This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer
File:                     7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer (raw, json)
Hash identifier:          ec8Q1l+OomtqK3oDlDr+JQNgrS/ppQWtOa5Z8jxjNqk=
Subject key identifier:   7C:A0:4A:87:EA:A3:58:34:E1:17:2C:5B:B9:6D:5D:B0:D0:B2:3D:C0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       77448C99663DF0CE315325B5357F36CBC1663A46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 13 Dec 2025 19:17:11 +0000
Certificate not after:    Sat 12 Dec 2026 19:22:11 +0000
Subordinate resources:    AS: 271120
                          IP: 179.48.192.0/22
                          IP: 2804:7690::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:44:8c:99:66:3d:f0:ce:31:53:25:b5:35:7f:36:cb:c1:66:3a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 13 19:17:11 2025 GMT
            Not After : Dec 12 19:22:11 2026 GMT
        Subject: CN=7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c0:e8:7b:88:e9:58:38:3c:69:d1:2d:7e:ec:
                    d7:e8:61:fb:cc:1f:cf:a1:1b:d7:9b:c8:c4:37:3f:
                    0c:54:a6:b1:3e:41:4d:e0:9d:59:8d:18:44:57:82:
                    c8:52:d0:2b:e7:42:d0:f6:f0:e0:3d:48:35:f0:07:
                    bb:86:a8:5a:9a:f9:d1:01:8c:b2:bd:42:7d:c4:00:
                    51:89:45:6b:6d:cd:df:c4:79:88:11:fe:a9:c8:3d:
                    a6:79:ee:11:df:2a:44:e7:8b:ca:41:00:d0:be:8a:
                    56:0a:68:ad:3c:2f:5e:56:7a:55:93:b3:f7:75:45:
                    10:d3:91:3e:bc:a9:ca:6f:6c:32:3a:f9:2e:52:65:
                    39:33:ae:8f:c6:9a:e8:1c:48:47:15:88:01:09:3e:
                    ce:8c:34:e5:81:e8:a6:0a:54:02:22:9a:7f:34:6f:
                    3a:ea:60:25:fe:43:97:af:83:15:84:5f:43:9a:82:
                    30:c3:59:41:3e:e4:6d:bc:bf:e6:15:8f:42:3f:26:
                    24:7a:e2:72:1c:18:09:ec:7c:a2:e4:58:9c:10:86:
                    63:4c:4f:39:59:75:9b:17:54:8d:b5:98:c5:3c:4d:
                    d1:d8:c8:22:62:69:41:d9:80:22:e3:1b:eb:ea:a8:
                    e5:67:b1:11:6d:f1:16:cf:d4:94:b8:c6:da:4f:35:
                    d4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:A0:4A:87:EA:A3:58:34:E1:17:2C:5B:B9:6D:5D:B0:D0:B2:3D:C0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.192.0/22
                IPv6:
                  2804:7690::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271120

    Signature Algorithm: sha256WithRSAEncryption
         1b:b8:b2:11:b9:ea:ff:55:46:7e:7d:08:58:7a:bc:b0:26:f0:
         46:da:d9:74:e3:c0:fd:3e:d2:05:80:6e:27:0e:e6:15:ea:bc:
         c2:13:d3:c0:ff:e8:32:72:23:90:90:81:ea:75:6e:aa:b9:50:
         26:a3:0d:7f:a6:89:43:d3:80:ab:d3:da:c7:09:80:c4:9f:57:
         90:92:a7:ed:a3:86:96:ae:db:05:5c:73:a8:18:0d:d8:29:24:
         62:7a:1f:31:0f:42:65:85:fa:81:a8:64:5e:69:05:fe:c8:a7:
         e8:9d:89:38:4a:7d:7d:28:f8:2a:ca:12:88:0e:0b:04:a6:c7:
         0b:52:ad:21:b8:18:4c:71:f7:fd:37:b4:ac:a3:12:fd:66:e2:
         c4:f8:5d:dd:01:3d:75:af:f9:5e:72:4f:9c:b9:43:cd:24:93:
         65:9a:43:cd:7e:a7:74:6b:97:65:15:ca:d0:c5:13:64:ea:5d:
         98:4b:f8:83:10:b2:a6:3f:4e:e6:ab:2d:01:43:08:37:e9:2d:
         a7:a5:ad:77:a3:79:f3:c9:2f:75:dd:07:84:66:5b:2b:dd:2e:
         7b:88:9d:6c:40:ca:09:b9:5a:f0:ac:6e:47:df:76:5c:00:1b:
         e6:3d:49:3e:75:5f:f2:0b:14:01:4d:48:fe:5b:f0:4e:1c:1d:
         ec:f3:39:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----