This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.cer
File:                     71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.cer (raw, json)
Hash identifier:          DJ6/4DlB/rhLNhNIRLn0GqytuzQQpTq4sFEjINzMXSk=
Subject key identifier:   71:D6:E8:15:8F:9E:FE:91:E9:AC:06:7F:99:AA:E5:B3:4F:B7:C7:A8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       08ECF29844EE4EF7E8A7AD018E02B7461DE6F182
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Nov 2025 18:24:09 +0000
Certificate not after:    Tue 17 Nov 2026 18:29:09 +0000
Subordinate resources:    AS: 271151
                          IP: 179.42.116.0/22
                          IP: 2804:770c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ec:f2:98:44:ee:4e:f7:e8:a7:ad:01:8e:02:b7:46:1d:e6:f1:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 18 18:24:09 2025 GMT
            Not After : Nov 17 18:29:09 2026 GMT
        Subject: CN=71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4b:f8:a9:dd:5f:29:bb:f3:6d:29:67:af:ef:
                    e7:66:3e:3c:14:05:17:6c:1d:a4:c9:08:2e:19:e8:
                    53:26:55:41:d1:13:68:06:89:83:dc:d6:1c:fa:86:
                    0e:23:53:0b:18:34:ae:7c:de:fd:91:e0:59:9a:61:
                    f5:a4:6a:06:d9:c6:11:92:3b:b0:ad:d8:cd:3f:14:
                    51:01:83:29:18:8d:ba:b0:8c:72:f4:03:0b:c3:0d:
                    c3:80:f1:a8:64:04:d0:4f:ba:30:64:52:5a:5b:68:
                    ba:8d:48:c4:5e:03:6e:6b:f0:1b:80:ab:28:3b:5f:
                    8c:4b:e6:7a:af:97:a4:26:2a:b5:59:9f:20:e5:7d:
                    89:6f:70:9f:35:e1:74:de:99:af:3d:cf:9f:bc:7b:
                    2f:97:0e:77:39:27:75:f1:7f:bb:d8:e8:c6:64:b1:
                    78:71:3e:e4:8d:1e:25:44:4c:52:58:30:60:51:ff:
                    db:ca:5e:0f:f2:3b:d0:1c:b1:e2:e5:54:4c:5c:9f:
                    1f:c9:37:4d:73:33:90:35:13:39:3d:ce:b9:d9:00:
                    a8:38:fb:36:7b:c4:ec:e6:0a:10:02:6a:20:3e:cb:
                    84:da:bc:23:59:36:38:f5:76:4f:c6:15:64:5f:59:
                    f8:df:ab:cc:cd:9a:7f:33:eb:97:c6:0e:fe:40:ac:
                    7b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:D6:E8:15:8F:9E:FE:91:E9:AC:06:7F:99:AA:E5:B3:4F:B7:C7:A8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.116.0/22
                IPv6:
                  2804:770c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271151

    Signature Algorithm: sha256WithRSAEncryption
         42:9e:2a:50:23:27:18:12:a7:16:f5:2c:e8:8f:91:e2:33:44:
         ba:11:b5:a5:f5:ff:7d:93:42:5f:4c:09:74:fc:c3:4c:8e:13:
         e4:71:8b:f1:7a:a6:f4:92:b9:cf:98:8d:f6:a8:6d:b3:12:33:
         9e:43:7a:bc:13:a8:17:c6:fb:40:97:93:95:08:fc:84:e0:f7:
         5f:47:f3:1f:9a:c6:b6:e8:8a:d6:42:a1:a4:98:ea:26:db:14:
         ed:fb:27:39:0f:d1:8e:56:c4:a4:e4:a5:7a:f2:8b:4c:ef:af:
         b3:72:35:9a:0e:90:b7:b0:d6:a0:ea:9f:a3:39:85:60:1c:28:
         a4:0a:1b:ae:20:86:5c:3c:6e:73:33:93:36:0b:54:a5:ed:75:
         02:ee:ee:9d:93:84:60:c6:78:44:06:37:28:c6:09:9a:f2:45:
         6a:45:ec:c8:a8:a3:39:e5:cc:d1:87:d7:1f:2b:a4:3a:e3:b8:
         23:fb:75:9f:ed:1a:ac:f8:f7:ef:f6:04:f0:88:94:62:29:e0:
         30:e9:63:f2:eb:4e:1b:21:77:60:09:e5:ef:f3:b7:bc:c7:e6:
         9e:ce:42:df:50:3d:a8:da:d8:09:0c:87:a4:39:e9:c5:d7:9a:
         1c:fa:77:b2:e9:32:a4:c2:f3:bb:f9:0a:ee:53:17:cd:e8:2e:
         4f:fb:99:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----