This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.cer
File:                     71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.cer (raw, json)
Hash identifier:          UaiiZ4is2djni4tuZcDAIE1DTvgHory4XkCmUM/XrzQ=
Subject key identifier:   71:DC:18:A5:F8:EA:E6:CA:A5:0A:36:E9:73:49:E1:34:7B:C8:F1:89
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       16392D0972A325241A5ACDAA48F51674A7E68943
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.mft
caRepository:             rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 15 Nov 2025 17:41:12 +0000
Certificate not after:    Sat 14 Nov 2026 17:46:12 +0000
Subordinate resources:    AS: 271200
                          IP: 200.71.82.0/23
                          IP: 2804:77cc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:39:2d:09:72:a3:25:24:1a:5a:cd:aa:48:f5:16:74:a7:e6:89:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 15 17:41:12 2025 GMT
            Not After : Nov 14 17:46:12 2026 GMT
        Subject: CN=71DC18A5F8EAE6CAA50A36E97349E1347BC8F189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:08:3a:a6:55:a5:11:6a:e9:a0:61:9e:26:83:
                    7f:40:60:b9:89:66:12:f7:ec:41:46:fe:6b:9b:69:
                    3b:8c:37:36:9e:aa:12:1c:7c:7f:28:5e:1c:63:69:
                    94:65:39:5d:5e:50:f3:c9:d8:6a:a2:56:2a:ec:16:
                    0f:19:ec:57:37:b0:95:de:c1:31:f7:17:bb:c9:5f:
                    19:4f:23:7f:b2:1b:9e:1f:d9:49:7a:30:6a:8d:24:
                    12:b7:06:1e:b1:3b:3c:9b:93:f7:22:c4:84:df:4e:
                    3b:8c:1d:89:5b:35:e7:9d:7b:af:66:0c:59:85:e2:
                    ed:30:dc:bc:f1:a0:d1:46:bd:d2:5a:b4:1a:d6:a1:
                    38:29:38:d5:b4:e2:16:45:3d:72:30:2c:2d:69:7f:
                    6c:0e:bf:41:8f:bf:80:8f:ba:4c:1e:8c:cc:ab:75:
                    90:ee:80:75:e8:2c:7d:98:c4:b9:fc:01:5e:d5:61:
                    51:3a:d3:f9:eb:85:fb:64:0c:ae:ff:30:4e:75:69:
                    0e:4d:4b:e3:4a:15:53:69:29:70:c9:53:df:59:e1:
                    4c:69:d7:c5:0a:49:85:0d:e5:a5:80:30:9e:d9:5f:
                    a6:6a:22:d1:ea:84:66:43:cb:54:4f:a3:d5:eb:f5:
                    26:d8:6b:dd:85:c1:5c:71:6c:d6:ad:4d:62:2c:ef:
                    29:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:DC:18:A5:F8:EA:E6:CA:A5:0A:36:E9:73:49:E1:34:7B:C8:F1:89
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/71DC18A5F8EAE6CAA50A36E97349E1347BC8F189.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.82.0/23
                IPv6:
                  2804:77cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271200

    Signature Algorithm: sha256WithRSAEncryption
         4f:33:9c:49:16:ed:a3:e5:bb:4a:e2:c1:2b:1f:20:3e:ae:4f:
         97:ef:b0:03:da:7f:56:94:1b:11:69:c6:10:53:59:44:ec:37:
         45:42:03:8e:8b:22:53:09:1b:e7:b0:9d:31:99:1d:2c:67:9b:
         d6:7c:10:da:97:06:b3:91:32:e0:bd:ba:0f:e5:c9:40:fa:b3:
         4e:fc:39:02:cb:bb:cb:e5:9b:6c:d3:df:91:f9:d9:93:c9:0e:
         7c:f8:40:c9:c3:ae:68:0c:d6:cb:a5:51:30:a9:bb:f8:c8:28:
         66:57:15:c2:fb:c9:eb:26:68:d9:bd:87:e0:f3:9c:45:50:22:
         ec:f3:e2:84:ee:ea:ea:ae:63:6a:a5:2d:f7:55:61:61:59:c3:
         20:9f:51:33:52:e3:ea:98:e4:4a:7a:61:97:ce:3e:09:b7:fc:
         9f:43:3a:6c:72:9a:3f:a2:6b:14:b5:e9:60:00:b8:aa:16:04:
         a6:80:11:a1:22:5e:10:54:94:f3:a7:10:e2:49:d0:6d:be:97:
         40:bf:84:83:04:38:43:ce:14:f5:c7:19:eb:b0:93:40:f4:3c:
         a7:10:1e:13:b0:74:95:06:84:31:fb:aa:ca:a7:f3:46:c5:dc:
         f7:54:5d:5c:f5:64:f5:80:24:30:7d:38:d4:e6:e2:e9:36:16:
         ae:35:68:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----