This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer
File:                     F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer (raw, json)
Hash identifier:          5F2UuAs9E8wr+Z/2OfFtn7m+S3lhLixzocaCNc1ojSQ=
Subject key identifier:   F9:28:CC:C2:3B:37:F2:91:D7:8F:3C:89:91:CE:9B:D3:B5:FE:BB:DC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6AE993AD4936003E26C15682838EC52988AAFD80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Nov 2025 20:09:56 +0000
Certificate not after:    Tue 24 Nov 2026 20:14:56 +0000
Subordinate resources:    AS: 269444
                          IP: 45.186.164.0/22
                          IP: 2804:64b8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e9:93:ad:49:36:00:3e:26:c1:56:82:83:8e:c5:29:88:aa:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 25 20:09:56 2025 GMT
            Not After : Nov 24 20:14:56 2026 GMT
        Subject: CN=F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:49:54:77:0f:d5:ff:d1:69:4b:3d:38:05:6f:
                    89:56:a2:21:fc:55:37:a8:0a:95:72:f2:8f:b3:4f:
                    8b:65:91:1e:87:1e:d2:99:88:cc:c3:9c:2f:80:ab:
                    89:37:cf:0e:71:30:fe:37:93:0b:b1:1a:0e:bb:6a:
                    33:dc:e3:84:e3:03:d9:5d:05:44:84:08:84:4b:91:
                    f6:1b:f5:80:f0:0c:af:37:25:a0:58:10:f8:c0:e6:
                    2f:ac:69:71:20:ee:14:56:b5:78:3c:8d:f0:23:c2:
                    5e:bd:64:1b:fa:20:f2:2b:ea:20:d7:c5:63:ab:75:
                    8b:57:b9:69:5e:5e:98:81:b2:91:43:a4:bd:dc:0d:
                    a1:25:d4:f6:cc:42:67:a9:c7:56:ec:f0:68:7a:13:
                    dc:c2:59:8d:ae:39:75:e1:b1:fe:a5:59:2b:5a:f7:
                    84:54:75:ca:a9:45:64:47:88:86:c3:1b:6a:51:52:
                    74:5e:25:32:ae:46:9e:7e:f6:56:4d:3a:9e:2f:bc:
                    ed:2a:c9:a7:7b:5b:fd:4a:d8:59:06:55:b6:48:21:
                    b1:3c:c8:66:cb:d3:82:32:fb:41:30:e1:e6:11:ab:
                    1e:13:27:47:03:bb:8f:7f:51:a7:1e:d5:03:5a:bf:
                    f7:ae:f5:cb:22:4a:e5:18:3f:d4:a9:43:7a:7c:ff:
                    b9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:28:CC:C2:3B:37:F2:91:D7:8F:3C:89:91:CE:9B:D3:B5:FE:BB:DC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.164.0/22
                IPv6:
                  2804:64b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269444

    Signature Algorithm: sha256WithRSAEncryption
         68:85:78:bf:8a:79:76:ec:42:a6:2c:64:21:67:21:b1:c3:98:
         05:88:b6:0c:2d:c0:48:09:47:4f:0a:55:85:aa:f2:58:e6:a4:
         d0:ee:31:e6:88:6d:2b:9c:ba:84:2c:43:d7:e8:6a:2d:24:d1:
         c1:25:47:14:ba:db:19:04:f9:d8:d0:46:7a:24:9b:9a:f0:44:
         9d:db:1a:94:59:1f:2e:6a:db:96:e5:ed:23:56:a7:3f:10:8b:
         18:e2:ad:d3:4d:1f:61:63:0e:9b:4e:69:96:05:ff:b0:85:9f:
         ba:f7:fc:bc:88:79:8b:37:d6:b8:bd:03:0f:5d:42:2a:30:21:
         69:cf:21:13:90:ae:2b:fd:cc:6d:c4:dc:85:68:cc:8d:fb:14:
         81:8c:c7:11:0e:a8:01:b0:48:13:95:ee:48:65:e6:41:db:4c:
         38:17:42:56:2f:ce:80:c8:1d:8a:0e:db:9a:17:f4:dd:27:aa:
         d6:a3:93:15:4f:c3:57:89:ef:e8:92:33:0a:99:9a:24:7a:3e:
         fb:d3:d0:1a:fd:f7:2f:7b:59:dc:bb:a5:d0:b3:21:7a:4b:09:
         d2:67:7a:a5:8a:7e:a7:a1:1f:17:3f:fa:d1:60:0f:fd:ca:22:
         d6:93:5f:46:d1:98:8b:fb:76:21:d1:48:f3:ef:86:6f:22:63:
         f6:3b:73:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----