This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/079670A0FD31480E710CC2F0D821F426E373FE20.cer
File:                     079670A0FD31480E710CC2F0D821F426E373FE20.cer (raw, json)
Hash identifier:          mpzVKwf2A8WElNpgANgRjGGZZccMm8f9V+UJyHQCMas=
Subject key identifier:   07:96:70:A0:FD:31:48:0E:71:0C:C2:F0:D8:21:F4:26:E3:73:FE:20
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       031F18952BA7BC3B5396749BF931C83C841F7B02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/079670A0FD31480E710CC2F0D821F426E373FE20.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Nov 2025 20:16:44 +0000
Certificate not after:    Mon 23 Nov 2026 20:21:44 +0000
Subordinate resources:    AS: 271548
                          IP: 181.174.212.0/22
                          IP: 2804:7d3c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:1f:18:95:2b:a7:bc:3b:53:96:74:9b:f9:31:c8:3c:84:1f:7b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 24 20:16:44 2025 GMT
            Not After : Nov 23 20:21:44 2026 GMT
        Subject: CN=079670A0FD31480E710CC2F0D821F426E373FE20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:48:82:4f:27:d8:c7:cb:0a:45:d3:a9:a6:6d:
                    6a:a4:75:b4:66:dc:b4:70:01:4e:d9:23:41:ce:c1:
                    39:23:15:76:ad:dc:fd:0a:7f:6d:c0:2e:9b:55:79:
                    a5:cf:69:f8:b7:75:c2:2a:28:44:af:b3:df:4e:ab:
                    c4:26:27:4b:47:ea:d1:0d:2e:b6:0e:36:c7:9a:90:
                    c4:3b:48:13:91:bd:24:12:8f:53:f9:3d:f0:71:de:
                    eb:03:62:48:2c:53:58:a7:dd:32:e3:59:a2:79:f6:
                    92:30:fa:1e:86:7a:80:54:1f:c2:f9:7e:15:fa:56:
                    23:30:92:e9:33:9a:8e:ce:8a:25:32:68:86:74:3e:
                    d7:c3:e7:86:8f:76:ce:91:91:67:19:17:ac:9a:10:
                    44:e5:a0:59:32:54:f6:89:18:13:ff:ea:0d:43:f7:
                    be:ca:f1:3f:e4:d6:23:82:c4:dc:35:6a:15:f9:af:
                    d4:98:d1:d3:fc:6d:0f:76:ee:10:67:e3:1f:5e:24:
                    8e:00:20:fb:f6:7e:0a:47:79:30:f2:da:cd:3c:83:
                    00:7d:f1:bb:5e:b3:88:5f:9e:58:d1:53:fa:a0:c0:
                    a4:11:34:f7:f6:66:b1:2b:bd:8c:94:0c:cd:a7:c2:
                    9c:b5:80:b0:82:83:8f:ff:1d:80:65:6b:57:4d:22:
                    5b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                07:96:70:A0:FD:31:48:0E:71:0C:C2:F0:D8:21:F4:26:E3:73:FE:20
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/079670A0FD31480E710CC2F0D821F426E373FE20.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.212.0/22
                IPv6:
                  2804:7d3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271548

    Signature Algorithm: sha256WithRSAEncryption
         1f:b5:9e:83:0b:8b:21:1e:02:32:76:28:10:b6:81:93:5f:de:
         13:91:16:20:d1:6e:7b:a6:55:16:a5:39:8c:b4:1e:6c:0d:f1:
         da:0b:af:4d:8f:8a:5c:05:85:67:36:a7:f7:45:64:6e:f5:2c:
         8f:ed:ab:63:0b:6d:8b:24:aa:4a:f1:1c:fc:f3:a6:92:f9:88:
         b2:49:59:72:5d:5b:45:cc:2e:53:50:f0:9d:97:af:8f:83:2c:
         bb:45:3e:fb:66:49:52:28:bc:56:e7:a0:1c:f2:84:8b:0b:7e:
         f6:19:a3:ea:b1:69:ca:20:4d:8a:79:f8:6c:4f:0c:2a:6c:86:
         da:31:c9:49:4f:6b:9e:0b:8b:d2:57:55:6f:f1:45:5f:92:68:
         d5:37:19:e4:29:c0:b4:19:79:10:e9:ea:aa:a1:de:26:d7:10:
         fd:0c:59:06:0e:a4:53:38:e4:c6:ef:7a:16:5b:01:28:94:ce:
         3b:5c:fb:d7:7c:7d:9d:8a:94:28:09:3f:44:95:62:b5:28:60:
         95:4b:69:0b:36:44:30:dd:d5:2f:7a:3a:ae:dc:78:5d:d2:3d:
         db:ba:8e:4d:a2:1c:0f:43:77:96:4b:fe:bf:a7:49:62:ff:1d:
         b4:f0:86:ba:dc:fa:f7:22:9b:46:25:f6:88:f7:72:69:7e:f5:
         f8:c3:8d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----