This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7A44426CB548DB7694BBAC8B361B5D7C13EC9BB6.cer
File:                     7A44426CB548DB7694BBAC8B361B5D7C13EC9BB6.cer (raw, json)
Hash identifier:          0bqCfkIgZHSs3FE+zBylVF0JSkMuA6ORqDUivH6lZn0=
Subject key identifier:   7A:44:42:6C:B5:48:DB:76:94:BB:AC:8B:36:1B:5D:7C:13:EC:9B:B6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1881FF2BBF85FFFE7BB9E66A788C2E4181437C95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Axd3LwSHBgnT6wC47h9covDf1oozNMDKHL3RBHy1KEmJ/0/7A44426CB548DB7694BBAC8B361B5D7C13EC9BB6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Axd3LwSHBgnT6wC47h9covDf1oozNMDKHL3RBHy1KEmJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Nov 2025 13:00:04 +0000
Certificate not after:    Fri 13 Nov 2026 13:05:04 +0000
Subordinate resources:    AS: 262655
                          IP: 177.87.100.0/23
                          IP: 2801:80:360::/48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:81:ff:2b:bf:85:ff:fe:7b:b9:e6:6a:78:8c:2e:41:81:43:7c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 14 13:00:04 2025 GMT
            Not After : Nov 13 13:05:04 2026 GMT
        Subject: CN=7A44426CB548DB7694BBAC8B361B5D7C13EC9BB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fc:44:f2:ff:8e:28:fe:d6:64:f6:1c:59:72:
                    cc:a6:43:a6:eb:fa:43:9a:0c:f7:16:92:55:59:ea:
                    23:10:be:ca:93:9e:50:d4:58:2b:5e:f8:3d:a2:82:
                    9d:e3:04:28:5f:a4:f3:59:01:bc:1c:47:3e:f1:a1:
                    18:2f:79:eb:e9:88:d2:6f:07:c3:9a:06:cc:6d:64:
                    e6:9f:1c:ce:a7:fa:1a:65:42:e9:be:ea:19:1c:3b:
                    74:09:8a:33:45:b2:30:81:ee:b5:73:9f:73:69:6d:
                    90:84:26:c4:04:46:12:37:55:7d:6e:96:04:f3:e4:
                    b2:21:3f:93:d4:92:3a:92:87:c7:8d:a6:25:8a:f6:
                    d5:fc:c4:7a:f6:80:3d:ed:25:0c:83:11:08:89:71:
                    73:f1:75:e8:f0:d6:f6:fd:a9:24:5c:cd:2f:81:9e:
                    50:0a:81:70:28:3a:ff:34:ef:96:b8:a2:3a:18:ff:
                    a4:e8:df:fb:5a:1e:0c:1d:dc:04:02:89:29:0b:6e:
                    08:2b:da:0b:b8:d0:e2:da:d4:94:64:60:2d:14:4e:
                    15:6e:24:4c:50:21:83:6b:10:c6:f8:7e:a7:36:84:
                    1e:48:84:3a:c4:0c:5a:fb:cc:f0:d8:e0:d0:d2:b3:
                    5e:57:28:76:90:76:88:9e:79:65:dc:0f:42:09:61:
                    8f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:44:42:6C:B5:48:DB:76:94:BB:AC:8B:36:1B:5D:7C:13:EC:9B:B6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Axd3LwSHBgnT6wC47h9covDf1oozNMDKHL3RBHy1KEmJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Axd3LwSHBgnT6wC47h9covDf1oozNMDKHL3RBHy1KEmJ/0/7A44426CB548DB7694BBAC8B361B5D7C13EC9BB6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.100.0/23
                IPv6:
                  2801:80:360::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262655

    Signature Algorithm: sha256WithRSAEncryption
         59:02:4f:e1:f4:34:ec:d2:0e:f0:e6:8d:0a:fb:a0:b4:8e:af:
         36:b3:19:0f:03:2c:c5:4b:be:cb:fb:86:42:ee:79:53:aa:d3:
         30:26:f4:46:56:53:9f:25:2f:68:22:99:3a:ad:60:01:a1:a2:
         67:88:cb:8e:a8:cc:f3:cf:78:7f:7e:fe:de:d8:51:e2:44:4e:
         ac:0c:96:a9:a2:55:29:59:86:71:e0:53:e0:3a:dd:e3:0b:d3:
         64:ed:d2:09:1e:7c:23:ad:0c:93:8a:18:b8:bf:89:a7:79:b9:
         dc:49:e9:81:c1:af:a3:aa:3a:c1:cd:2b:0a:84:bc:f2:f9:ce:
         46:5e:2a:3a:71:24:79:58:95:be:72:ae:13:6a:e9:12:4d:8b:
         4a:71:68:2d:58:3b:f2:06:6c:6a:29:59:71:43:3f:0c:70:85:
         21:62:f6:2a:94:26:10:7c:4c:1a:ee:25:2f:fd:08:fc:40:c6:
         c5:32:4d:bd:dd:b3:82:3c:79:b5:94:a7:ba:14:9d:ed:55:7e:
         80:f5:6b:66:6a:97:ce:72:cb:33:1b:84:ce:0b:79:0f:5a:17:
         b0:de:df:1e:0f:2f:4b:b1:55:e1:99:0c:ec:97:8f:0b:1d:65:
         83:37:71:ce:4c:9f:5a:a9:98:0e:5e:33:e2:7e:45:6a:2d:57:
         11:4b:fb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----