This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer
File:                     D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer (raw, json)
Hash identifier:          HkcIg6lNzu+SIiL1U7zAb/Y1kEXRcB72eJZsiv3gGpw=
Subject key identifier:   D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       35EF98E94864DDD36379B59F4B9D60CE81B9198E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft
caRepository:             rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Nov 2025 17:40:37 +0000
Certificate not after:    Tue 24 Nov 2026 17:45:37 +0000
Subordinate resources:    AS: 273755
                          IP: 2804:8bbc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ef:98:e9:48:64:dd:d3:63:79:b5:9f:4b:9d:60:ce:81:b9:19:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 25 17:40:37 2025 GMT
            Not After : Nov 24 17:45:37 2026 GMT
        Subject: CN=D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e7:fc:f8:58:7c:dc:a9:83:02:e0:7a:7f:a9:
                    6a:e1:78:cf:3e:61:9e:b6:c8:b9:29:b0:03:cb:a6:
                    d3:2e:1a:c5:e8:4a:e0:66:5a:68:c3:4a:c3:e2:ca:
                    93:76:87:65:4f:39:bf:8d:1b:d5:04:36:9a:65:59:
                    2f:00:22:32:1d:bd:72:2f:8e:fa:85:c7:a1:1c:0d:
                    4a:6b:88:84:83:a1:e6:d8:48:b8:1b:e6:d9:68:c0:
                    a7:23:78:01:1d:a6:2d:7a:f2:c6:af:72:b4:8e:f6:
                    45:d0:ca:2a:1a:71:46:d3:d5:f7:0c:a3:21:e1:85:
                    5e:24:c0:2a:db:ba:5d:2b:66:42:b3:5a:51:e3:57:
                    dd:f2:9a:0c:3b:cc:bb:d2:3a:f5:34:2a:ce:51:71:
                    c8:56:d2:3a:1e:6a:70:12:a4:c6:bc:f3:21:9b:4c:
                    3a:e4:60:c5:c7:52:da:2e:a0:0a:36:eb:d5:ce:81:
                    4c:06:eb:15:d7:d6:3e:a3:96:24:06:6e:22:4e:74:
                    e2:51:17:85:3e:84:07:08:83:80:e0:0d:bb:cd:09:
                    15:dd:51:62:f5:dc:4c:39:58:97:d2:3f:4b:25:bf:
                    19:19:60:27:62:98:20:2c:54:75:f1:29:ff:ca:71:
                    39:87:f1:8a:d1:f7:a1:b4:14:c1:0d:0c:88:5b:2c:
                    28:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8bbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273755

    Signature Algorithm: sha256WithRSAEncryption
         00:a4:15:6c:2d:b0:a9:2f:13:de:59:1a:40:4d:9c:03:ea:0c:
         66:d3:6f:51:d4:9f:a8:48:10:57:16:6a:2e:4b:04:8a:7d:3d:
         f5:b5:34:3d:6a:6b:3d:bc:01:98:e1:70:a2:ed:b8:98:17:8b:
         29:51:b1:23:d3:13:46:5d:0d:fa:19:d3:53:ff:96:a6:37:ae:
         93:ad:67:f6:67:2b:73:85:cb:ee:0d:3f:89:b3:fc:29:12:0b:
         f6:cb:18:8d:da:b5:40:e8:7f:8c:ba:cc:eb:24:94:23:82:f3:
         bb:1d:2a:0d:3c:b9:5b:64:23:80:0f:26:29:34:b6:ab:8a:da:
         7b:f5:64:da:86:7f:77:f4:ec:e5:76:70:77:7b:09:68:9c:c7:
         f0:d0:ac:48:05:43:af:21:ba:98:6d:af:d0:db:a2:07:d8:e4:
         55:97:19:a5:03:9f:ed:07:c0:c2:49:76:0f:41:f1:f4:a2:88:
         d7:2e:14:35:42:b2:df:76:f4:79:8c:26:e3:f7:d2:48:ed:ef:
         50:d9:a0:08:12:56:b6:35:7e:6a:64:c1:3f:6b:88:d9:48:68:
         f9:3e:38:d0:98:bf:58:15:d4:ca:c0:12:53:43:a4:89:97:ea:
         18:51:91:09:f2:69:b4:28:64:b9:a8:cd:2a:48:f1:18:5e:2e:
         17:a7:5f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----