This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0B7C73A4042A68A85270F43141C006C63BE8A61D.cer
File:                     0B7C73A4042A68A85270F43141C006C63BE8A61D.cer (raw, json)
Hash identifier:          ZCC+aNzegLKDen0pGTPcp0NfPg08BXxZoDjjnjR577U=
Subject key identifier:   0B:7C:73:A4:04:2A:68:A8:52:70:F4:31:41:C0:06:C6:3B:E8:A6:1D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4054A3E7E776ED4E8A026A35A7088CD8CE6AE27A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/0B7C73A4042A68A85270F43141C006C63BE8A61D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 08 Nov 2025 16:11:42 +0000
Certificate not after:    Sat 07 Nov 2026 16:16:42 +0000
Subordinate resources:    AS: 262550
                          IP: 143.0.40.0/22
                          IP: 168.197.4.0/22
                          IP: 177.72.168.0/21
                          IP: 2804:28e0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 08:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:54:a3:e7:e7:76:ed:4e:8a:02:6a:35:a7:08:8c:d8:ce:6a:e2:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  8 16:11:42 2025 GMT
            Not After : Nov  7 16:16:42 2026 GMT
        Subject: CN=0B7C73A4042A68A85270F43141C006C63BE8A61D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:56:7c:98:86:e7:98:1d:78:5e:00:3a:e7:
                    f1:13:1e:e1:de:c9:fc:ea:51:a3:7d:19:d1:06:cc:
                    ff:ba:e4:70:1b:b4:8e:36:0c:be:01:0c:36:61:c0:
                    e4:9c:37:eb:d3:80:c5:d5:60:75:0e:ad:8a:e7:c3:
                    80:ac:d5:2f:d6:23:4d:d4:e3:67:6c:69:27:de:b0:
                    75:09:9a:17:29:5a:5c:ea:c7:bb:23:21:31:66:d8:
                    66:84:51:d3:49:5b:93:3c:a9:62:6b:56:f7:08:99:
                    de:06:82:7a:77:7f:23:3e:42:28:db:c1:66:36:ea:
                    f3:8b:e6:13:fc:bf:df:e2:63:54:4e:34:da:8e:fd:
                    25:5d:e8:5c:2c:f6:e6:58:79:50:41:b4:e2:d5:0d:
                    7d:62:78:ac:46:4f:eb:a2:ed:bf:54:a6:eb:1f:2a:
                    4b:c1:6d:a6:1e:89:47:c3:53:84:46:5c:de:ec:60:
                    57:94:e0:be:80:25:e4:28:87:6c:e6:16:d7:f4:8e:
                    5c:68:aa:39:d3:d1:1c:d9:ab:1a:ae:54:53:b0:66:
                    55:54:0b:7b:96:b7:28:1b:ad:4e:7d:76:23:68:89:
                    f5:85:b4:c8:84:b0:37:72:92:24:40:3b:f3:6f:47:
                    45:2e:64:d4:53:4f:bf:b3:56:f0:f9:36:1f:42:55:
                    62:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:7C:73:A4:04:2A:68:A8:52:70:F4:31:41:C0:06:C6:3B:E8:A6:1D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/0B7C73A4042A68A85270F43141C006C63BE8A61D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.40.0/22
                  168.197.4.0/22
                  177.72.168.0/21
                IPv6:
                  2804:28e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262550

    Signature Algorithm: sha256WithRSAEncryption
         07:83:7f:63:bc:e7:81:a4:7a:28:28:16:c5:01:e5:c2:5c:5a:
         18:ba:29:09:c4:e9:13:9d:95:24:a6:09:14:8c:4b:16:0a:c3:
         6d:72:0d:06:0a:ff:e3:b3:db:36:55:5f:bc:df:8a:bb:bd:f3:
         03:7e:30:6c:7c:43:91:88:d0:58:99:e6:47:31:99:7b:54:9e:
         82:ed:31:35:40:d0:ac:8f:6d:2c:76:7b:53:0f:bc:14:bf:d8:
         50:29:59:76:25:95:12:23:18:56:27:20:b6:87:09:07:92:dd:
         21:79:ef:4b:ff:da:44:86:a8:31:1e:a8:ae:9b:9a:da:e8:6b:
         44:42:2a:cd:e7:ea:79:7c:2a:98:0b:e4:93:69:38:bb:d4:23:
         b3:26:64:e9:94:39:4d:e3:68:b5:41:c4:d8:fd:4a:f9:8f:df:
         82:4a:fc:b8:03:e1:dd:c5:2d:70:9a:ca:54:3c:d4:cb:20:57:
         c7:c4:0a:72:1f:8e:48:d6:c7:a0:ac:6f:59:9d:14:16:fb:b0:
         67:3c:d6:5a:1c:0c:ad:f4:70:50:5c:1a:66:6f:4a:fe:3d:e3:
         72:94:03:a6:c7:ed:9a:df:82:a6:2d:95:09:3b:2b:48:3c:22:
         44:ff:f3:8a:f2:eb:8a:83:55:c6:68:5c:2b:38:aa:36:04:a7:
         53:5c:fc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:58:31 2025 by rpki-client