This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7379CD0D3006EF0F3AEA2CD1038C1DF44C773244.cer
File:                     7379CD0D3006EF0F3AEA2CD1038C1DF44C773244.cer (raw, json)
Hash identifier:          bBp4fGb+hFL34klRRXV+knSPW3V46pdzBKJgUnpAhdc=
Subject key identifier:   73:79:CD:0D:30:06:EF:0F:3A:EA:2C:D1:03:8C:1D:F4:4C:77:32:44
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       570E48719DCB7A8F2CEFA006D0AE77619A064255
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/7379CD0D3006EF0F3AEA2CD1038C1DF44C773244.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Dec 2025 20:42:26 +0000
Certificate not after:    Thu 03 Dec 2026 20:47:26 +0000
Subordinate resources:    AS: 271267
                          IP: 168.197.180.0/22
                          IP: 2804:78d0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 08:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:0e:48:71:9d:cb:7a:8f:2c:ef:a0:06:d0:ae:77:61:9a:06:42:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  4 20:42:26 2025 GMT
            Not After : Dec  3 20:47:26 2026 GMT
        Subject: CN=7379CD0D3006EF0F3AEA2CD1038C1DF44C773244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d7:c3:df:78:64:e2:b7:f6:fc:49:e6:af:69:
                    fe:f0:aa:27:65:91:55:3d:81:ed:c0:77:ac:a1:bc:
                    d3:03:61:34:b4:e8:d6:b6:1b:f7:ac:88:50:d7:64:
                    5c:bf:f9:ae:f4:d3:72:05:77:13:2f:6a:71:36:68:
                    e3:31:d1:78:0a:f9:e3:6e:ff:c8:b8:3e:82:8e:9f:
                    f5:b3:90:ec:5e:2a:a8:8e:72:57:2d:8b:86:83:bf:
                    59:72:bc:82:fc:f7:a9:92:9c:30:e4:8e:4f:d9:3f:
                    36:57:00:8b:47:c1:df:19:c3:b1:8f:2f:04:3a:1c:
                    e2:d6:be:ae:04:cf:3b:fa:cc:fd:13:11:f1:be:5c:
                    c2:8d:ef:f5:42:8d:d6:76:95:b1:25:78:18:3f:81:
                    bb:51:9c:8b:bd:1f:ec:a8:c6:cb:34:91:0a:7e:57:
                    c1:66:5e:66:9a:15:78:be:18:05:4b:51:08:3a:25:
                    69:0a:bc:65:92:5a:fb:83:cf:f2:6e:ad:4d:cf:21:
                    25:ff:f9:6a:06:5e:47:82:0b:88:01:8e:a0:0b:ba:
                    64:05:3f:4a:b3:f9:98:97:18:88:b4:7b:1e:ed:91:
                    27:ab:72:54:e1:bb:83:f7:c3:e7:b8:4d:a9:3f:7b:
                    0a:4c:99:de:94:1b:95:88:50:d3:31:ed:53:54:52:
                    08:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                73:79:CD:0D:30:06:EF:0F:3A:EA:2C:D1:03:8C:1D:F4:4C:77:32:44
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/7379CD0D3006EF0F3AEA2CD1038C1DF44C773244.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.180.0/22
                IPv6:
                  2804:78d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271267

    Signature Algorithm: sha256WithRSAEncryption
         20:24:a0:1e:ab:8e:17:cc:91:af:79:2f:14:aa:7d:07:4e:e6:
         c6:74:8b:5d:2b:49:60:5f:f0:49:49:06:4e:0d:77:05:fe:ba:
         3d:eb:76:9b:7d:91:aa:e4:69:83:56:2e:4d:38:79:13:a7:83:
         3d:46:fd:84:1f:2a:3e:bf:0c:ff:2e:b5:7f:4f:42:43:25:79:
         25:99:89:60:24:e5:40:70:a2:69:a2:38:d9:39:e0:f3:89:b8:
         76:19:09:f6:53:9b:4b:72:9d:60:e3:ba:c3:26:18:95:01:91:
         5d:f3:cf:02:73:6c:38:09:07:22:c4:2a:b7:53:b0:23:d6:5c:
         5d:e5:0e:42:51:85:f2:b2:47:08:8e:b5:6b:d4:12:05:ac:20:
         6f:5e:6c:ea:bf:05:98:54:13:ef:fa:8c:5a:20:ca:f4:ec:c3:
         f2:29:c8:0c:b4:cd:50:36:03:e0:50:55:a4:27:81:42:33:48:
         e3:94:f0:4c:dd:a1:66:2e:a9:ae:6a:73:6e:21:3f:1a:1f:0c:
         9e:e4:28:2e:e4:53:9f:fd:43:34:5c:41:53:5b:c7:5e:01:c2:
         69:91:14:0e:5b:a9:db:cd:46:72:b9:de:b3:dd:e6:cf:fc:d6:
         00:5d:60:c3:dc:e8:60:70:a0:34:7d:58:af:88:1e:fe:d9:e5:
         74:35:22:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----