This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/69FB575E9B82912339A5739ABEEBB97A5C354E9B.cer
File:                     69FB575E9B82912339A5739ABEEBB97A5C354E9B.cer (raw, json)
Hash identifier:          ey7LsJqHiISa/yxNS5lTUI9PRKvvsczcwaaMN9L9VGM=
Subject key identifier:   69:FB:57:5E:9B:82:91:23:39:A5:73:9A:BE:EB:B9:7A:5C:35:4E:9B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3530274B67F00DE1A76C39A1A3B97BA8F6D0F57F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/2/69FB575E9B82912339A5739ABEEBB97A5C354E9B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Dec 2025 05:55:17 +0000
Certificate not after:    Fri 11 Dec 2026 06:00:17 +0000
Subordinate resources:    AS: 52539
                          IP: 179.106.176.0/20
                          IP: 2804:3404::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 22:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:30:27:4b:67:f0:0d:e1:a7:6c:39:a1:a3:b9:7b:a8:f6:d0:f5:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 12 05:55:17 2025 GMT
            Not After : Dec 11 06:00:17 2026 GMT
        Subject: CN=69FB575E9B82912339A5739ABEEBB97A5C354E9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7b:b6:79:4e:a7:dd:aa:45:8d:92:0f:73:88:
                    43:93:0f:02:9f:a1:24:77:0a:e5:6a:62:98:32:95:
                    83:3c:ec:40:f4:66:a0:c3:48:a7:c5:49:a4:a7:56:
                    a5:b8:5c:09:d2:c1:cd:79:33:e9:70:18:de:70:f2:
                    c0:21:3b:25:92:2f:5c:76:ff:4c:0c:d9:bb:b3:79:
                    af:a2:b7:80:fa:fd:6d:0d:95:af:fd:69:4f:c3:de:
                    68:78:6f:53:9c:2e:c5:28:3a:72:6e:2e:a6:0d:ef:
                    17:b6:94:ba:57:39:93:c3:2c:41:6f:59:87:00:05:
                    50:d9:af:cd:c5:8d:8e:1d:13:6b:6a:d4:c4:34:6c:
                    26:da:38:59:21:b2:6d:7f:c7:d5:39:37:1f:f3:ec:
                    65:8f:85:f1:d3:b8:ca:b8:3d:9c:b9:3a:cf:0d:92:
                    02:65:59:b7:88:e0:f7:ff:df:fc:61:1f:80:0b:7d:
                    0d:39:12:39:51:37:dd:c9:f2:ff:75:d7:8d:30:0c:
                    b2:f3:40:68:66:29:91:ff:fb:14:8d:70:81:b4:32:
                    58:ab:c0:89:a7:7c:4d:fb:53:69:89:7b:1c:f5:ca:
                    3d:58:c2:25:61:53:17:9f:69:07:92:0f:c6:03:9a:
                    df:09:b3:a4:d7:d9:40:41:75:96:92:af:b5:85:d3:
                    d3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:FB:57:5E:9B:82:91:23:39:A5:73:9A:BE:EB:B9:7A:5C:35:4E:9B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/2/69FB575E9B82912339A5739ABEEBB97A5C354E9B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.176.0/20
                IPv6:
                  2804:3404::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52539

    Signature Algorithm: sha256WithRSAEncryption
         18:48:a4:0d:70:14:6d:26:01:85:08:f6:b0:bf:f0:5a:e4:5e:
         ab:09:7c:b3:cb:b6:9d:bb:ec:06:07:3b:2d:62:88:e4:db:42:
         a5:db:d1:c5:48:8f:5a:82:86:91:6f:77:79:a8:7b:5b:47:e1:
         b1:aa:b3:be:51:d6:d5:73:a0:dd:3c:3b:8a:75:4c:48:df:60:
         43:d1:9a:02:23:bc:a8:80:39:3f:5d:27:f9:38:4a:a9:78:c3:
         ca:03:53:b7:bf:87:c8:10:bb:b6:fb:56:74:29:c6:36:81:72:
         ac:8d:13:69:bb:70:da:e2:a7:c9:a2:99:f4:dd:81:99:6f:90:
         93:d1:e9:c2:08:e0:52:b2:28:f2:19:59:c7:dd:2b:54:8d:62:
         84:14:31:57:21:a1:95:3f:f6:80:ed:6d:a2:11:d9:44:b0:69:
         5d:31:ed:2b:4c:c8:0e:44:8a:d6:75:84:2f:53:bc:fc:0f:6a:
         c5:1b:c6:de:2b:63:f6:0c:cf:e8:64:fc:47:3b:3f:1f:db:3d:
         2d:b0:f7:67:e0:55:07:92:c5:94:2a:57:ee:1a:3a:a5:55:f4:
         51:a7:ff:a4:0b:ba:5a:a1:d5:5e:3e:7e:00:c2:d6:1f:bb:c5:
         2c:0d:b5:fe:ac:28:07:66:3e:42:e6:e3:fe:86:79:b9:a2:60:
         dd:02:c0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----