This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.cer
File:                     7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.cer (raw, json)
Hash identifier:          ONbYMTDfR7T8HkIb1YiyZVql1kpdjPe3nRWpN+XLVpE=
Subject key identifier:   7F:7C:D1:E5:D0:C1:63:1E:A3:C9:58:47:8C:77:82:D0:4E:B7:FB:37
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       784EEF55D595100C2F68250103793E29A2B69267
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 23 Nov 2025 01:45:44 +0000
Certificate not after:    Sun 22 Nov 2026 01:50:44 +0000
Subordinate resources:    AS: 270755
                          IP: 186.233.0.0/22
                          IP: 2804:70e8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 08:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:4e:ef:55:d5:95:10:0c:2f:68:25:01:03:79:3e:29:a2:b6:92:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 23 01:45:44 2025 GMT
            Not After : Nov 22 01:50:44 2026 GMT
        Subject: CN=7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1b:9b:44:8b:08:1f:f7:b3:47:2c:d4:e6:85:
                    da:cb:c0:65:db:18:23:10:eb:fd:1a:89:6c:bc:86:
                    07:7e:c5:23:17:de:6b:52:d7:36:f1:c5:06:70:0e:
                    10:03:82:0c:fd:e7:6a:73:99:6f:bf:9a:62:0c:9a:
                    9b:d2:44:51:8b:9a:52:a3:0a:60:9d:13:e4:4f:d3:
                    16:f5:7b:9b:1d:ab:8b:37:52:b0:07:ff:a1:87:f6:
                    af:e5:f7:b2:87:27:cb:35:03:c8:25:e2:3b:21:7b:
                    08:cd:43:b9:86:06:22:4a:b6:2d:bc:12:ed:40:aa:
                    dc:1b:7d:78:bc:76:1f:b2:16:00:5d:9e:05:be:45:
                    a0:6a:f1:fb:e4:c8:c1:cc:e1:fc:96:41:46:6c:f0:
                    8f:1c:82:0c:fc:64:3d:ad:e9:1a:0e:53:55:ab:d1:
                    05:a4:45:3f:9a:b2:74:21:ae:17:cf:d2:67:e6:9d:
                    41:b4:be:f3:65:1d:9c:f8:dc:b8:aa:c7:c9:bb:78:
                    c4:a0:c3:fb:9e:2c:6a:9b:00:0e:a2:a8:89:25:be:
                    b7:3a:26:fd:71:8f:68:5c:57:32:4b:6e:d2:a7:7b:
                    36:f9:7b:4f:08:7d:0e:ca:2a:f3:24:c0:94:63:6a:
                    41:43:57:2f:41:2e:88:80:66:64:f6:68:6c:9a:80:
                    14:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7F:7C:D1:E5:D0:C1:63:1E:A3:C9:58:47:8C:77:82:D0:4E:B7:FB:37
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.0.0/22
                IPv6:
                  2804:70e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270755

    Signature Algorithm: sha256WithRSAEncryption
         b2:87:b5:f5:73:d2:7e:83:33:6c:2b:fc:8f:72:e4:00:55:b0:
         c5:0a:0f:a4:69:2b:14:a3:e7:9c:7c:f9:17:a2:60:69:92:2e:
         db:f1:00:5d:46:40:1e:e4:0e:cd:2c:64:dc:b8:c0:36:15:ec:
         59:33:e5:94:a3:38:18:5f:d9:34:2b:e6:84:4f:45:5c:4f:a6:
         bb:1f:29:cb:a7:d2:cf:12:7f:51:38:c6:49:b4:c9:ce:72:2d:
         0c:c4:2c:17:9e:18:1d:79:1b:1c:f2:1e:85:2c:5e:d3:84:8c:
         a9:6a:a8:c7:4c:87:03:0f:57:60:76:47:e5:62:7a:51:ca:c3:
         85:36:2f:78:54:53:ba:90:1a:5e:d9:2c:6d:db:dd:93:dc:69:
         76:06:48:b8:2c:58:0d:69:ff:87:6a:df:bc:35:c9:68:9a:af:
         91:de:cc:fb:92:e1:66:44:e0:53:11:e1:1e:f7:34:c5:9f:37:
         39:15:b9:63:9f:2f:ca:0d:e0:e7:23:5e:fd:07:42:2e:21:aa:
         5e:53:69:b2:53:d4:b0:08:fd:98:e3:e4:83:69:44:6c:b6:28:
         1e:2c:66:df:15:0a:4b:2f:53:88:28:f7:eb:69:02:1f:ed:0b:
         62:66:12:c1:6a:bb:34:b3:34:6c:6b:1f:51:ac:cd:3a:ce:62:
         00:ff:5a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----