This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1664676300D4BA487C597BD83DEA3EAE106DAB85.cer
File:                     1664676300D4BA487C597BD83DEA3EAE106DAB85.cer (raw, json)
Hash identifier:          8KqrD38SH19kup+2LDr0I6Bh+W2V+6xXcIlOovzOUBQ=
Subject key identifier:   16:64:67:63:00:D4:BA:48:7C:59:7B:D8:3D:EA:3E:AE:10:6D:AB:85
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       72F887A04A1894CBC238C8A4FB635274AEAEA0CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/1664676300D4BA487C597BD83DEA3EAE106DAB85.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Nov 2025 14:05:51 +0000
Certificate not after:    Wed 11 Nov 2026 14:10:51 +0000
Subordinate resources:    AS: 273779
                          IP: 177.8.69.0/24
                          IP: 2804:8c18::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f8:87:a0:4a:18:94:cb:c2:38:c8:a4:fb:63:52:74:ae:ae:a0:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 12 14:05:51 2025 GMT
            Not After : Nov 11 14:10:51 2026 GMT
        Subject: CN=1664676300D4BA487C597BD83DEA3EAE106DAB85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:de:60:d5:66:cc:1e:0d:91:ca:09:ef:af:0d:
                    5d:99:8e:bb:a9:c6:81:20:e2:b5:68:f3:0e:04:4e:
                    f0:5f:67:6a:42:9a:39:e6:17:51:87:77:88:1b:07:
                    c5:b1:b9:1e:ef:b1:d8:03:aa:9c:ef:31:0a:e3:e7:
                    5f:9d:f4:77:fb:af:6e:16:a5:62:d1:8b:89:6a:99:
                    36:06:8e:81:2b:08:2f:23:f1:42:32:dd:5b:a7:17:
                    0d:45:7f:0e:3d:66:0e:30:c2:f2:08:99:30:7f:51:
                    07:4d:f5:bc:55:96:05:2c:5c:12:ee:ce:f6:22:65:
                    22:84:6a:e3:49:83:ef:c6:61:95:dc:4d:54:0f:00:
                    1d:a7:65:51:ba:4a:fd:b3:09:de:de:60:ac:93:1f:
                    6b:2d:15:3d:ad:0c:6c:0e:fe:b8:7e:9f:91:be:b0:
                    7f:66:50:1e:99:30:c8:24:05:4e:85:a8:08:cf:85:
                    cb:31:ab:32:e0:62:6d:94:88:7b:28:47:66:91:34:
                    9f:3c:3c:f0:0a:7c:86:c1:f1:a6:38:48:0b:cb:b3:
                    84:56:2c:06:fe:e4:12:fb:91:74:b0:d8:41:23:78:
                    d3:6f:1e:0b:fb:ec:81:63:f1:c7:e0:90:2e:e6:e8:
                    b4:04:55:24:db:d8:e1:2d:d3:d9:97:51:72:96:b6:
                    61:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:64:67:63:00:D4:BA:48:7C:59:7B:D8:3D:EA:3E:AE:10:6D:AB:85
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/1664676300D4BA487C597BD83DEA3EAE106DAB85.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.69.0/24
                IPv6:
                  2804:8c18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273779

    Signature Algorithm: sha256WithRSAEncryption
         8d:e7:9f:35:a2:77:14:4f:64:94:26:3f:17:46:2a:18:f3:5c:
         45:01:01:72:53:87:2c:4e:63:f0:c2:12:4c:ea:87:6f:fa:48:
         93:c1:a7:ca:e2:0d:0f:4c:38:73:71:78:ea:fd:04:12:82:f5:
         8b:f6:e4:cc:e2:62:ff:af:c8:82:2e:8f:d7:3b:c0:1e:13:45:
         80:49:3e:d3:66:e7:75:3a:e4:51:09:2b:84:e3:4a:f8:c3:95:
         33:69:12:2e:51:f3:50:f5:08:33:5d:24:17:61:19:cc:63:5d:
         e0:7a:95:a0:af:d8:37:4c:80:f5:f8:2a:25:2b:10:6a:02:5f:
         58:7b:63:74:c5:ea:f0:f1:16:fd:cd:96:4c:85:04:29:dd:0b:
         77:69:c5:1e:6d:00:2a:d0:16:87:6b:50:be:05:73:ac:e9:c1:
         8d:dd:a7:69:fa:59:ed:00:de:c5:b3:8f:95:a2:40:4d:00:fa:
         a6:86:83:1a:74:a0:bd:0a:35:1d:68:6b:1a:2f:01:38:8e:8d:
         1e:0d:0c:5b:73:8c:c6:b6:76:cd:fd:84:ca:d1:75:b3:68:54:
         36:13:4a:ad:72:ac:dc:90:cd:31:2c:c3:af:cf:b5:2e:47:39:
         85:6e:97:34:36:bc:dc:ee:ad:26:e1:eb:04:5e:85:0f:69:eb:
         52:bd:ac:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----