This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9070D2E187CE3F862AB9E78E2A420A02C3525244.cer
File:                     9070D2E187CE3F862AB9E78E2A420A02C3525244.cer (raw, json)
Hash identifier:          tbv6rBgqonsQKga6f8t7DkCh3r0r2/j3rr/BdDa4GqM=
Subject key identifier:   90:70:D2:E1:87:CE:3F:86:2A:B9:E7:8E:2A:42:0A:02:C3:52:52:44
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5F93C4D6A026A956EE32C69C0294FBE83BAB375F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/9070D2E187CE3F862AB9E78E2A420A02C3525244.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Dec 2025 05:43:27 +0000
Certificate not after:    Fri 18 Dec 2026 05:48:27 +0000
Subordinate resources:    AS: 61625
                          IP: 2804:9524::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:93:c4:d6:a0:26:a9:56:ee:32:c6:9c:02:94:fb:e8:3b:ab:37:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 19 05:43:27 2025 GMT
            Not After : Dec 18 05:48:27 2026 GMT
        Subject: CN=9070D2E187CE3F862AB9E78E2A420A02C3525244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:55:42:83:a6:c7:27:d9:96:d8:3b:d4:60:62:
                    8a:f2:75:b0:24:5d:14:9e:6a:f9:b5:9d:bc:4a:97:
                    7f:b2:43:dd:9f:ab:34:8d:8e:c4:a6:b2:83:28:40:
                    43:90:00:4c:99:ad:70:e2:0c:0c:64:13:17:44:81:
                    c8:42:7a:a9:2a:4b:32:c0:45:e5:11:a6:a9:54:2b:
                    d6:74:39:a4:9f:3f:c7:15:a1:79:eb:9a:99:a8:d2:
                    22:08:8e:2b:d5:0c:50:5c:1a:91:fa:57:58:24:13:
                    d8:bf:b5:33:2d:8d:fb:0e:2c:28:12:d4:0e:de:83:
                    48:f3:7d:e2:e8:c3:de:38:90:08:ce:3e:fd:ec:ba:
                    05:db:15:42:ad:c9:2a:cc:89:9b:ae:a7:6b:88:25:
                    90:bb:be:0c:87:f3:7c:2d:f9:41:91:68:4a:27:08:
                    26:c1:20:90:61:88:b9:3c:f2:e5:aa:82:89:b1:5a:
                    f0:95:2b:37:f8:e8:1f:f0:a5:6e:1c:2e:2e:7d:d1:
                    a3:e5:6c:53:9b:7c:c2:ca:90:54:c3:64:9e:69:75:
                    d0:76:14:17:76:4c:a8:08:54:fe:b4:0f:52:55:f3:
                    12:37:64:47:2f:d4:58:21:74:9f:50:1a:0c:62:31:
                    03:78:14:0e:62:2b:4d:89:50:fa:fc:da:a2:c8:0c:
                    c0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                90:70:D2:E1:87:CE:3F:86:2A:B9:E7:8E:2A:42:0A:02:C3:52:52:44
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/9070D2E187CE3F862AB9E78E2A420A02C3525244.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9524::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61625

    Signature Algorithm: sha256WithRSAEncryption
         3b:a9:ab:6b:8d:61:b8:e0:b2:fa:d9:bc:b0:ad:d5:da:68:d0:
         b7:b2:f5:6c:c3:0a:2d:39:60:35:c7:d7:fd:7a:39:e0:bc:6c:
         78:7e:d2:62:37:98:f6:e8:e1:9e:c6:03:af:34:92:01:fb:5d:
         7d:3b:a2:45:42:ff:a9:1c:2d:1f:86:35:b5:dc:fa:d5:3c:42:
         2c:47:fc:e4:5e:c0:eb:5b:5a:bb:5d:7f:1c:9a:a5:38:53:8e:
         4f:b9:74:b9:73:4f:ec:06:cd:7b:a2:78:a6:fe:ab:1f:69:96:
         2e:46:ff:45:db:7d:9e:87:7b:26:86:f0:e4:dc:58:9d:bb:48:
         2b:76:4d:20:42:84:27:d3:a7:d0:a1:a5:7c:20:62:84:34:2b:
         d2:ea:ab:42:ec:f5:d1:24:00:43:12:7e:df:e8:c3:7b:9e:bf:
         1c:25:1e:03:1d:90:80:42:5a:1c:41:d2:c8:cd:3a:d5:67:54:
         ce:22:c5:b2:32:f9:ca:0c:3e:96:d3:d2:83:fb:db:fd:28:f9:
         0d:30:f4:a0:1d:82:7f:03:34:c1:39:4d:81:f8:4d:6a:b5:68:
         96:a1:bd:e7:a8:7b:ff:fc:75:04:9e:9f:ec:83:43:d1:42:93:
         18:cd:b7:08:1e:60:64:d5:5f:e8:7e:73:ba:4f:27:8e:11:8a:
         f6:0e:3b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:10:41 2025 by rpki-client