This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B0485678AE7155C65290067DA6041EB0A1652E4E.cer
File:                     B0485678AE7155C65290067DA6041EB0A1652E4E.cer (raw, json)
Hash identifier:          ZGNeT/g0xGUTnK0ycclfLuFCrwg8qfI+wYrCj05f71w=
Subject key identifier:   B0:48:56:78:AE:71:55:C6:52:90:06:7D:A6:04:1E:B0:A1:65:2E:4E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7A046833BFDDE5E3831129F2ADFA84DA2F4491ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/B0485678AE7155C65290067DA6041EB0A1652E4E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Nov 2025 16:21:48 +0000
Certificate not after:    Fri 20 Nov 2026 16:26:48 +0000
Subordinate resources:    AS: 262769
                          IP: 138.59.92.0/22
                          IP: 168.181.156.0/22
                          IP: 177.73.76.0/22
                          IP: 177.124.164.0/22
                          IP: 177.128.96.0/21
                          IP: 177.155.144.0/20
                          IP: 186.232.56.0/22
                          IP: 2804:224c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:04:68:33:bf:dd:e5:e3:83:11:29:f2:ad:fa:84:da:2f:44:91:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 21 16:21:48 2025 GMT
            Not After : Nov 20 16:26:48 2026 GMT
        Subject: CN=B0485678AE7155C65290067DA6041EB0A1652E4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:aa:69:51:00:05:31:95:62:89:16:90:8a:81:
                    f3:1c:7c:1d:2c:bd:fa:fd:05:4d:1c:6b:fe:d6:b7:
                    60:f6:4f:7b:ae:61:d3:86:9f:5a:c5:31:27:45:41:
                    3a:b9:6a:98:d9:d4:6c:44:14:f8:10:61:b9:e5:4f:
                    3e:77:e2:0d:5e:e0:9d:b7:ea:06:2f:63:c3:1e:78:
                    1e:75:28:01:8a:90:5b:c2:33:63:2f:66:81:96:be:
                    f8:35:2c:1d:68:b3:20:b6:93:26:fe:33:e1:75:af:
                    91:c5:da:78:37:1e:b8:0b:17:e8:ae:eb:f0:6e:4c:
                    08:f1:7c:17:a2:61:83:8a:3f:41:6f:74:0a:a9:e0:
                    62:f1:dc:ee:2d:c2:c4:97:00:a9:52:a5:15:cc:f8:
                    08:cc:35:4e:cc:6f:76:5a:d6:9e:4a:a0:6d:bc:bc:
                    73:e9:73:2b:a3:ac:16:5d:96:63:ca:07:84:42:bf:
                    27:71:6b:1e:8e:c6:47:1f:a8:a1:eb:f7:44:51:86:
                    b3:0f:3b:33:93:36:45:37:12:2a:97:42:52:0c:73:
                    65:1c:2b:54:b2:dd:7a:83:94:6e:a4:88:f7:72:8c:
                    40:38:16:cc:40:7b:dc:0c:45:e7:48:ce:10:10:5d:
                    a4:5f:74:4a:ca:17:f8:09:36:50:e8:e1:b1:88:31:
                    c1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B0:48:56:78:AE:71:55:C6:52:90:06:7D:A6:04:1E:B0:A1:65:2E:4E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/B0485678AE7155C65290067DA6041EB0A1652E4E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.92.0/22
                  168.181.156.0/22
                  177.73.76.0/22
                  177.124.164.0/22
                  177.128.96.0/21
                  177.155.144.0/20
                  186.232.56.0/22
                IPv6:
                  2804:224c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262769

    Signature Algorithm: sha256WithRSAEncryption
         2b:a9:55:c3:3a:2b:72:8e:49:03:5d:fc:5d:0d:cd:b7:1d:7f:
         35:f3:b3:7d:16:cc:ba:20:de:2d:ae:0c:04:47:5a:95:f7:ac:
         5c:64:2b:b1:b3:a0:af:9b:89:82:49:13:30:d9:e7:a2:90:56:
         6e:bc:1f:11:63:78:71:2f:85:97:5d:41:e3:16:1b:da:73:83:
         b6:91:67:ae:0b:5a:ab:57:86:94:bc:6f:98:3d:ac:7f:d9:6b:
         a4:6c:73:88:f5:3c:b1:50:09:c4:5e:1e:fb:6e:67:68:50:a1:
         d6:b2:2d:92:8a:ae:d6:e4:7c:45:ff:a3:a5:1f:74:c7:ae:95:
         04:b8:b5:eb:88:4c:0a:0d:cd:4f:64:80:cf:b5:b1:6d:78:0b:
         ff:f8:d5:08:8b:d6:fb:3e:89:4c:f4:f5:8a:a9:0c:dd:03:e3:
         e1:fa:ad:eb:11:bf:f5:ff:11:d4:b2:67:56:56:2a:f3:e6:13:
         fe:03:c2:b8:91:b0:0a:f1:b9:b7:4f:2e:9b:a2:66:47:10:61:
         3c:8a:78:89:d4:37:53:1a:9d:36:d9:c6:ad:18:d2:4b:7b:2e:
         2f:e9:89:8a:45:dc:2e:f5:dd:6b:2f:1d:77:b9:47:18:34:19:
         be:78:cf:bf:d4:33:ff:e4:41:b6:5d:64:a0:4d:de:6f:a5:6b:
         79:02:15:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:36:01 2025 by rpki-client