This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F153C6C516AC81BC29F58C07FE9D2985ACF768BC.cer
File:                     F153C6C516AC81BC29F58C07FE9D2985ACF768BC.cer (raw, json)
Hash identifier:          krS1ZmrSrgjSXWZ8LfpneMfA3h3bfemQnpeCY2mX3p4=
Subject key identifier:   F1:53:C6:C5:16:AC:81:BC:29:F5:8C:07:FE:9D:29:85:AC:F7:68:BC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6D06AAFCCC6AC07D922C35E539D7B7571A41646E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/F153C6C516AC81BC29F58C07FE9D2985ACF768BC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Nov 2025 20:29:38 +0000
Certificate not after:    Thu 12 Nov 2026 20:34:38 +0000
Subordinate resources:    AS: 267942
                          IP: 45.166.4.0/22
                          IP: 2804:5590::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:06:aa:fc:cc:6a:c0:7d:92:2c:35:e5:39:d7:b7:57:1a:41:64:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 13 20:29:38 2025 GMT
            Not After : Nov 12 20:34:38 2026 GMT
        Subject: CN=F153C6C516AC81BC29F58C07FE9D2985ACF768BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f0:55:a6:43:08:6e:3a:1d:9b:62:ae:1e:d3:
                    e3:9d:60:c5:b2:00:f6:d8:5f:b6:54:13:49:16:77:
                    28:3d:6f:e1:11:17:92:aa:87:3d:8b:0a:28:8a:70:
                    e4:cf:82:47:69:3c:3d:5b:df:61:2c:d8:e8:cc:48:
                    51:72:4e:43:36:74:9a:62:f5:2b:04:ae:a3:4b:67:
                    7c:8d:c6:b4:3c:db:f2:2b:7e:ad:10:2b:c8:e7:80:
                    05:d6:36:f8:5d:43:1b:f1:e2:79:18:b0:c8:39:0e:
                    32:61:02:8c:cd:00:ba:cd:2f:65:e4:f6:7f:22:59:
                    ec:44:b7:95:ca:cd:1f:a2:9d:a7:70:ff:a2:3d:30:
                    53:c9:1e:0d:37:78:6a:b5:e0:1b:e9:69:6c:2b:60:
                    d4:85:ce:60:5e:a8:33:a2:4a:de:e3:74:56:5f:ac:
                    d0:fc:1e:0d:95:d9:45:2d:14:62:2a:7a:e7:70:a4:
                    5b:cb:e4:e4:a3:51:44:0c:97:76:1c:70:75:16:23:
                    13:1e:94:0b:06:02:3f:50:15:35:cd:d4:1d:5a:ec:
                    83:9b:5d:eb:e5:ad:f8:46:d7:06:a2:1d:83:8e:33:
                    bb:ab:9d:df:03:b5:48:7d:2d:cb:d7:ed:b4:ef:e7:
                    ba:04:a0:ea:14:8e:7f:73:6f:3a:fd:0a:1c:1c:32:
                    64:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:53:C6:C5:16:AC:81:BC:29:F5:8C:07:FE:9D:29:85:AC:F7:68:BC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/F153C6C516AC81BC29F58C07FE9D2985ACF768BC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.4.0/22
                IPv6:
                  2804:5590::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267942

    Signature Algorithm: sha256WithRSAEncryption
         6f:d5:3d:73:21:63:3f:05:9e:2a:26:b6:eb:06:c8:3d:29:d5:
         f7:a2:82:f4:10:b6:06:b7:80:be:3e:02:b4:99:29:93:12:70:
         f5:81:3d:21:70:3f:61:7b:1a:b9:c6:75:bb:cb:c9:68:aa:21:
         18:64:48:ae:ac:ae:99:48:23:f4:52:41:4e:40:6e:e5:06:02:
         87:ff:88:55:b4:54:f8:c8:a9:e1:10:92:da:e5:18:d8:48:ed:
         2c:c5:bf:c7:3d:f1:3d:bd:ae:5e:65:45:f4:48:dc:21:62:eb:
         05:69:f9:dc:2f:3c:86:78:43:2a:fd:b9:e6:5c:3c:0f:52:59:
         5e:b0:5d:be:6c:99:91:96:57:89:6e:09:6c:f8:fc:4e:c8:c0:
         ee:fe:b1:c0:dd:6b:aa:c5:d3:2b:b1:01:e6:6b:89:3a:34:5d:
         d9:12:dc:fe:9b:46:a0:22:87:2e:d3:b8:58:1e:41:8b:a2:47:
         4b:ee:f7:7f:d5:b9:6a:2d:d3:b3:a8:43:55:ce:7f:63:89:e4:
         52:1b:a9:07:8e:6c:5a:b7:7b:a0:0d:c3:e1:f2:39:49:d9:6b:
         24:65:64:95:89:9f:b8:eb:9b:3a:7e:e4:d6:85:ab:a4:8f:79:
         d5:52:0c:bb:54:57:d5:26:29:dd:ea:26:13:9f:e6:50:26:ab:
         15:1b:a6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----