This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8143365EC03B442AF53A35FA0E20673F19DBDD1D.cer
File:                     8143365EC03B442AF53A35FA0E20673F19DBDD1D.cer (raw, json)
Hash identifier:          +DFxsgr8KcCmCjYNDxB8ZP+LwE9M43Hs7E3YV0EZs4I=
Subject key identifier:   81:43:36:5E:C0:3B:44:2A:F5:3A:35:FA:0E:20:67:3F:19:DB:DD:1D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7BFDEBEF558B778BE4C59996A8A2C78B96091DAE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HrW98u99qfrwJd4zfugkRjU84dFmUR3Pux8dCm7kXkJ1/0/8143365EC03B442AF53A35FA0E20673F19DBDD1D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HrW98u99qfrwJd4zfugkRjU84dFmUR3Pux8dCm7kXkJ1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Nov 2025 02:49:46 +0000
Certificate not after:    Fri 27 Nov 2026 02:54:46 +0000
Subordinate resources:    AS: 270866
                          IP: 131.255.0.0/22
                          IP: 2804:72a4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:fd:eb:ef:55:8b:77:8b:e4:c5:99:96:a8:a2:c7:8b:96:09:1d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 28 02:49:46 2025 GMT
            Not After : Nov 27 02:54:46 2026 GMT
        Subject: CN=8143365EC03B442AF53A35FA0E20673F19DBDD1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0b:ce:18:9d:6d:39:3c:2f:7f:6f:cf:da:7e:
                    71:84:9d:05:fb:c8:30:ad:9c:80:aa:25:d1:84:4c:
                    ed:fc:a6:06:32:c1:39:98:0a:25:98:5d:1a:21:7d:
                    55:89:75:e1:6c:11:8d:13:19:e3:d9:3d:b6:ce:a5:
                    a8:48:e3:84:2b:a6:fc:1a:fd:7e:34:a7:92:52:11:
                    60:59:a4:3e:a3:b9:89:87:3c:17:88:1a:de:60:cb:
                    cb:b0:bf:6f:c5:83:d2:17:9d:fd:27:7d:d3:11:36:
                    64:08:35:85:5f:07:41:e1:68:85:4e:61:3b:82:30:
                    a9:b7:ff:ad:a1:58:73:a1:ed:52:ce:1e:4c:c6:5a:
                    83:1b:f8:c4:59:6d:50:4a:b9:10:50:38:9e:c9:dd:
                    87:fd:78:25:79:d6:ea:34:2a:2d:77:83:cc:5e:1d:
                    2a:c2:d7:25:bc:87:17:2e:13:06:52:ea:bc:be:7c:
                    47:7e:67:0a:e1:63:dc:ec:e9:d9:77:17:3a:24:8c:
                    3e:fc:45:29:cf:ae:51:f6:55:fb:ef:24:b9:d3:f0:
                    59:46:94:76:8c:48:e7:6b:3d:26:58:08:1a:63:37:
                    d0:12:9b:11:f5:c7:61:89:2b:70:d4:4f:03:d6:4b:
                    b8:27:9a:05:34:90:b8:04:54:8a:d2:ae:04:b5:7e:
                    25:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:43:36:5E:C0:3B:44:2A:F5:3A:35:FA:0E:20:67:3F:19:DB:DD:1D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HrW98u99qfrwJd4zfugkRjU84dFmUR3Pux8dCm7kXkJ1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HrW98u99qfrwJd4zfugkRjU84dFmUR3Pux8dCm7kXkJ1/0/8143365EC03B442AF53A35FA0E20673F19DBDD1D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.0.0/22
                IPv6:
                  2804:72a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270866

    Signature Algorithm: sha256WithRSAEncryption
         94:68:15:46:2c:cd:ae:3d:9a:27:6a:d9:ff:20:06:48:7c:1a:
         c1:9c:88:7f:0b:91:45:93:4e:fb:3d:77:84:ea:4e:22:f5:cf:
         dd:13:28:bd:c3:50:62:18:11:6b:1c:38:87:46:97:22:ac:ce:
         4f:84:97:a1:a2:cb:28:38:95:69:e0:9d:34:5e:7b:3b:23:e4:
         a8:20:f8:28:10:b7:d6:a4:3e:5e:6b:f3:a8:5b:4e:60:14:1c:
         a2:f6:98:3d:ff:50:96:04:d0:c7:20:ca:9d:96:5e:7e:28:e9:
         f4:fc:46:72:5e:c7:ed:21:73:c1:e9:4f:a5:5b:5a:a1:27:9a:
         c1:c4:1b:3b:e1:e7:7a:f0:a6:97:96:0b:5b:15:3c:cc:c4:2d:
         45:63:d6:af:12:09:c2:b9:45:7d:67:e1:67:5c:24:3d:2c:58:
         54:03:cc:82:80:c4:b8:3a:7f:d4:fc:51:77:2a:69:ee:3e:60:
         c1:25:91:d9:53:07:8a:3d:8d:e8:37:5e:74:39:f0:ae:b1:bf:
         0b:e2:ae:cc:c5:8a:bf:c4:2c:e8:ae:dc:df:e7:be:44:82:26:
         44:5f:4c:6e:6e:d6:a7:a4:83:a2:06:c6:b3:9f:05:19:37:45:
         5b:c5:89:fb:79:f2:df:cb:f9:87:3a:f6:f7:19:34:b6:c6:b9:
         d3:9b:59:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----