This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7BDBC337C92FD00887738D70F5C844F569B22491.cer
File:                     7BDBC337C92FD00887738D70F5C844F569B22491.cer (raw, json)
Hash identifier:          d1/FAnHFwvvDhl19KcK066iEWFmOC91RjV85LMywCQM=
Subject key identifier:   7B:DB:C3:37:C9:2F:D0:08:87:73:8D:70:F5:C8:44:F5:69:B2:24:91
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1FBDFE8DC95E9EE685015C04A9FEB7E4ABD6AA05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/7BDBC337C92FD00887738D70F5C844F569B22491.mft
caRepository:             rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Nov 2025 17:03:06 +0000
Certificate not after:    Fri 20 Nov 2026 17:08:06 +0000
Subordinate resources:    AS: 262690
                          IP: 187.87.240.0/20
                          IP: 2804:7348::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bd:fe:8d:c9:5e:9e:e6:85:01:5c:04:a9:fe:b7:e4:ab:d6:aa:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 21 17:03:06 2025 GMT
            Not After : Nov 20 17:08:06 2026 GMT
        Subject: CN=7BDBC337C92FD00887738D70F5C844F569B22491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7e:98:4b:1b:72:24:c9:c1:4f:78:cf:9d:6c:
                    9d:f3:f2:ab:9a:e1:db:37:5f:21:a3:79:53:af:08:
                    f2:40:29:3d:09:9c:86:8c:0a:ce:1d:87:e2:0d:4c:
                    be:f3:c6:7b:61:50:e4:74:77:ff:e9:9d:3b:53:ce:
                    26:f5:00:df:43:76:85:12:08:18:f9:73:71:1d:af:
                    a4:08:5e:0c:9b:ca:70:c6:60:5d:07:31:72:df:55:
                    3b:df:af:29:58:a8:c8:71:9c:12:ad:b9:b8:64:e3:
                    36:66:ac:4d:cc:56:9a:1a:67:27:c2:8a:2b:43:f3:
                    a5:0b:49:13:fe:1e:84:fb:ab:c7:2e:64:19:ef:ab:
                    a3:6b:37:91:a2:0f:b6:e2:d2:b0:32:e7:d5:27:08:
                    d3:13:6f:2b:1b:d8:ee:72:3c:2d:8a:c1:6b:e2:f0:
                    84:7b:ff:1d:f9:e1:b6:93:eb:01:41:d0:82:15:2c:
                    3c:fb:64:a2:58:5d:a4:9b:f5:70:4f:df:3d:eb:54:
                    5b:52:90:5c:90:86:fa:8e:10:83:7b:d6:01:e2:50:
                    db:7d:b2:74:a8:d4:03:a7:1f:c9:bc:1c:2f:78:26:
                    b8:1f:49:c7:31:18:d0:98:6a:ca:3b:72:9f:35:eb:
                    3e:a7:43:f2:e8:fb:e2:a6:c1:56:73:64:af:08:a4:
                    ec:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7B:DB:C3:37:C9:2F:D0:08:87:73:8D:70:F5:C8:44:F5:69:B2:24:91
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/7BDBC337C92FD00887738D70F5C844F569B22491.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.240.0/20
                IPv6:
                  2804:7348::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262690

    Signature Algorithm: sha256WithRSAEncryption
         83:d4:c3:85:10:d3:52:fe:d6:7c:e7:58:69:60:2e:13:78:04:
         b1:01:d6:93:87:1b:92:92:c2:81:ff:2d:2a:75:4b:ce:5b:72:
         3e:c7:18:c3:d3:e3:48:79:a5:46:f8:af:0d:42:45:fa:c1:73:
         b5:bf:26:e3:b5:e8:79:09:f6:7a:72:70:bd:fd:fc:da:ca:23:
         98:11:ed:d8:ef:1e:c0:bb:4b:7c:c1:25:7a:63:1c:a9:66:1c:
         8c:ee:d9:58:69:b1:df:97:36:99:38:61:8d:77:30:ff:53:5d:
         72:5a:82:27:4a:61:c9:c3:34:86:fa:08:9b:b9:74:6d:5b:3b:
         23:80:45:3e:ae:07:1d:15:ca:dc:3d:61:a7:f9:c8:94:e4:32:
         dc:0e:de:02:81:33:57:81:a1:dd:d8:78:db:25:5f:09:fe:6d:
         b5:94:72:79:31:5b:41:0c:3b:3f:2b:66:93:e5:24:60:6f:6c:
         3b:a9:f3:16:ca:fe:69:88:bd:b9:47:34:c6:db:fb:e2:de:38:
         a1:f1:a3:76:96:2e:36:46:f9:c9:67:1d:75:25:3b:47:e0:77:
         02:b8:66:26:a1:37:26:fa:88:5a:4b:8d:95:09:ec:10:e7:13:
         d5:0a:3c:c4:57:ff:7f:15:0d:ee:b7:fe:e6:f5:9a:63:48:0a:
         21:f3:50:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----