This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F5D2B6352BD20C2CFB1F603C718970CA85A166DB.cer
File:                     F5D2B6352BD20C2CFB1F603C718970CA85A166DB.cer (raw, json)
Hash identifier:          9NaWvfxyI271/KFtRb2AvvEAntdhsDxAmpwlDjqCBc4=
Subject key identifier:   F5:D2:B6:35:2B:D2:0C:2C:FB:1F:60:3C:71:89:70:CA:85:A1:66:DB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7484B8E21D16F356A87376049D41F75313CAAB09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/F5D2B6352BD20C2CFB1F603C718970CA85A166DB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Dec 2025 18:17:25 +0000
Certificate not after:    Thu 17 Dec 2026 18:22:25 +0000
Subordinate resources:    AS: 270563
                          IP: 24.152.28.0/22
                          IP: 45.165.75.0/24
                          IP: 2804:6de8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:84:b8:e2:1d:16:f3:56:a8:73:76:04:9d:41:f7:53:13:ca:ab:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 18 18:17:25 2025 GMT
            Not After : Dec 17 18:22:25 2026 GMT
        Subject: CN=F5D2B6352BD20C2CFB1F603C718970CA85A166DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0b:09:84:35:54:fc:9e:26:27:98:bc:12:f9:
                    96:fa:4f:9f:ef:30:f9:b6:2b:61:01:86:d7:dc:13:
                    d8:97:9d:17:df:a8:60:cd:34:44:b8:76:08:37:47:
                    9a:c9:82:7e:f0:46:40:23:00:bd:2f:29:3d:9b:93:
                    f2:59:a0:f2:a4:84:fe:e2:d3:95:e1:a1:2c:4c:2f:
                    b2:d7:06:bc:71:47:fb:4d:13:b8:35:bb:3c:b6:19:
                    cb:50:2a:86:99:96:d5:c9:b5:01:95:5a:9c:44:11:
                    8e:7e:71:9e:9f:18:14:9b:23:39:7f:ae:a7:b3:46:
                    71:86:20:31:e7:68:97:15:c9:e9:5e:1c:9b:bf:32:
                    ef:ee:09:dc:1a:11:02:7b:66:f2:ea:3d:81:e2:67:
                    1d:84:8f:23:f6:b6:30:a5:c5:c5:10:d7:47:15:29:
                    ed:ea:2b:71:f9:4c:4b:25:4d:79:49:cf:29:d4:65:
                    0a:80:80:a1:a5:e1:2e:d4:5e:b5:9b:55:0f:90:51:
                    bd:10:bc:20:78:e4:01:3b:38:bb:d3:f7:4c:d1:b8:
                    9c:92:87:75:44:76:67:90:c9:3c:32:21:d7:f6:76:
                    09:0d:fc:e8:fd:23:e0:e5:65:9a:ca:0a:66:a4:96:
                    ec:d7:ae:51:f8:87:3f:04:88:9f:f9:70:8d:40:35:
                    58:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:D2:B6:35:2B:D2:0C:2C:FB:1F:60:3C:71:89:70:CA:85:A1:66:DB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/F5D2B6352BD20C2CFB1F603C718970CA85A166DB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.28.0/22
                  45.165.75.0/24
                IPv6:
                  2804:6de8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270563

    Signature Algorithm: sha256WithRSAEncryption
         c3:c8:41:6f:a8:4a:86:37:47:b8:12:d9:f9:55:a9:87:5d:4e:
         f3:3d:28:58:12:63:f6:77:b1:cf:f5:65:6a:f9:1e:94:46:1f:
         06:78:bb:51:1e:e4:bc:9a:68:ff:8a:c6:16:96:05:c5:6f:25:
         8f:8c:d4:0c:9d:5c:d9:0a:6f:2b:05:ff:d6:bb:e2:bc:e5:a9:
         e7:c5:94:aa:b4:0e:e3:c5:3a:9f:9c:09:a7:43:24:b6:c7:8f:
         42:9f:77:1e:88:dd:7c:3d:97:04:b5:72:c9:61:d9:ef:bf:1a:
         98:81:2c:ed:61:42:8f:ee:96:b3:a1:90:4d:0e:7c:77:3d:00:
         d0:fd:ab:82:c6:a0:c3:7e:79:4b:07:9c:97:3b:42:46:3a:4f:
         55:43:af:43:20:b5:59:43:7e:54:a2:98:3f:cb:1f:62:51:84:
         f1:48:e3:4a:62:2f:42:a0:52:e0:16:ea:5b:37:dd:59:15:df:
         d9:a7:64:7f:6f:8c:56:e4:f8:32:60:ec:a6:9c:13:36:12:9f:
         dd:44:59:43:aa:59:84:c7:23:a9:6c:bb:06:ad:9a:f6:e8:24:
         84:82:b4:dd:ce:80:92:e9:2f:15:5a:ef:32:cd:99:f5:28:e1:
         e4:bb:46:27:4a:05:91:e4:ad:52:f4:a9:af:6a:fb:ce:e4:3a:
         49:5d:60:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----