This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7E25B2410A276EC70DB41D7E4B85B3D037E3E037.cer
File:                     7E25B2410A276EC70DB41D7E4B85B3D037E3E037.cer (raw, json)
Hash identifier:          /40Jy4wq9sOjwqu45zWDqiDfnzm6g15aVdUq7OivuEk=
Subject key identifier:   7E:25:B2:41:0A:27:6E:C7:0D:B4:1D:7E:4B:85:B3:D0:37:E3:E0:37
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4E54399C07CB6E6789C1B5D4986A606975073E91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/7E25B2410A276EC70DB41D7E4B85B3D037E3E037.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Nov 2025 20:12:34 +0000
Certificate not after:    Mon 09 Nov 2026 20:17:34 +0000
Subordinate resources:    AS: 263444
                          IP: 138.36.164.0/22
                          IP: 177.91.160.0/22
                          IP: 2804:11dc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:54:39:9c:07:cb:6e:67:89:c1:b5:d4:98:6a:60:69:75:07:3e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 10 20:12:34 2025 GMT
            Not After : Nov  9 20:17:34 2026 GMT
        Subject: CN=7E25B2410A276EC70DB41D7E4B85B3D037E3E037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4b:8a:bb:32:ff:db:75:d5:2e:87:68:46:18:
                    4b:f1:3e:a6:d9:2d:33:41:e5:e7:11:a6:74:1e:3d:
                    b2:bd:7e:66:6f:17:70:11:8e:67:ff:ea:d7:b5:02:
                    3f:f0:6c:ca:dd:07:89:f5:11:32:84:28:dc:20:25:
                    ac:a9:85:f5:7f:e3:65:6e:07:27:e5:6a:4b:44:4c:
                    2b:6e:96:a1:5d:1e:ed:e6:5e:7c:f3:9e:00:05:96:
                    e6:f8:8f:b6:6d:56:12:c1:56:49:85:a1:9f:e3:8d:
                    d3:ee:7f:18:d7:97:46:7e:92:c5:a6:27:4f:bb:be:
                    32:85:43:dd:6e:7f:7a:f4:d0:c9:27:f0:c8:dd:c2:
                    fa:0f:3d:d3:f4:23:24:b8:22:e5:53:bf:b6:f0:e8:
                    ea:0b:f6:06:69:66:d1:68:d4:4d:e8:36:3e:02:38:
                    04:f8:f1:50:a1:72:04:25:f4:0a:40:d0:f0:62:b5:
                    5b:8a:44:b7:48:26:0a:52:9b:7c:fc:f7:18:ad:7b:
                    12:a8:fe:8b:e3:87:28:dd:f1:ae:00:73:68:73:c4:
                    ef:67:d4:07:c2:55:2d:30:ab:75:88:d6:e5:74:6a:
                    7b:56:f3:88:a8:f6:68:9b:2d:47:77:f1:03:ba:39:
                    50:81:ab:63:d0:b0:9a:d2:07:46:40:ff:b1:d9:c9:
                    97:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7E:25:B2:41:0A:27:6E:C7:0D:B4:1D:7E:4B:85:B3:D0:37:E3:E0:37
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/7E25B2410A276EC70DB41D7E4B85B3D037E3E037.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.164.0/22
                  177.91.160.0/22
                IPv6:
                  2804:11dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263444

    Signature Algorithm: sha256WithRSAEncryption
         ad:92:75:e8:1b:b9:7d:c8:5f:35:06:9c:0f:0e:01:c1:56:86:
         90:80:37:fe:0d:a3:02:f7:69:54:02:74:60:d7:95:21:46:f3:
         67:c4:f8:7e:6b:fb:d7:27:eb:95:69:fb:8c:6c:85:a1:f3:9e:
         40:21:5c:90:20:28:e7:2e:f1:e8:a2:03:13:cc:17:bd:4c:e5:
         65:91:9e:98:3e:3b:2e:1d:c2:05:3e:be:eb:ea:45:3a:6d:3c:
         59:5c:64:b7:97:7d:4e:84:57:9d:c1:7d:b6:ec:43:94:bd:e5:
         b3:06:ec:72:d5:79:ad:ac:fe:97:7b:81:84:76:8a:bc:53:1b:
         2f:f2:fa:4b:20:c9:52:3b:7c:76:26:97:d1:b7:26:4e:9d:95:
         92:9d:78:30:a6:05:72:01:7d:52:4c:bf:0e:75:34:c1:6a:d8:
         46:cf:74:88:dc:90:43:62:50:34:03:a9:a0:b6:46:e4:76:06:
         9c:98:0d:f0:af:14:f0:19:4f:57:df:23:ec:0a:a8:32:47:dc:
         f0:e0:11:6b:f5:7a:3a:e3:94:95:ff:7d:59:f9:dc:3f:3b:46:
         1f:f8:6b:f2:ac:5e:fa:9f:c7:8d:3a:34:be:ba:14:79:d4:0d:
         4c:7f:16:5f:6d:84:6d:01:38:50:57:20:4b:02:fe:0e:10:6f:
         f7:f9:e4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:36:51 2025 by rpki-client