This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E5202F9CD34E271BD75E3EFD06F888D3906752E7.cer
File:                     E5202F9CD34E271BD75E3EFD06F888D3906752E7.cer (raw, json)
Hash identifier:          7sR7CkvLqyaIM65xjUJWI0z5jbmQ42+wBFZBeAb/Dok=
Subject key identifier:   E5:20:2F:9C:D3:4E:27:1B:D7:5E:3E:FD:06:F8:88:D3:90:67:52:E7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       06079FE6EDD800DDC621C5DAB57D7F3299E69330
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/E5202F9CD34E271BD75E3EFD06F888D3906752E7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Nov 2025 16:16:40 +0000
Certificate not after:    Thu 12 Nov 2026 16:21:40 +0000
Subordinate resources:    AS: 271630
                          IP: 179.63.140.0/22
                          IP: 2804:7e88::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:07:9f:e6:ed:d8:00:dd:c6:21:c5:da:b5:7d:7f:32:99:e6:93:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 13 16:16:40 2025 GMT
            Not After : Nov 12 16:21:40 2026 GMT
        Subject: CN=E5202F9CD34E271BD75E3EFD06F888D3906752E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8d:e0:65:78:80:b3:ac:19:96:39:25:32:ff:
                    3f:21:30:b6:f7:46:83:1c:39:b8:16:49:e0:18:9d:
                    70:8c:e9:db:62:e7:ce:ca:f4:5e:ce:e7:96:44:8f:
                    4b:8d:ad:1d:62:80:67:99:2b:0e:b2:f1:48:79:53:
                    60:93:e6:0b:9f:e0:0d:01:70:6f:e0:69:e1:cd:7f:
                    9e:6f:0b:1e:45:14:9a:d3:aa:7f:7c:2b:48:5e:f7:
                    52:ce:93:7b:6a:2b:1f:f0:91:f3:a5:4a:d5:2c:82:
                    13:6b:76:99:e3:8c:56:8c:f6:61:99:31:e4:28:26:
                    df:d2:db:55:77:7d:c7:34:53:94:35:a3:3a:d8:52:
                    b1:43:47:76:e2:8e:84:f3:d1:a2:9d:7d:0d:6f:67:
                    87:07:1d:73:b2:cc:d1:a1:50:8d:ba:16:50:86:6f:
                    5a:fa:89:06:57:05:13:3a:97:65:68:28:18:e0:1f:
                    24:94:cb:bd:8f:8d:a6:7d:1e:d1:eb:bf:88:aa:a8:
                    41:24:0c:f8:80:71:ae:95:6c:c3:88:d8:08:bf:96:
                    06:ca:1d:22:05:ef:fb:51:f8:68:a9:95:76:02:5d:
                    36:24:42:86:aa:97:10:50:85:9d:9d:b5:87:61:0e:
                    3a:9f:f1:12:d5:50:0f:7f:2e:fe:2f:10:f5:52:01:
                    bd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:20:2F:9C:D3:4E:27:1B:D7:5E:3E:FD:06:F8:88:D3:90:67:52:E7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/E5202F9CD34E271BD75E3EFD06F888D3906752E7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.140.0/22
                IPv6:
                  2804:7e88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271630

    Signature Algorithm: sha256WithRSAEncryption
         3d:e8:8f:8e:a0:0f:64:58:ae:dd:22:a4:87:19:82:df:4d:3a:
         4c:48:12:95:ec:8d:4a:0b:d3:24:75:af:83:13:23:0c:87:bf:
         9c:e9:36:be:75:42:6c:6b:a2:28:bd:bc:a4:31:42:31:5b:f4:
         b5:8a:38:fc:9d:4b:6c:06:1d:d1:6a:ad:0f:98:81:01:62:13:
         f0:e3:fa:bf:9a:84:9e:68:fc:16:58:98:7c:68:01:d1:7d:3d:
         b4:78:fc:7b:76:b4:a1:0f:53:c4:c3:7c:a8:da:5a:fc:cb:bb:
         d3:ed:9c:6c:b5:70:d1:0d:30:72:3b:fc:8c:41:f1:a2:7c:ce:
         78:4d:47:b1:ae:00:bb:8b:c1:46:9c:0d:aa:dc:5d:e1:36:81:
         66:7e:dd:43:10:c2:c6:10:94:d5:1c:7a:7e:2b:1a:3e:2e:7f:
         2c:72:df:3c:30:b0:ec:b0:21:b7:6a:b6:4d:a9:ff:ef:96:96:
         09:16:85:fa:b4:e2:5c:06:9b:db:cd:27:9c:8a:90:1a:dc:62:
         c5:1e:56:78:8e:80:1f:0a:3b:2a:ca:2f:11:ba:14:60:71:02:
         0e:30:29:33:0c:f9:8c:67:b0:80:28:3d:4a:7c:67:c8:77:d1:
         91:b4:05:aa:75:bc:b9:37:b1:be:d0:1a:c8:35:b6:90:f6:70:
         28:39:b5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----