This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6344AF440766B9E900B42D4B50C20DDBA639DA4E.cer
File:                     6344AF440766B9E900B42D4B50C20DDBA639DA4E.cer (raw, json)
Hash identifier:          E4Vh1Y8Gid/ml4iSKS4OW0hzLsx7rU1cgWvEkRJHGa4=
Subject key identifier:   63:44:AF:44:07:66:B9:E9:00:B4:2D:4B:50:C2:0D:DB:A6:39:DA:4E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       45E1142D5743427AC8496EB67A45A9709E406B22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3g6VhbdT4p1p8rGeEHSTpNG1wEmzCZiiYpVVpHMKCSgN/0/6344AF440766B9E900B42D4B50C20DDBA639DA4E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3g6VhbdT4p1p8rGeEHSTpNG1wEmzCZiiYpVVpHMKCSgN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Nov 2025 20:32:42 +0000
Certificate not after:    Fri 20 Nov 2026 20:37:42 +0000
Subordinate resources:    AS: 61741
                          IP: 131.72.192.0/22
                          IP: 170.82.184.0/22
                          IP: 2804:1ba4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e1:14:2d:57:43:42:7a:c8:49:6e:b6:7a:45:a9:70:9e:40:6b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 21 20:32:42 2025 GMT
            Not After : Nov 20 20:37:42 2026 GMT
        Subject: CN=6344AF440766B9E900B42D4B50C20DDBA639DA4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:47:c4:5f:ed:6e:bd:6e:21:1d:de:1e:a2:a6:
                    7c:08:67:31:cf:2f:6e:fb:58:b0:02:a6:bc:cb:f7:
                    8e:6c:25:39:16:97:62:8d:d7:6d:df:c0:73:c5:dd:
                    a3:18:66:81:04:18:4f:f0:2c:ee:59:62:ee:af:1c:
                    63:54:54:24:9b:1f:c0:a4:3d:29:af:c3:8d:99:30:
                    4a:f6:42:ae:70:93:f4:24:a8:9e:8b:d3:ce:e4:6a:
                    53:a0:78:8b:35:31:cb:c9:dd:e7:e3:ab:28:9d:47:
                    65:f6:39:f5:15:bc:79:ad:5e:d2:71:e0:cc:60:b2:
                    4b:2e:82:e0:98:64:19:de:c6:06:64:21:44:46:4a:
                    97:c5:95:3e:82:8c:2b:7f:b7:e3:d6:51:3c:07:35:
                    b8:2a:1d:31:f4:f3:c6:3e:52:d6:67:65:62:fe:11:
                    83:5a:11:9d:75:fc:ca:18:a0:10:24:be:8c:7e:18:
                    f4:e8:c3:43:3c:0a:8c:bc:af:e1:0e:31:c4:80:2f:
                    fb:bf:d0:e7:24:7e:c5:50:11:68:16:cf:e5:22:62:
                    bf:31:44:25:fc:71:77:b1:3a:96:34:87:6c:57:8a:
                    8e:62:f6:13:36:77:4e:d2:16:62:c3:65:14:5e:48:
                    70:03:76:ce:7f:f4:d9:a2:16:d2:3e:73:e5:6f:de:
                    fc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                63:44:AF:44:07:66:B9:E9:00:B4:2D:4B:50:C2:0D:DB:A6:39:DA:4E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3g6VhbdT4p1p8rGeEHSTpNG1wEmzCZiiYpVVpHMKCSgN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3g6VhbdT4p1p8rGeEHSTpNG1wEmzCZiiYpVVpHMKCSgN/0/6344AF440766B9E900B42D4B50C20DDBA639DA4E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.192.0/22
                  170.82.184.0/22
                IPv6:
                  2804:1ba4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61741

    Signature Algorithm: sha256WithRSAEncryption
         b0:88:e9:d1:30:83:d1:a5:49:eb:01:d6:84:52:f1:45:72:81:
         fd:75:a9:65:cd:8c:a1:34:e9:61:44:3b:a3:d6:d3:bb:e9:81:
         5a:fc:61:5c:ec:84:8f:f2:d2:7a:9f:b5:bc:d9:0a:73:75:ca:
         ff:0d:7d:7c:81:fb:ed:bc:4e:7a:46:60:30:85:fe:ff:ab:d5:
         0d:c4:1e:81:dc:24:79:f6:f9:3a:14:53:72:2b:71:0a:37:2b:
         83:11:81:40:87:c6:8f:df:bb:19:d1:15:5e:fd:17:4e:1f:cd:
         d1:d1:80:89:be:b8:1a:29:1a:3d:e9:b5:ea:9b:84:4d:a8:5c:
         ea:4e:a4:b3:7b:f3:85:d9:6d:20:5b:f3:c8:b6:2c:9d:ff:f6:
         d0:2b:da:32:e8:8d:26:b2:07:44:40:9b:7c:7c:e2:05:58:53:
         53:8a:a3:ae:42:9a:fe:da:10:87:42:3a:e9:45:f8:ed:fe:92:
         d4:f2:2f:79:05:02:8d:02:8a:b1:10:ec:98:dc:62:39:55:3b:
         f1:2d:ab:fa:c6:22:52:0e:41:ac:f7:0d:17:39:b0:f1:32:0e:
         75:df:7a:fd:e7:6e:69:4b:5b:d0:9d:1b:63:64:36:1f:6b:58:
         9b:61:5a:86:49:70:e5:8e:45:2e:fd:2f:0b:4e:fb:c6:c7:e6:
         cb:8b:b6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:36:13 2025 by rpki-client