This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7B04A89A0EFB0F6326A5EC37FBB8AFF4248B6240.cer
File:                     7B04A89A0EFB0F6326A5EC37FBB8AFF4248B6240.cer (raw, json)
Hash identifier:          YD2bVM8opmhvbrjU7INVUEMsQ3yqodnixzEQjO7af68=
Subject key identifier:   7B:04:A8:9A:0E:FB:0F:63:26:A5:EC:37:FB:B8:AF:F4:24:8B:62:40
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4CB33A4A41FCA066ED7D00F28DBF7D818F46BF52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/7B04A89A0EFB0F6326A5EC37FBB8AFF4248B6240.mft
caRepository:             rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 Dec 2025 13:09:39 +0000
Certificate not after:    Wed 30 Dec 2026 13:14:39 +0000
Subordinate resources:    AS: 270254
                          IP: 45.191.40.0/22
                          IP: 2804:6930::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 Jan 2026 12:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b3:3a:4a:41:fc:a0:66:ed:7d:00:f2:8d:bf:7d:81:8f:46:bf:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 31 13:09:39 2025 GMT
            Not After : Dec 30 13:14:39 2026 GMT
        Subject: CN=7B04A89A0EFB0F6326A5EC37FBB8AFF4248B6240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:58:70:23:ac:3e:57:56:0f:3c:3d:53:ef:8c:
                    20:6c:21:f7:8f:eb:91:b4:8a:44:2a:c2:45:42:b1:
                    3a:09:15:59:82:3d:0e:1d:de:de:93:f0:e0:73:0d:
                    b4:f6:7f:d9:68:48:c5:a4:bc:a3:75:9a:ab:ac:e1:
                    05:13:8f:d9:af:fc:d1:4a:7d:f0:3b:1d:e9:53:b3:
                    dc:ad:d9:5f:8a:4b:90:b5:42:18:e9:10:62:16:b4:
                    43:ca:5c:ca:f8:77:8b:81:75:36:83:86:d8:19:67:
                    b2:af:7e:81:40:43:eb:30:29:ac:da:30:31:a6:6c:
                    a3:c1:ab:0f:c0:82:e5:93:a2:01:3b:fa:6f:66:b7:
                    93:77:e3:fe:88:f9:36:89:03:19:9a:e8:cf:0c:91:
                    5c:03:ad:66:26:66:66:37:bc:04:2a:97:be:95:33:
                    82:d2:a3:ff:73:1d:b7:ae:4c:3b:0c:ae:4c:2e:e6:
                    13:78:b0:ce:44:35:e4:3c:b7:18:db:17:df:2e:9a:
                    1b:8d:6b:56:f9:e9:1e:db:64:61:58:35:55:db:32:
                    c0:9e:ec:51:ff:ab:0a:51:b4:ed:2b:03:00:ec:97:
                    69:dd:10:76:8a:71:e0:a3:35:a6:09:85:45:56:2f:
                    54:f5:dd:ba:66:b3:64:2f:a2:bd:fc:68:28:f3:c8:
                    0c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7B:04:A8:9A:0E:FB:0F:63:26:A5:EC:37:FB:B8:AF:F4:24:8B:62:40
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/7B04A89A0EFB0F6326A5EC37FBB8AFF4248B6240.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.40.0/22
                IPv6:
                  2804:6930::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270254

    Signature Algorithm: sha256WithRSAEncryption
         49:63:2b:5b:f2:fb:24:eb:7a:f7:82:00:7a:77:d5:93:d6:27:
         d6:e9:df:23:40:c6:43:69:0e:bc:00:96:e6:73:29:08:ea:de:
         ba:d4:77:94:90:26:d1:83:6b:2f:e5:83:28:91:04:3a:8a:b2:
         16:f4:04:9d:c8:bd:89:a0:84:de:21:e5:1b:3a:c1:d2:7b:14:
         9c:66:3b:e1:fb:2c:bf:f8:ff:9f:67:22:9d:78:3a:ab:af:56:
         fa:16:28:7f:4f:eb:f0:c2:30:11:8d:55:2c:b0:a5:88:51:c1:
         68:c9:ba:f6:cc:a3:99:99:14:83:a3:86:61:5d:5b:8a:d0:d3:
         89:ac:ec:03:8d:dd:4d:88:48:be:d7:79:0b:0a:95:c4:ac:f4:
         68:72:9f:e2:6e:ff:ba:e9:02:68:42:c0:6b:a5:f2:66:96:e3:
         67:79:8d:39:13:01:f7:34:21:ca:17:03:11:e1:fa:5c:f9:d3:
         6f:3b:c7:4e:92:45:29:f0:b8:59:da:f6:43:17:1c:cd:31:be:
         21:ef:38:78:9a:1c:53:ce:c8:65:ef:c8:9c:43:ad:9a:bd:d4:
         af:18:17:2b:25:85:5c:f5:af:6f:cf:b6:d6:7b:61:1f:4c:11:
         48:18:e6:83:ba:79:fc:6c:9c:fe:93:44:ac:af:c6:0c:e0:64:
         87:2f:dc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----