This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7D97FFCCB49C7F4473FB237860EB326C81C6666D.cer
File:                     7D97FFCCB49C7F4473FB237860EB326C81C6666D.cer (raw, json)
Hash identifier:          wgn8rLxkcKcs3yN/YfBj2FjIdPxwikDFHaYJIN/5cz8=
Subject key identifier:   7D:97:FF:CC:B4:9C:7F:44:73:FB:23:78:60:EB:32:6C:81:C6:66:6D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7F13A7ABC598E98E542ABC92F5628F8DA33D26A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/1/7D97FFCCB49C7F4473FB237860EB326C81C6666D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Nov 2025 15:07:38 +0000
Certificate not after:    Mon 09 Nov 2026 15:12:38 +0000
Subordinate resources:    AS: 53003
                          IP: 177.55.128.0/20
                          IP: 2804:5038::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:13:a7:ab:c5:98:e9:8e:54:2a:bc:92:f5:62:8f:8d:a3:3d:26:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 10 15:07:38 2025 GMT
            Not After : Nov  9 15:12:38 2026 GMT
        Subject: CN=7D97FFCCB49C7F4473FB237860EB326C81C6666D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a0:e1:91:9a:ee:74:8d:65:5d:8a:12:ba:70:
                    83:c6:ce:17:ee:60:b6:23:40:8f:61:0b:91:84:60:
                    58:ac:46:39:4d:92:d9:32:ff:22:34:0f:2c:bb:83:
                    91:3d:59:51:78:2f:ed:b8:91:27:27:59:ee:69:b8:
                    a8:2c:b2:6f:26:b8:ab:a7:36:c7:ef:0b:95:98:e8:
                    52:fc:aa:c5:49:39:b8:85:5b:4a:74:b5:a3:f1:a9:
                    5f:4f:ef:4d:dc:ec:2c:9f:13:bd:9f:43:a9:96:4c:
                    89:07:1a:9f:3d:9a:1a:34:0c:90:4f:98:7a:e2:5d:
                    a4:15:ce:ed:81:6b:93:0f:cf:53:ef:a8:62:cc:67:
                    f8:1c:74:89:03:43:81:4b:b6:9a:82:3a:4c:8a:bb:
                    81:45:fe:9e:67:26:db:be:96:75:1a:e0:c5:de:be:
                    c6:2b:5a:7e:0f:a6:d5:4b:cb:b7:bf:15:cd:49:33:
                    20:ff:e5:4f:5a:b5:79:4a:3b:77:15:76:c5:2c:de:
                    2c:a3:19:6e:62:44:54:7e:f8:d1:09:a7:6e:a9:f6:
                    b5:a0:ef:86:b8:ff:c6:07:64:23:e8:46:ec:77:c5:
                    2f:a0:8c:5d:d7:78:09:80:77:2e:c5:23:a1:dc:08:
                    eb:3b:4e:2e:d3:91:63:14:95:f5:b7:36:9a:e1:a8:
                    b9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:97:FF:CC:B4:9C:7F:44:73:FB:23:78:60:EB:32:6C:81:C6:66:6D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/1/7D97FFCCB49C7F4473FB237860EB326C81C6666D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.128.0/20
                IPv6:
                  2804:5038::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53003

    Signature Algorithm: sha256WithRSAEncryption
         07:ba:d0:01:d4:fe:23:de:7b:2f:c3:32:12:ae:a0:18:9f:c4:
         bb:5a:47:99:c7:48:e1:8d:50:a4:bf:09:1f:73:5a:a4:51:33:
         5e:42:5f:49:b9:41:cc:58:af:a0:40:6a:11:04:e4:4f:52:8b:
         ed:77:5a:e7:a2:ac:17:a7:d7:b2:dd:f1:8d:b8:b5:34:16:41:
         d3:43:eb:f2:bc:af:cc:80:65:ad:2a:b8:67:8b:46:c6:a5:41:
         55:e7:6e:de:fb:60:d7:fb:9e:1e:9f:8b:66:06:b6:81:70:38:
         47:91:4f:5f:e7:84:bd:10:c6:21:c6:26:87:9f:80:a3:86:76:
         b1:ac:75:45:40:21:41:f5:80:be:bc:7a:bc:a2:d8:e1:40:96:
         92:15:aa:34:6a:33:6e:49:02:f9:eb:b4:b2:35:bc:71:d7:f0:
         c8:39:88:e7:17:bc:73:ba:4f:10:6b:16:d9:fc:94:9b:03:4b:
         24:d0:b6:86:d8:45:57:c1:f2:04:5e:82:cd:af:f2:43:33:28:
         88:60:37:10:9c:8a:d7:c4:6f:ad:5c:af:26:63:61:60:bb:ea:
         71:31:4d:9d:f9:59:df:04:6a:ae:76:61:f2:03:2a:a2:c7:40:
         c1:58:03:92:85:34:af:7d:48:9a:dd:59:e0:ff:48:b6:4f:d0:
         5a:bd:6f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:37:09 2025 by rpki-client