This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.cer
File:                     F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.cer (raw, json)
Hash identifier:          TbAegR2TIECn+TiruD3oG6H8t48ZyeF+mZVm22Y5pHw=
Subject key identifier:   F0:90:C1:B1:E7:CE:0D:D0:BC:17:FD:70:96:B3:9B:80:E8:B2:53:1C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       397C69925ADA5738A767D169121455CD45C72F6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Dec 2025 17:58:49 +0000
Certificate not after:    Tue 22 Dec 2026 18:03:49 +0000
Subordinate resources:    AS: 262625
                          IP: 177.86.80.0/21
                          IP: 2804:4968::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 30 Dec 2025 07:58:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:7c:69:92:5a:da:57:38:a7:67:d1:69:12:14:55:cd:45:c7:2f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 23 17:58:49 2025 GMT
            Not After : Dec 22 18:03:49 2026 GMT
        Subject: CN=F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6b:2e:d4:6b:35:65:97:23:e8:e1:17:71:be:
                    07:50:66:75:f6:65:eb:f9:80:42:3d:e6:8d:a0:c3:
                    2a:49:4c:ad:5f:7f:fb:36:79:e6:3d:da:02:79:99:
                    66:40:f7:88:31:26:1a:81:de:b1:f2:15:b1:d5:fb:
                    dc:78:54:28:01:2c:28:42:84:c6:47:68:aa:cf:70:
                    b3:2a:02:36:ea:b3:32:c2:98:f4:34:31:40:5b:d0:
                    c4:be:c3:3a:e9:8c:2f:5d:4b:8e:72:f0:0e:6a:1a:
                    60:1a:80:39:05:a6:17:53:df:ec:52:21:ad:59:17:
                    b0:a9:b7:2e:d5:d8:f0:2c:0b:b0:c2:2d:d1:0b:7f:
                    04:dc:8e:92:c7:33:2b:64:4d:cc:05:ce:4d:25:24:
                    59:03:77:98:f2:4e:4c:e0:d4:9d:c3:59:5f:ab:f0:
                    d5:ba:ec:f4:39:44:4c:14:56:a5:84:4a:4c:dd:39:
                    a4:94:68:c5:47:64:31:46:48:ea:c2:08:97:d3:75:
                    6b:62:e1:4f:26:27:6a:1b:d5:a3:85:73:6e:69:07:
                    2b:5d:80:09:7c:32:a9:2c:a1:f8:9e:7d:73:f7:6a:
                    41:c3:a4:8d:c5:cd:32:c3:db:35:53:22:f4:b3:51:
                    2b:0f:b2:42:7f:44:d0:eb:38:c7:4d:7b:4b:c8:4f:
                    74:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F0:90:C1:B1:E7:CE:0D:D0:BC:17:FD:70:96:B3:9B:80:E8:B2:53:1C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.80.0/21
                IPv6:
                  2804:4968::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262625

    Signature Algorithm: sha256WithRSAEncryption
         8e:0e:db:d4:52:70:ad:c1:d9:e0:95:3c:22:c7:c6:d8:1d:79:
         a0:4d:9a:f4:da:85:99:d6:d2:5f:8c:3b:9c:b9:16:1f:32:17:
         f3:cc:13:d1:3a:fb:dc:4c:9c:06:7b:dd:06:28:06:a6:42:aa:
         6c:89:d6:ed:30:a9:b2:71:7d:32:46:38:ac:bc:7f:53:67:42:
         df:4b:df:a1:93:29:a8:14:cb:66:3f:f8:a2:73:87:86:d4:68:
         f0:ac:8f:d3:c4:65:e1:7d:89:3b:c2:5a:cf:c4:84:1b:0d:42:
         4d:66:31:63:39:67:6a:4c:60:6f:52:0b:92:b2:c6:f5:b9:80:
         b7:bd:85:a3:bb:43:bc:53:bc:5b:a3:f4:74:3f:2c:b7:42:ec:
         57:9c:97:08:85:34:4c:9c:f3:fc:7f:1d:c7:6a:93:29:be:32:
         f5:ef:a1:56:62:b9:f1:3e:05:84:2e:ef:ae:b1:a7:54:c5:2c:
         27:2d:22:b8:9d:72:61:14:c3:03:8f:8b:98:67:77:ed:45:f5:
         92:80:fc:92:7f:fd:79:0e:88:7f:1a:4a:2d:4e:83:cf:9d:f0:
         1b:59:c5:ed:ce:2c:b0:1e:d9:7f:57:a7:21:d1:a1:dd:e9:fe:
         f0:06:c8:1c:70:19:eb:96:3f:1f:56:59:ff:30:45:22:28:e4:
         69:6a:82:80
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUOXxpklraVzinZ9FpEhRVzUXHL2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEyMjMxNzU4NDlaFw0yNjEyMjIxODAzNDlaMDMxMTAvBgNV
BAMTKEYwOTBDMUIxRTdDRTBERDBCQzE3RkQ3MDk2QjM5QjgwRThCMjUzMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyay7UazVllyPo4RdxvgdQZnX2
Zev5gEI95o2gwypJTK1ff/s2eeY92gJ5mWZA94gxJhqB3rHyFbHV+9x4VCgBLChC
hMZHaKrPcLMqAjbqszLCmPQ0MUBb0MS+wzrpjC9dS45y8A5qGmAagDkFphdT3+xS
Ia1ZF7Cpty7V2PAsC7DCLdELfwTcjpLHMytkTcwFzk0lJFkDd5jyTkzg1J3DWV+r
8NW67PQ5REwUVqWESkzdOaSUaMVHZDFGSOrCCJfTdWti4U8mJ2ob1aOFc25pBytd
gAl8MqksofiefXP3akHDpI3FzTLD2zVTIvSzUSsPskJ/RNDrOMdNe0vIT3SvAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTwkMGx584N0LwX
/XCWs5uA6LJTHDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzlT
azVtY25OOUphc0JrdXNiVXkyRkdnc1EzUm9Db3A5cDNVdnBya0hmQ2MvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c5
U2s1bWNuTjlKYXNCa3VzYlV5MkZHZ3NRM1JvQ29wOXAzVXZwcmtIZkNjLzAvRjA5
MEMxQjFFN0NFMEREMEJDMTdGRDcwOTZCMzlCODBFOEIyNTMxQy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQDsVZQMA0EAgACMAcDBQAoBEloMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQB4TANBgkqhkiG9w0BAQsFAAOCAQEAjg7b1FJwrcHZ4JU8
IsfG2B15oE2a9NqFmdbSX4w7nLkWHzIX88wT0Tr73EycBnvdBigGpkKqbInW7TCp
snF9MkY4rLx/U2dC30vfoZMpqBTLZj/4onOHhtRo8KyP08Rl4X2JO8Jaz8SEGw1C
TWYxYzlnakxgb1ILkrLG9bmAt72Fo7tDvFO8W6P0dD8st0LsV5yXCIU0TJzz/H8d
x2qTKb4y9e+hVmK58T4FhC7vrrGnVMUsJy0iuJ1yYRTDA4+LmGd37UX1koD8kn/9
eQ6IfxpKLU6Dz53wG1nF7c4ssB7Zf1enIdGh3en+8AbIHHAZ65Y/H1ZZ/zBFIijk
aWqCgA==
-----END CERTIFICATE-----