This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer
File:                     FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer (raw, json)
Hash identifier:          9T+k/AYiWUu/9q7TOKj8j2gsQEStWBNuEAXtNOvYPdI=
Subject key identifier:   FB:21:CF:40:F3:C5:FE:A3:5E:AC:2F:4C:CE:BD:27:AE:4D:AC:24:78
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       77AD499182F4F447341D67B26401BDA6D66CE4E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 Dec 2025 20:54:42 +0000
Certificate not after:    Tue 15 Dec 2026 20:59:42 +0000
Subordinate resources:    AS: 268678
                          IP: 45.165.148.0/22
                          IP: 2804:54ec::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 03:16:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ad:49:91:82:f4:f4:47:34:1d:67:b2:64:01:bd:a6:d6:6c:e4:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 16 20:54:42 2025 GMT
            Not After : Dec 15 20:59:42 2026 GMT
        Subject: CN=FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:11:5f:a3:83:ac:53:9f:51:83:27:2f:a3:b3:
                    25:8e:01:a5:7b:4a:d3:cb:c9:65:06:c5:60:18:22:
                    f6:13:b4:91:7e:7b:28:7e:b9:63:3a:a3:70:2c:4c:
                    84:e6:79:56:d3:59:9e:e0:86:0e:43:6c:32:f1:49:
                    88:19:cb:e0:4f:4c:91:d7:a7:dc:9d:d8:81:97:4e:
                    39:3a:ae:f2:95:a9:b7:a1:f8:43:91:e9:d4:43:3a:
                    a1:7a:1b:7d:5f:58:1d:49:da:12:8c:f5:e0:4f:4a:
                    2e:a5:2c:35:f8:3a:02:a4:e7:dd:aa:d6:bc:ab:24:
                    fd:db:0c:11:de:18:2b:ec:46:40:4b:65:5a:24:fe:
                    5e:6f:49:13:f3:5f:af:22:3a:0c:72:c8:17:39:3d:
                    aa:44:24:61:66:2b:9b:61:71:92:e7:d8:bc:1f:a5:
                    55:97:3e:5f:59:50:3c:86:83:88:49:6e:7e:dc:12:
                    c7:1a:3a:60:a8:9f:f9:ed:99:83:d2:46:10:37:46:
                    fc:09:3c:6c:ce:7c:fc:c0:24:87:d1:8d:24:f6:ea:
                    51:a1:68:9a:df:1b:26:71:77:7b:ad:3f:32:cc:61:
                    e6:ed:c0:8a:f1:22:cf:a9:ac:cc:da:89:0d:73:9f:
                    7b:a5:0a:de:f7:4f:d5:eb:71:f5:4e:1c:bf:79:58:
                    64:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:21:CF:40:F3:C5:FE:A3:5E:AC:2F:4C:CE:BD:27:AE:4D:AC:24:78
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.148.0/22
                IPv6:
                  2804:54ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268678

    Signature Algorithm: sha256WithRSAEncryption
         86:b0:19:69:f9:2a:e0:05:97:22:94:36:ff:86:e2:84:0a:d4:
         d0:99:68:f8:95:bb:2b:9e:31:89:8a:14:13:c5:b9:2c:6c:a4:
         27:a7:3e:e2:35:b7:e1:94:a6:56:ef:a1:f8:0c:43:cf:71:16:
         26:37:a1:a8:b8:76:6b:6f:43:46:9d:be:54:87:ad:5d:a8:99:
         64:59:dd:d8:c7:a9:22:d4:5f:d7:3d:bc:e8:d3:09:67:4e:ee:
         c3:60:f6:a8:a4:11:1f:1f:15:2a:28:fc:84:6f:17:0d:62:b1:
         66:92:eb:8b:a5:16:5e:0d:22:51:84:db:55:c5:18:23:24:c2:
         a3:7c:d7:e6:87:36:4b:9c:89:6c:12:30:5b:4a:9d:dc:f8:7e:
         06:c7:7d:76:87:d6:6a:ee:95:1e:32:50:e4:73:a6:51:f6:b8:
         4a:12:96:23:d6:a3:af:ba:c0:a0:0b:3b:78:9d:23:96:c0:a8:
         89:1f:3e:d8:21:05:de:52:18:60:c8:b5:3a:28:a9:09:e8:03:
         d8:4b:b7:90:df:d6:27:24:16:09:5d:ed:40:47:57:46:a7:19:
         de:4a:96:e5:a7:9a:d4:00:6b:2f:b7:0a:ef:7f:5f:49:df:c1:
         bc:c8:8b:21:c3:2e:2d:c0:99:cd:81:d2:8c:96:1e:a4:af:3f:
         8f:a5:2c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----