This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7AE8E6F2472A7A5B232CFB0C1FABB450283B107C.cer
File:                     7AE8E6F2472A7A5B232CFB0C1FABB450283B107C.cer (raw, json)
Hash identifier:          f7BLcF5H3hgrOj3vOZrl3Xm5yJNtGVpdW1XQxG2TIms=
Subject key identifier:   7A:E8:E6:F2:47:2A:7A:5B:23:2C:FB:0C:1F:AB:B4:50:28:3B:10:7C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       44E7A095BA6A16BE47F9AA49FA11F895B32E27DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9TGvvDYo8u9a2Ldt5ok8YSnaGgRBJX5AJrCq1ZvVExDF/0/7AE8E6F2472A7A5B232CFB0C1FABB450283B107C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9TGvvDYo8u9a2Ldt5ok8YSnaGgRBJX5AJrCq1ZvVExDF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Nov 2025 13:04:01 +0000
Certificate not after:    Mon 23 Nov 2026 13:09:01 +0000
Subordinate resources:    AS: 271228
                          IP: 177.223.152.0/22
                          IP: 2804:7838::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e7:a0:95:ba:6a:16:be:47:f9:aa:49:fa:11:f8:95:b3:2e:27:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 24 13:04:01 2025 GMT
            Not After : Nov 23 13:09:01 2026 GMT
        Subject: CN=7AE8E6F2472A7A5B232CFB0C1FABB450283B107C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a5:66:2c:cb:63:30:bb:c0:dd:4c:db:02:e5:
                    bd:c7:3b:d8:94:ff:7b:c8:7f:4d:a9:88:29:31:ec:
                    ac:d8:a4:b9:62:ab:b4:1e:cd:69:f2:cf:08:23:93:
                    64:67:fc:7b:4f:28:d2:71:b2:7f:d2:18:84:1b:1f:
                    dd:2e:2e:16:a7:85:ec:50:f3:9d:23:13:79:d3:2b:
                    b5:33:56:9e:fc:d0:c8:c8:28:78:58:32:d9:c0:ae:
                    18:e6:2c:f4:9d:a5:95:23:06:72:cc:44:e7:56:b1:
                    1f:03:d7:93:64:69:a3:7e:13:60:f3:4a:f3:e9:94:
                    93:e9:d9:0b:f2:07:34:eb:88:7d:1b:06:74:2b:a9:
                    6e:fe:02:67:57:38:90:ef:4b:e7:bf:c5:1c:9e:4a:
                    85:80:de:68:ff:fe:da:13:41:5f:8b:33:d7:8d:0c:
                    72:79:7e:08:3e:1f:74:90:3c:38:b2:41:6f:35:e4:
                    3f:bd:a9:11:3a:9c:fa:d4:82:6a:75:cd:c4:37:c5:
                    3b:97:ea:95:d5:92:87:9a:0b:28:96:f2:ba:8c:c8:
                    98:1a:0e:ba:ec:79:c1:85:fa:96:68:8e:50:1f:fb:
                    b0:98:fa:6e:78:3a:5b:ac:30:13:df:98:3e:23:6e:
                    a5:3a:0a:d0:67:e3:87:5e:50:32:12:32:cf:1f:bb:
                    df:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:E8:E6:F2:47:2A:7A:5B:23:2C:FB:0C:1F:AB:B4:50:28:3B:10:7C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9TGvvDYo8u9a2Ldt5ok8YSnaGgRBJX5AJrCq1ZvVExDF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9TGvvDYo8u9a2Ldt5ok8YSnaGgRBJX5AJrCq1ZvVExDF/0/7AE8E6F2472A7A5B232CFB0C1FABB450283B107C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.152.0/22
                IPv6:
                  2804:7838::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271228

    Signature Algorithm: sha256WithRSAEncryption
         7b:cb:e1:1d:9b:ce:de:e0:5a:3a:b2:84:d5:a9:63:92:d7:d0:
         aa:b4:dc:99:e9:e7:91:58:34:72:dc:2a:0f:a2:9d:2a:15:0b:
         b6:66:46:a0:d2:d4:6a:97:f4:c8:79:63:86:1e:69:e4:d5:d3:
         ef:5e:18:65:95:74:c4:32:4e:6c:9b:e9:df:df:2a:70:5b:2a:
         7d:18:77:7a:6d:5e:d3:18:e3:33:df:17:70:9e:a6:c3:cb:c9:
         ad:af:e3:79:3b:c8:86:ca:80:35:e2:f2:9c:f5:db:b9:79:72:
         f9:c1:ef:af:c5:b7:e9:98:73:c6:df:37:40:49:30:ac:a2:a9:
         77:14:42:03:50:85:ff:a2:6c:3a:d4:d3:7e:b3:95:32:9c:66:
         36:d5:d5:31:a9:82:19:2e:e0:14:f7:24:70:2a:43:3a:12:a3:
         e0:1e:9b:4c:79:0f:b7:ba:29:6d:9a:fa:a5:b1:02:d3:0e:00:
         8b:5e:75:9b:03:36:4a:7f:d0:b8:db:12:e3:f1:13:0d:c0:e0:
         76:28:0a:13:d4:65:51:a7:9a:7e:65:5b:cf:b6:fd:99:0d:34:
         ca:be:5b:07:56:79:11:4a:f9:db:3a:21:e2:11:4f:88:c4:19:
         4f:1a:9b:7c:4e:c5:6a:7d:5b:5a:82:e4:9b:72:1c:a3:0a:06:
         ab:cf:89:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----