This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer
File:                     4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer (raw, json)
Hash identifier:          n7ZKDjzEnlSjXLlB3+kCJ1pa9URK0/7SCiXcHdlQ6P4=
Subject key identifier:   4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       66229E0E2C077EE1FF2D50A22C418324785BDF14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Nov 2025 14:05:45 +0000
Certificate not after:    Fri 20 Nov 2026 14:10:45 +0000
Subordinate resources:    AS: 272692
                          IP: 2804:872c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 10:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:22:9e:0e:2c:07:7e:e1:ff:2d:50:a2:2c:41:83:24:78:5b:df:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 21 14:05:45 2025 GMT
            Not After : Nov 20 14:10:45 2026 GMT
        Subject: CN=4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:54:eb:2a:fd:1f:74:e9:d2:75:e4:46:54:88:
                    ff:bf:36:ea:f2:c1:ca:a7:b7:19:80:a0:4d:72:19:
                    21:3a:3d:87:4a:3a:24:65:27:76:e9:01:1b:a6:d5:
                    80:b8:8d:2d:52:07:a8:2e:70:73:b1:9a:5e:e7:9b:
                    3d:1f:45:f7:59:9a:6e:7d:08:b8:0e:d0:53:6d:42:
                    3a:ea:40:82:1b:15:b1:d4:1d:f3:06:45:91:c4:a8:
                    8b:f1:b4:de:e5:2e:3c:13:43:11:5a:d5:93:65:d3:
                    e1:9e:88:b3:17:35:e2:45:10:c2:16:cf:77:98:fe:
                    47:ab:19:0d:35:e7:5e:e9:e3:98:d0:eb:32:5c:f4:
                    6b:e7:69:e5:bc:d8:2b:1b:71:70:03:45:95:b0:4e:
                    30:7a:94:af:24:4c:5a:33:51:85:d4:00:ff:0f:b8:
                    0b:f5:95:ae:fe:09:ed:54:ab:54:4c:9c:4c:ef:e7:
                    e5:b0:13:c4:1d:7c:e5:d7:3b:18:1a:7c:9a:e8:3a:
                    a5:db:b3:d3:52:d1:de:d1:98:da:c1:38:45:ad:5b:
                    50:ed:68:25:a3:ac:42:8c:b2:53:2e:11:6a:2c:a2:
                    76:58:d8:eb:63:31:65:e0:68:9a:74:aa:cc:a5:69:
                    10:c8:97:e0:0d:e9:b5:12:ab:8d:89:5a:fc:54:4d:
                    57:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:872c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272692

    Signature Algorithm: sha256WithRSAEncryption
         13:f1:7a:6b:ea:61:08:fb:7b:b3:59:23:c1:88:b6:8d:06:6f:
         b2:ae:5d:d8:b6:b2:e8:f6:ec:13:3e:de:80:0f:b6:7b:3c:e2:
         b8:c6:37:9c:71:86:dd:1b:ae:29:03:58:14:43:00:b9:48:5e:
         2b:17:40:ac:17:c6:09:b9:0e:07:e5:98:f8:92:04:32:36:c4:
         7b:dc:d2:57:ab:83:51:f5:80:6b:11:9b:34:cc:d6:a8:af:aa:
         32:32:84:f6:f4:c9:82:04:41:cc:3a:c0:47:83:90:82:7f:ca:
         d5:06:fc:22:44:a4:71:96:59:d3:1e:53:c3:01:1b:f5:3f:b3:
         c9:e4:ea:07:59:a5:2a:76:1a:25:f4:9e:35:15:bf:9a:2c:99:
         ff:ae:a6:c0:eb:71:84:62:bb:6b:24:80:1b:2e:8e:b1:53:58:
         28:50:00:66:52:c6:93:72:ef:88:25:c0:ec:eb:bc:a2:44:eb:
         40:c5:3e:59:c4:97:85:0e:50:5b:61:40:65:89:dc:cc:a5:49:
         4e:ef:ed:03:8b:8d:51:04:e9:7a:74:5b:9d:0f:19:39:1c:7a:
         ff:0c:5f:31:b3:0c:97:23:03:03:1b:8d:d4:29:bf:47:5e:56:
         0b:08:1c:cf:9b:d7:05:0a:1a:ec:8e:40:9b:78:c8:f1:8d:cd:
         3c:e6:a7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----