This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B7EEBDD2F44B2BFA00E377A3F5307578DFE81E63.cer
File:                     B7EEBDD2F44B2BFA00E377A3F5307578DFE81E63.cer (raw, json)
Hash identifier:          dCVCGDZs6cLUttkY6FWT6qCgFX0GV3PF9rkBXdeMfWM=
Subject key identifier:   B7:EE:BD:D2:F4:4B:2B:FA:00:E3:77:A3:F5:30:75:78:DF:E8:1E:63
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7793C15D7EE37F5CEF79877DB518D90269B506BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/B7EEBDD2F44B2BFA00E377A3F5307578DFE81E63.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Nov 2025 21:02:26 +0000
Certificate not after:    Fri 27 Nov 2026 21:07:26 +0000
Subordinate resources:    AS: 270707
                          IP: 189.127.156.0/22
                          IP: 2804:7020::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:93:c1:5d:7e:e3:7f:5c:ef:79:87:7d:b5:18:d9:02:69:b5:06:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 28 21:02:26 2025 GMT
            Not After : Nov 27 21:07:26 2026 GMT
        Subject: CN=B7EEBDD2F44B2BFA00E377A3F5307578DFE81E63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d9:0f:eb:48:5a:c4:6d:9b:43:2e:cb:fc:93:
                    6d:c3:28:bf:00:f3:cc:29:9b:69:a7:d6:8b:04:25:
                    9a:ed:71:05:f5:42:f7:93:db:93:e4:5e:a9:33:6b:
                    62:a9:44:c8:ac:91:a2:36:40:73:2f:cd:15:8a:0c:
                    aa:9a:a7:22:fa:8d:06:7e:51:59:8a:12:db:9c:96:
                    54:a4:ef:d9:46:78:02:49:06:e2:04:69:96:75:a5:
                    3d:49:08:70:b9:91:38:72:bf:8c:0d:6b:cf:95:a5:
                    f8:4d:17:f8:c3:f0:d0:4c:66:66:63:35:64:8a:34:
                    27:c6:34:39:e6:1d:43:e5:30:aa:49:d1:76:30:eb:
                    b9:3b:66:8c:9c:a9:e8:87:b9:47:e1:d5:d2:68:7b:
                    77:1c:9d:e5:dd:7b:e9:fe:9b:35:fc:60:cb:b9:7a:
                    49:a8:f0:28:02:4a:1c:66:c5:31:e4:d9:f0:98:fc:
                    fc:4a:92:4a:db:29:ed:a3:b9:93:e2:b6:98:d5:34:
                    37:19:b7:24:bd:4c:93:ab:7e:4a:c6:60:e0:b8:aa:
                    bc:67:c5:92:68:ad:a0:f7:f9:fb:00:3b:cf:ab:06:
                    24:86:23:7c:8c:ed:44:20:6f:fd:5d:07:2c:8e:22:
                    b3:8e:d5:10:e7:17:80:8b:21:26:e2:de:11:12:37:
                    d8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:EE:BD:D2:F4:4B:2B:FA:00:E3:77:A3:F5:30:75:78:DF:E8:1E:63
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GCfjw2QpBi6qT6nAvntviGD4rhyeRfUyy2ZwooQocPTW/0/B7EEBDD2F44B2BFA00E377A3F5307578DFE81E63.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.156.0/22
                IPv6:
                  2804:7020::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270707

    Signature Algorithm: sha256WithRSAEncryption
         1a:d8:09:29:f7:f6:5a:c1:89:1d:ae:1c:e2:2c:03:07:1e:1d:
         2b:49:7f:65:b1:89:f6:7c:d5:0f:4b:2a:ff:aa:22:ad:dc:5e:
         c6:7d:37:8b:bf:a8:5e:1f:33:c6:fc:1d:78:2e:2a:0a:37:5a:
         a2:b8:d7:5f:e3:c8:df:9d:88:fd:5f:17:8c:b4:cb:76:4d:dc:
         65:87:65:8c:57:cf:58:f9:eb:a0:4a:18:23:41:b7:0b:01:31:
         21:0b:b2:61:58:87:2b:cb:9f:ae:1f:97:bc:7d:c9:14:0f:cb:
         55:31:41:7d:31:df:11:2d:45:ea:34:17:12:1e:24:aa:42:1f:
         8c:99:09:8c:ec:41:3f:7d:fa:6e:57:9a:03:37:1f:e5:74:23:
         38:e8:91:bc:e9:34:7f:6e:d0:90:fd:8d:a9:30:39:ae:48:03:
         71:ca:07:05:80:cc:98:9f:f8:dc:32:39:29:32:0f:63:73:0a:
         46:25:a6:c9:34:38:5c:34:de:57:5c:00:8e:81:08:db:6f:da:
         d7:5a:0b:e3:f9:cb:12:7d:e4:ba:97:69:60:6d:0c:05:0e:c3:
         1e:3e:79:2d:56:a6:b1:34:f2:46:4e:32:03:55:d2:f9:95:63:
         dc:da:92:83:8e:0e:21:5f:7a:31:06:9e:da:9a:a0:0c:a0:97:
         a6:c0:f3:72
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUd5PBXX7jf1zveYd9tRjZAmm1BrwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTExMjgyMTAyMjZaFw0yNjExMjcyMTA3MjZaMDMxMTAvBgNV
BAMTKEI3RUVCREQyRjQ0QjJCRkEwMEUzNzdBM0Y1MzA3NTc4REZFODFFNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr2Q/rSFrEbZtDLsv8k23DKL8A
88wpm2mn1osEJZrtcQX1QveT25PkXqkza2KpRMiskaI2QHMvzRWKDKqapyL6jQZ+
UVmKEtucllSk79lGeAJJBuIEaZZ1pT1JCHC5kThyv4wNa8+VpfhNF/jD8NBMZmZj
NWSKNCfGNDnmHUPlMKpJ0XYw67k7ZoycqeiHuUfh1dJoe3ccneXde+n+mzX8YMu5
ekmo8CgCShxmxTHk2fCY/PxKkkrbKe2juZPitpjVNDcZtyS9TJOrfkrGYOC4qrxn
xZJoraD3+fsAO8+rBiSGI3yM7UQgb/1dByyOIrOO1RDnF4CLISbi3hESN9i1AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS37r3S9Esr+gDj
d6P1MHV43+geYzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR0Nm
ancyUXBCaTZxVDZuQXZudHZpR0Q0cmh5ZVJmVXl5Mlp3b29Rb2NQVFcvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dD
Zmp3MlFwQmk2cVQ2bkF2bnR2aUdENHJoeWVSZlV5eTJad29vUW9jUFRXLzAvQjdF
RUJERDJGNDRCMkJGQTAwRTM3N0EzRjUzMDc1NzhERkU4MUU2My5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCvX+cMA0EAgACMAcDBQAoBHAgMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQhczANBgkqhkiG9w0BAQsFAAOCAQEAGtgJKff2WsGJHa4c
4iwDBx4dK0l/ZbGJ9nzVD0sq/6oirdxexn03i7+oXh8zxvwdeC4qCjdaorjXX+PI
352I/V8XjLTLdk3cZYdljFfPWPnroEoYI0G3CwExIQuyYViHK8ufrh+XvH3JFA/L
VTFBfTHfES1F6jQXEh4kqkIfjJkJjOxBP336bleaAzcf5XQjOOiRvOk0f27QkP2N
qTA5rkgDccoHBYDMmJ/43DI5KTIPY3MKRiWmyTQ4XDTeV1wAjoEI22/a11oL4/nL
En3kupdpYG0MBQ7DHj55LVamsTTyRk4yA1XS+ZVj3NqSg44OIV96MQae2pqgDKCX
psDzcg==
-----END CERTIFICATE-----