This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7155F95F3F50406AE68A9CCF51483483D251BB70.cer
File:                     7155F95F3F50406AE68A9CCF51483483D251BB70.cer (raw, json)
Hash identifier:          7K6XgOFlstg9AxGYYczdrcL13ffHrkbI+ayptJyXBkI=
Subject key identifier:   71:55:F9:5F:3F:50:40:6A:E6:8A:9C:CF:51:48:34:83:D2:51:BB:70
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7AE368E857330B9C557221EE7FBD2768E9945CFE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/7155F95F3F50406AE68A9CCF51483483D251BB70.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Dec 2025 21:05:11 +0000
Certificate not after:    Wed 16 Dec 2026 21:10:11 +0000
Subordinate resources:    AS: 28360
                          IP: 138.94.8.0/22
                          IP: 177.8.0.0/19
                          IP: 179.124.224.0/20
                          IP: 189.76.208.0 -- 189.76.239.255
                          IP: 2804:14::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 23:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e3:68:e8:57:33:0b:9c:55:72:21:ee:7f:bd:27:68:e9:94:5c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 17 21:05:11 2025 GMT
            Not After : Dec 16 21:10:11 2026 GMT
        Subject: CN=7155F95F3F50406AE68A9CCF51483483D251BB70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d1:66:3c:50:a3:4a:95:df:a8:ca:e2:34:96:
                    bc:a1:b7:f5:54:4f:18:09:68:16:76:ff:f5:ee:b4:
                    5c:87:41:17:3a:12:21:b1:5f:37:bc:6a:9b:1f:c3:
                    ad:44:a9:38:b6:15:16:e4:e7:99:96:2d:66:6f:7a:
                    cf:37:d8:ba:3f:94:75:28:5e:a2:33:68:4d:b7:39:
                    82:d9:1b:07:fb:75:25:4a:8c:01:85:e1:24:ce:b2:
                    13:48:a2:34:6a:a5:ca:b9:e8:d4:04:27:fc:ca:29:
                    78:d3:7a:28:4d:87:56:00:b8:90:e5:60:ec:04:47:
                    8c:5b:94:04:72:3b:a0:e4:f2:70:ff:90:b9:2e:53:
                    ca:87:f1:6f:a3:88:09:b7:73:23:11:c2:00:bf:1e:
                    b0:2e:4e:e2:83:80:49:5c:85:0d:d4:96:6e:21:e2:
                    f2:06:63:4e:2d:65:94:42:cf:66:df:3f:f4:14:16:
                    e4:f7:c7:e9:2a:8d:52:31:f7:9b:7c:e4:f8:f4:fd:
                    c2:28:50:fb:d4:3a:c8:ec:76:8e:c3:4e:e6:5d:2d:
                    f5:f2:b7:26:e3:40:f0:5a:a7:01:90:4d:6b:da:85:
                    c4:f1:f4:1e:cb:7f:fc:89:6b:97:d6:f2:62:71:62:
                    23:0d:bd:bf:49:d6:47:50:b5:37:06:68:14:cc:7b:
                    36:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:55:F9:5F:3F:50:40:6A:E6:8A:9C:CF:51:48:34:83:D2:51:BB:70
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/7155F95F3F50406AE68A9CCF51483483D251BB70.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.8.0/22
                  177.8.0.0/19
                  179.124.224.0/20
                  189.76.208.0-189.76.239.255
                IPv6:
                  2804:14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28360

    Signature Algorithm: sha256WithRSAEncryption
         29:5b:46:12:95:54:54:24:cf:e1:88:43:64:1f:03:a2:58:c8:
         53:ec:91:b2:4d:32:8b:8c:8a:a2:81:56:05:2e:3e:e4:a8:0c:
         92:38:81:2d:e2:4d:48:f3:2e:e9:fd:36:2d:61:9e:42:bf:e7:
         b8:4b:2d:85:33:eb:73:40:35:51:ea:aa:92:54:0b:a5:91:97:
         b3:be:1a:63:1c:a2:33:d4:34:86:0a:68:37:e1:95:ee:ef:e0:
         2d:a2:db:18:d3:27:27:09:36:ba:ce:b9:7c:6e:f8:a9:88:12:
         03:c7:cc:6f:cb:42:51:5b:86:9e:fb:60:a9:97:34:19:f4:74:
         65:33:ca:52:f8:c5:55:7f:64:d7:9b:5f:8b:65:25:ac:c0:12:
         ef:be:71:85:35:ba:5b:01:3c:fb:f9:00:e1:09:29:ec:db:08:
         8f:64:e3:ab:04:2e:d2:2a:44:ee:6e:cf:36:5e:8b:0e:51:e8:
         75:10:2c:6a:2b:9b:6d:93:1c:20:d0:c3:33:0c:00:8d:e1:b3:
         0e:51:b0:df:63:02:86:1a:90:b1:4f:e1:48:bf:c9:9b:1d:63:
         a0:d4:ee:a7:9a:a8:3a:92:09:54:e3:a0:34:e8:80:38:04:b6:
         fb:ab:f0:47:d6:47:3f:7e:cb:84:16:68:f4:e3:22:ac:4e:86:
         68:2a:c9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:17:50 2025 by rpki-client