This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/923B6DB37A61C15E688585893A0E787B6D40E8CC.cer
File:                     923B6DB37A61C15E688585893A0E787B6D40E8CC.cer (raw, json)
Hash identifier:          DUQOnipaD7A5LVIpW/Q/CWwI6jcBC7+9krHE2dkhEWs=
Subject key identifier:   92:3B:6D:B3:7A:61:C1:5E:68:85:85:89:3A:0E:78:7B:6D:40:E8:CC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5F6D6BFB0C20BA9A8FBB55E9A2437579B3F965FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DCtLvg14Xx7KHadnJpryjuqwdFqxUADjdjj9xAnYS4PL/0/923B6DB37A61C15E688585893A0E787B6D40E8CC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DCtLvg14Xx7KHadnJpryjuqwdFqxUADjdjj9xAnYS4PL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Dec 2025 18:04:20 +0000
Certificate not after:    Thu 17 Dec 2026 18:09:20 +0000
Subordinate resources:    AS: 270941
                          IP: 168.196.228.0/22
                          IP: 2804:73d8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:6d:6b:fb:0c:20:ba:9a:8f:bb:55:e9:a2:43:75:79:b3:f9:65:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 18 18:04:20 2025 GMT
            Not After : Dec 17 18:09:20 2026 GMT
        Subject: CN=923B6DB37A61C15E688585893A0E787B6D40E8CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:92:97:c3:f4:a7:2a:da:16:c4:b3:d8:c2:63:
                    71:5a:74:5f:dd:cd:13:1f:a8:36:82:70:e7:62:da:
                    5c:31:b5:12:4b:c8:d5:ee:76:78:63:a4:a9:f8:15:
                    89:36:40:14:d4:9f:ab:da:a8:17:7a:5f:a4:93:7f:
                    34:4d:8d:91:08:b3:af:9e:ed:66:ad:be:95:3c:41:
                    06:56:28:d6:98:01:a5:ea:ad:d9:0f:ca:47:6f:fe:
                    94:a1:7f:73:00:5b:df:84:88:31:e4:2c:36:79:2a:
                    79:ab:33:6b:29:22:7e:ce:06:04:e3:f4:63:8b:70:
                    3b:02:3c:03:92:bb:b0:e2:91:4e:ad:54:68:f5:9a:
                    8f:d3:20:0f:11:e3:36:95:c8:fd:6f:62:bb:c9:42:
                    3a:f7:bd:a7:0d:13:e6:02:a6:45:fe:7c:dc:69:ed:
                    39:ae:d7:96:97:59:91:ca:4c:b2:15:16:d5:05:37:
                    a7:a8:3b:8b:b1:13:44:3b:b5:83:10:31:7d:62:0c:
                    dc:cb:3d:33:c4:ba:9c:14:6e:bf:8a:67:cc:a5:34:
                    33:c5:0e:28:8b:f4:a1:7e:e4:72:57:e9:04:c1:bb:
                    78:5c:46:71:3a:02:70:e2:e3:c0:12:4c:97:eb:e2:
                    13:34:92:9c:83:14:2f:bd:80:36:e1:5e:1e:d2:73:
                    03:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                92:3B:6D:B3:7A:61:C1:5E:68:85:85:89:3A:0E:78:7B:6D:40:E8:CC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DCtLvg14Xx7KHadnJpryjuqwdFqxUADjdjj9xAnYS4PL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DCtLvg14Xx7KHadnJpryjuqwdFqxUADjdjj9xAnYS4PL/0/923B6DB37A61C15E688585893A0E787B6D40E8CC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.228.0/22
                IPv6:
                  2804:73d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270941

    Signature Algorithm: sha256WithRSAEncryption
         9b:43:25:61:52:da:47:9b:6d:5f:56:73:b5:f7:c2:6d:63:f8:
         cd:40:2a:15:eb:b0:59:5e:2b:15:e8:e0:4f:a3:e2:06:6b:e9:
         5d:53:a0:ae:06:df:98:ad:aa:f4:69:a3:19:62:92:6c:f4:41:
         8d:27:a5:2d:b6:c5:50:bf:7a:f7:dd:53:a0:d1:cc:4f:eb:1d:
         f9:6e:0e:5f:01:16:50:07:3f:b3:f4:c3:13:3c:99:fe:3a:8f:
         d1:f6:32:13:a3:78:b8:d7:d4:f0:e4:59:f0:ac:4d:c6:d9:aa:
         fc:41:86:f3:e6:9d:28:09:41:15:a2:01:ce:07:90:fd:09:fe:
         02:21:6b:12:aa:3e:59:cc:98:d3:69:be:33:3f:32:37:c1:57:
         ba:79:44:ae:2e:ad:f5:f4:fb:16:0b:58:59:49:7f:f5:04:ab:
         02:91:2e:b5:df:9f:8d:7f:da:1c:6e:0d:2d:d3:4b:b8:83:a3:
         f7:7a:20:da:dd:6a:e8:ef:15:6c:d6:e3:9b:da:7c:12:a0:c0:
         d8:df:35:53:03:72:99:f0:5e:a3:56:4c:93:08:ce:a3:74:fc:
         0d:f1:de:d4:c9:a5:24:f5:59:5f:cb:f6:4f:c2:0a:85:19:24:
         9c:bc:62:88:d0:e4:46:5f:9d:55:d4:66:fb:9c:82:bc:19:cb:
         c7:79:4a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----