This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.cer
File:                     F467AB3AE70B7F3DF757D8DAF75654857A032A7F.cer (raw, json)
Hash identifier:          wBEZ9Enmg4r4glw2H7LK7cEqKYhlFI+24QhRNSImGb4=
Subject key identifier:   F4:67:AB:3A:E7:0B:7F:3D:F7:57:D8:DA:F7:56:54:85:7A:03:2A:7F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4456863EB2BFF7321F99DF964AE226B815678C8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Nov 2025 19:30:13 +0000
Certificate not after:    Thu 12 Nov 2026 19:35:13 +0000
Subordinate resources:    AS: 270701
                          IP: 189.127.132.0/22
                          IP: 2804:7010::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:56:86:3e:b2:bf:f7:32:1f:99:df:96:4a:e2:26:b8:15:67:8c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 13 19:30:13 2025 GMT
            Not After : Nov 12 19:35:13 2026 GMT
        Subject: CN=F467AB3AE70B7F3DF757D8DAF75654857A032A7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e8:2f:8b:93:73:9e:3a:a4:69:69:5b:47:d0:
                    ca:f9:38:8a:8f:56:34:b2:6b:59:5a:4b:fe:16:8b:
                    b3:a8:1c:28:df:dd:77:9a:6a:c9:6e:f9:c5:5a:9f:
                    07:30:f3:36:d4:be:54:61:f9:fb:51:5e:4c:f1:52:
                    5e:16:9a:75:48:79:1a:50:3c:ac:39:f9:64:d3:d1:
                    1d:c0:15:06:12:9a:65:2f:09:46:70:bb:36:f0:71:
                    01:c4:78:c0:a9:20:15:59:ef:b9:d3:48:70:8d:11:
                    4c:60:12:62:9e:7e:de:c9:c4:79:8b:b2:e0:ab:d9:
                    cb:f5:73:59:cf:e6:04:d6:f6:0a:3b:93:3a:90:b0:
                    4b:4c:ce:70:b0:af:5c:ce:53:89:97:85:95:b2:cf:
                    3a:19:38:e5:31:a0:54:70:99:ef:66:ac:c0:1c:c7:
                    4c:4c:0e:44:3a:0f:d1:60:28:ad:5f:0c:2d:c3:d0:
                    92:27:d1:17:d8:e9:7b:6d:5e:4c:24:4a:55:05:5d:
                    ee:d0:0c:29:c7:9f:d5:cc:db:5f:49:0c:ab:de:7f:
                    02:eb:70:b6:69:9b:88:18:9e:6c:29:e9:5f:97:eb:
                    c0:dc:37:64:ff:1a:4e:dc:3a:e0:ef:0f:00:bd:3c:
                    a7:03:40:21:71:37:86:8f:9d:49:72:70:4c:65:9b:
                    ef:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:67:AB:3A:E7:0B:7F:3D:F7:57:D8:DA:F7:56:54:85:7A:03:2A:7F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7QkxyKky3FX4TdEkUJYdopMPrWV2uTPkSMuFSinq21Xq/0/F467AB3AE70B7F3DF757D8DAF75654857A032A7F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.132.0/22
                IPv6:
                  2804:7010::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270701

    Signature Algorithm: sha256WithRSAEncryption
         32:5d:6f:b4:8d:8b:02:5f:ff:76:ab:d6:e6:6c:47:03:a5:16:
         58:1a:29:68:ac:f1:26:d5:a5:c8:0c:bb:e5:48:f4:66:25:af:
         20:cb:9e:fc:9a:34:10:c7:5e:de:2c:88:91:73:64:2c:b1:05:
         05:f2:f4:08:ce:71:23:b8:76:75:8d:ca:51:30:95:cb:17:11:
         ae:b8:5d:28:6b:3f:5a:aa:1c:c5:d6:0f:bb:d9:7f:07:46:60:
         6b:aa:22:4f:bf:c2:cf:f6:be:47:39:da:77:8d:49:5e:5f:cf:
         68:2f:b1:1e:78:43:fd:33:53:f1:ff:9c:b6:ca:3d:1f:0e:07:
         b5:2f:00:4a:d7:94:f1:67:6c:eb:84:1a:8d:60:59:30:18:df:
         9d:b9:13:a5:85:37:a4:f4:ec:16:51:b8:d0:22:2a:7a:fe:8f:
         8a:d7:57:3c:1b:3f:18:da:02:14:3d:15:76:41:c8:6b:cd:4a:
         16:c0:76:25:01:c9:9a:37:cd:49:4d:9c:64:f5:9c:93:f1:3c:
         be:75:a5:e5:90:f0:13:bf:88:87:34:3a:43:37:3e:ab:b4:eb:
         c2:a5:8f:86:0e:91:ba:d8:a0:a4:b1:65:af:ff:c9:db:30:f6:
         0b:8e:e3:f6:b4:9a:f0:38:33:e7:46:35:a2:33:25:ac:c1:66:
         e8:2e:cd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----