This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
File:                     909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer (raw, json)
Hash identifier:          XKK5hxwk9ryEbOuFucI/CRqNShJhkN8UnRup/bNmmfY=
Subject key identifier:   90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       01D4E67133337CDBD335881A567CE2BE9F5322AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 Dec 2025 19:28:02 +0000
Certificate not after:    Wed 09 Dec 2026 19:33:02 +0000
Subordinate resources:    AS: 61592
                          IP: 45.224.216.0/22
                          IP: 45.232.188.0/22
                          IP: 45.234.100.0/22
                          IP: 2804:4c34::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 13:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d4:e6:71:33:33:7c:db:d3:35:88:1a:56:7c:e2:be:9f:53:22:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 10 19:28:02 2025 GMT
            Not After : Dec  9 19:33:02 2026 GMT
        Subject: CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1a:d2:1b:a6:27:83:75:fd:c2:5e:d0:ed:da:
                    7e:07:32:48:a7:86:c7:41:21:61:69:02:86:87:f7:
                    59:f8:ff:eb:71:84:8f:f0:73:1c:32:14:10:ab:c7:
                    68:d2:30:50:b7:68:b5:82:57:b8:99:49:36:b3:86:
                    e4:5a:47:5a:30:50:f1:77:84:3a:34:28:89:84:e6:
                    15:4d:9a:9d:ba:61:38:32:48:74:b7:9a:39:23:a4:
                    02:3b:7d:77:e6:9e:73:f3:04:59:34:19:4d:e5:d2:
                    a5:45:37:cb:f1:b0:7a:47:92:bb:ff:09:67:af:75:
                    eb:d2:ef:4b:13:48:b1:19:2e:1b:40:24:5f:7a:8a:
                    9a:d9:0c:54:8c:88:76:1f:b1:3c:84:d5:49:31:66:
                    b1:c7:cb:84:8d:f3:de:6e:cf:cd:8e:8e:c7:6c:8d:
                    f3:7f:0c:d5:d5:e0:de:1a:1e:57:d5:c9:3e:19:3d:
                    95:5d:05:6e:c5:38:ca:b2:b1:da:81:74:e0:89:e4:
                    76:d8:c0:30:f0:a5:46:f6:61:9e:cf:7d:6f:33:f9:
                    fb:b4:23:c5:21:a1:39:77:d9:98:74:bc:b2:3f:38:
                    22:1e:77:cd:10:2e:c4:15:92:17:69:d9:8f:e5:d6:
                    20:e9:fc:8b:d4:e7:cc:1b:56:21:f4:21:e2:63:ce:
                    98:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.216.0/22
                  45.232.188.0/22
                  45.234.100.0/22
                IPv6:
                  2804:4c34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61592

    Signature Algorithm: sha256WithRSAEncryption
         5d:85:ee:7e:c5:8e:a0:79:e1:c9:43:d9:e6:8b:20:02:f5:1b:
         fe:89:64:22:95:1e:b2:30:b4:44:ee:a4:c9:e5:f2:ac:7d:b1:
         b2:6d:6b:9c:57:22:70:0e:8f:99:9c:ca:92:c2:88:61:28:ac:
         a3:ea:cc:6d:5f:69:e3:c6:fb:6b:d9:72:e3:54:71:2b:8b:23:
         5f:e8:73:5f:26:5d:a4:9e:50:5b:fe:ac:49:4d:97:1a:86:2c:
         5c:fe:6e:68:db:0e:ed:82:67:5a:ba:e0:f1:6e:cc:74:71:2f:
         07:d1:aa:49:b8:40:0c:ba:3f:38:1e:79:8e:71:10:a3:c0:a4:
         b3:b9:65:0d:d6:3d:ab:64:f8:9e:8a:b7:c1:64:d6:ab:03:bf:
         5d:6b:bd:eb:a5:22:18:9e:b1:67:9d:42:5f:12:11:1e:da:20:
         4f:2a:d6:76:63:68:16:1a:e3:3b:33:e3:30:a0:f0:de:5e:35:
         31:65:58:39:4c:93:5a:67:38:d3:fb:11:be:2f:f9:77:cc:fd:
         40:95:32:69:db:4c:42:c5:72:34:f2:a5:72:91:ec:34:a3:11:
         55:10:f5:30:2f:3c:41:de:ed:7b:28:68:9b:71:3e:cf:6f:98:
         b5:39:ef:12:ec:ee:91:cc:52:89:0e:d4:74:28:ed:ef:2c:c9:
         b3:32:cf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:44:03 2025 by rpki-client