This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F90CD969D92982F8C5485737B8940FEF1D5D2996.cer
File:                     F90CD969D92982F8C5485737B8940FEF1D5D2996.cer (raw, json)
Hash identifier:          UZttIHk4LCjXgqS+K9Ds+fxyYN3vN7+B+Y+DY35ScaY=
Subject key identifier:   F9:0C:D9:69:D9:29:82:F8:C5:48:57:37:B8:94:0F:EF:1D:5D:29:96
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2977E07836C2982CA5CF7290EF56BD359DFF76BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/F90CD969D92982F8C5485737B8940FEF1D5D2996.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 Dec 2025 11:47:24 +0000
Certificate not after:    Wed 30 Dec 2026 11:52:24 +0000
Subordinate resources:    AS: 267198
                          IP: 45.231.124.0/22
                          IP: 2804:49b4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 Jan 2026 22:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:77:e0:78:36:c2:98:2c:a5:cf:72:90:ef:56:bd:35:9d:ff:76:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 31 11:47:24 2025 GMT
            Not After : Dec 30 11:52:24 2026 GMT
        Subject: CN=F90CD969D92982F8C5485737B8940FEF1D5D2996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:20:de:08:bf:ad:a6:49:1d:05:7c:65:db:9a:
                    92:33:15:49:4a:35:bc:f6:f4:ee:be:e6:73:54:cd:
                    e5:f2:49:ca:1e:8e:97:2e:65:0f:15:f4:a2:d8:1f:
                    0d:cb:97:5d:f7:9e:23:ec:e2:03:79:66:65:17:c3:
                    cd:20:67:21:fd:19:23:e0:59:7f:3a:b8:e6:eb:19:
                    44:3e:2a:23:bf:44:f8:2a:e3:3d:7c:c4:dc:02:3c:
                    91:67:b9:4b:33:6b:c5:60:77:fd:e3:6c:ff:6d:66:
                    32:dd:34:b7:2c:4e:e8:c0:b9:26:6f:28:ec:27:3d:
                    a4:ab:2f:1a:ac:ad:46:6f:56:f0:2c:df:99:9e:fd:
                    3a:2c:c8:06:14:4e:5e:a1:ed:03:d2:ef:28:fe:cd:
                    80:76:e8:fb:da:21:98:4f:33:42:82:3b:2d:7a:9d:
                    b5:2c:a8:83:63:f2:f5:ef:6e:f6:c4:57:3b:43:e2:
                    5a:b5:22:cb:a2:d2:02:a4:c5:e9:12:2d:57:af:7a:
                    d3:51:1a:69:34:91:33:de:fd:f8:25:d6:e6:ae:4f:
                    ae:20:ae:74:6f:f3:82:cc:55:94:be:5c:ab:47:b3:
                    97:b4:48:76:d2:cb:b1:13:bb:03:52:15:9f:c2:87:
                    4a:27:93:ca:81:28:18:6a:82:80:9b:f3:64:c4:2d:
                    48:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:0C:D9:69:D9:29:82:F8:C5:48:57:37:B8:94:0F:EF:1D:5D:29:96
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/F90CD969D92982F8C5485737B8940FEF1D5D2996.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.124.0/22
                IPv6:
                  2804:49b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267198

    Signature Algorithm: sha256WithRSAEncryption
         8f:86:ec:5e:4c:f1:c4:5b:4d:04:d0:9c:8c:5e:3c:3f:1f:78:
         e5:8b:50:df:12:46:e4:fb:46:60:b7:76:ea:1c:54:20:6f:86:
         bd:5f:de:d6:0b:6d:5d:90:f6:32:43:b0:3a:89:82:78:c2:86:
         86:90:bb:26:c4:a4:26:b0:77:ab:06:52:a8:77:4e:95:df:8a:
         ec:60:3f:45:f7:34:44:dd:32:e0:8d:e4:45:fb:30:3f:77:c3:
         7b:f5:a8:0e:85:e7:e2:c6:10:72:2e:5a:74:4e:2a:13:a6:b1:
         89:92:9a:38:c0:36:88:f8:10:f3:22:be:b9:18:b6:8b:7b:55:
         67:71:20:f3:e1:52:44:11:29:a3:76:33:35:4d:1d:5b:ba:84:
         43:78:3e:a2:40:a7:80:39:b0:fd:1f:ca:a1:5c:e2:cb:f0:64:
         c7:1b:e3:3f:0a:94:40:f0:24:c2:d4:13:26:47:d8:82:eb:64:
         c7:48:98:74:82:5e:f7:f8:59:85:a3:5e:17:a9:d1:f2:38:f9:
         be:b3:91:84:2d:8e:a7:aa:a1:79:63:b4:ed:a4:50:d4:bc:40:
         5a:6a:9e:15:19:02:22:bd:ed:2e:08:e9:7b:62:56:fe:3d:c7:
         66:5c:08:7a:6b:78:3e:eb:45:22:8e:13:aa:24:b9:81:65:6c:
         9b:34:83:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----