:2d:af:15:f0:
                    35:55:f3:9c:25:89:f8:d7:02:62:97:bb:28:cd:ae:
                    49:a7:44:c9:c2:71:84:44:b6:61:9d:26:2b:09:4d:
                    8c:f9:66:86:9e:19:15:84:ee:c0:0c:59:5a:94:4e:
                    00:07:19:a3:af:55:fb:14:e0:36:e5:6b:96:2f:d3:
                    b8:3a:85:d5:52:b2:9b:60:0a:14:dc:f6:cb:34:d8:
                    d4:d2:3e:87:92:27:cb:5a:5a:8b:a3:36:a3:2a:0f:
                    83:18:52:fe:4e:5d:26:1d:28:1f:16:0f:6c:b0:a0:
                    25:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:B8:F6:52:59:90:17:C1:3A:55:76:AE:91:B2:AD:33:8A:9D:F1:EA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/DBB8F652599017C13A5576AE91B2AD338A9DF1EA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.52.0/22
                IPv6:
                  2804:4fd8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268353

    Signature Algorithm: sha256WithRSAEncryption
         2b:b4:7d:d0:28:3b:93:0b:b6:94:04:f9:4b:bd:88:56:fd:79:
         d3:0b:6b:3c:30:b2:9b:37:5a:33:aa:a0:30:2c:cc:23:e8:a3:
         40:1a:aa:22:55:e5:75:9f:c4:f3:73:16:d2:41:48:58:3a:d4:
         63:7e:48:51:9f:c6:47:0b:90:3a:0a:25:40:67:c5:f9:a2:54:
         f5:b7:54:32:88:2c:df:37:86:ed:d2:f6:d3:f6:62:81:7e:52:
         47:d8:03:a8:44:b9:f4:d4:b4:63:ce:7d:8d:e9:cc:27:4a:d0:
         8b:5b:95:bb:62:70:5d:46:a7:7d:70:4c:7e:67:ac:63:66:9b:
         16:2d:8b:e3:17:70:0a:d1:0b:d3:9f:1f:92:4e:61:f8:ae:f3:
         d8:8d:95:22:6f:69:0e:d1:2a:bb:c7:cf:80:3b:eb:32:f2:37:
         39:6c:93:9d:b9:e9:77:a2:6a:1a:b1:8f:a0:ea:b3:b2:8d:0d:
         6b:71:e2:3d:16:0c:27:47:a9:18:84:c0:59:45:a1:21:8f:f5:
         be:d2:83:50:bc:76:2a:b9:9c:d2:57:45:51:85:7f:ba:34:c2:
         6e:96:fc:e4:76:a1:58:cb:2e:57:8c:ca:99:c9:45:ec:a4:6b:
         02:01:1d:03:f2:49:0e:84:84:12:2b:86:66:9e:33:88:90:9d:
         0b:5c:fb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----