This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.cer
File:                     881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.cer (raw, json)
Hash identifier:          WTMXgktBJ9+NhpeeyPyMk7S9doT/ntoz+F+VafjwwJ8=
Subject key identifier:   88:1E:C1:E4:6E:E9:2D:7E:24:94:10:DC:AF:0E:5A:EF:68:F5:8D:87
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2FAAA752BDFC15872EFE205ABE4CC08A7CB24953
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Nov 2025 13:16:27 +0000
Certificate not after:    Fri 27 Nov 2026 13:21:27 +0000
Subordinate resources:    AS: 262620
                          IP: 177.86.16.0/21
                          IP: 2804:718::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:aa:a7:52:bd:fc:15:87:2e:fe:20:5a:be:4c:c0:8a:7c:b2:49:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 28 13:16:27 2025 GMT
            Not After : Nov 27 13:21:27 2026 GMT
        Subject: CN=881EC1E46EE92D7E249410DCAF0E5AEF68F58D87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b6:f9:d3:09:95:74:9e:6c:09:b3:4f:e4:32:
                    cd:9a:b2:77:b6:29:2c:b9:1f:c3:70:35:1e:25:13:
                    35:aa:e9:82:ef:42:c3:0d:bc:6f:58:09:5c:69:07:
                    7b:72:40:5a:cb:b2:68:b4:8f:b8:1d:83:68:60:0a:
                    66:b4:88:e2:43:f9:e3:bc:f9:fb:0a:36:fa:2c:49:
                    11:f5:65:d0:bb:7c:de:48:8f:f7:5c:03:a2:f8:4b:
                    77:bb:13:e0:2f:b6:b9:47:5f:d5:eb:b1:78:24:db:
                    5b:d2:fd:cf:6e:f5:17:7d:38:84:e4:b4:72:43:5f:
                    bd:7d:0f:34:10:4b:18:2b:0c:1b:e2:2c:6c:43:78:
                    48:e8:50:c0:66:04:8b:45:a6:d5:80:53:d5:1f:ca:
                    20:76:c7:3f:31:8e:a8:4e:ac:23:a4:c7:d2:98:69:
                    ee:6f:da:27:92:37:af:48:d8:dc:a6:e7:74:b9:dd:
                    87:8c:65:e0:15:cb:c2:7a:58:e5:c4:5f:86:7d:ba:
                    3c:d9:24:9c:15:3f:c4:0c:49:bb:7c:f7:f6:9a:c0:
                    63:63:3e:63:40:2d:6a:57:c7:9c:03:d2:67:6e:5b:
                    cb:7b:b4:10:fb:09:e3:da:a7:b4:06:e6:f3:d5:8c:
                    3f:d7:6b:20:c6:34:9d:27:f2:1d:8c:e4:ba:32:27:
                    93:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                88:1E:C1:E4:6E:E9:2D:7E:24:94:10:DC:AF:0E:5A:EF:68:F5:8D:87
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/881EC1E46EE92D7E249410DCAF0E5AEF68F58D87.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.16.0/21
                IPv6:
                  2804:718::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262620

    Signature Algorithm: sha256WithRSAEncryption
         17:e3:26:9d:eb:8b:e8:47:77:ad:63:d0:4f:87:79:b8:b4:43:
         32:af:a4:3a:90:6d:95:f3:e1:68:a5:70:c7:8d:36:98:c0:fb:
         a1:3b:1e:70:59:17:31:a8:73:77:30:d6:3b:a9:84:72:09:0e:
         6c:a5:12:ea:4a:18:b3:4e:c4:95:c9:11:6d:3f:82:b8:1d:64:
         e8:37:2c:10:7c:e0:e1:28:a5:eb:42:05:0f:c6:ef:f5:c6:10:
         e8:56:22:d0:bd:25:59:0f:53:5c:95:51:47:2a:19:04:02:06:
         b9:86:b8:60:c9:cb:68:b4:9d:a1:67:da:8b:24:0a:40:2a:99:
         37:c4:48:5c:02:2b:f1:17:54:3e:04:c3:7d:c9:c2:e7:17:8f:
         4f:4d:29:0b:c9:54:16:02:16:75:83:d5:15:1d:21:bd:1f:da:
         0e:36:ae:d1:40:eb:c1:c2:ab:08:d7:1c:b3:e5:27:59:ee:f3:
         5a:45:35:b0:1c:79:18:22:75:ef:8d:f0:7c:8a:6e:61:b3:d8:
         d2:b7:b7:4d:72:a6:26:d5:b9:42:dd:ba:c7:a9:4a:bc:bf:4c:
         57:eb:23:b0:4f:82:5e:03:2c:96:3f:00:c2:d0:23:b0:2f:fd:
         8f:91:eb:a7:50:19:d7:2a:9b:dd:a5:e5:92:35:16:d3:18:31:
         34:9d:ab:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----