This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7D8B7C1B022D90A4E26EB00EEE79A68375511430.cer
File:                     7D8B7C1B022D90A4E26EB00EEE79A68375511430.cer (raw, json)
Hash identifier:          lpB6hwAvsBjFK8XBW4JtM7eBmYhGJgtDSjJ124P0rpc=
Subject key identifier:   7D:8B:7C:1B:02:2D:90:A4:E2:6E:B0:0E:EE:79:A6:83:75:51:14:30
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7F1B42BE541CBFB1E8C48252F9956FFC64CD0062
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/7D8B7C1B022D90A4E26EB00EEE79A68375511430.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Dec 2025 13:05:32 +0000
Certificate not after:    Mon 28 Dec 2026 13:10:32 +0000
Subordinate resources:    AS: 262567
                          AS: 263404
                          IP: 177.73.96.0/21
                          IP: 191.37.196.0/22
                          IP: 2804:15b0::/32
                          IP: 2804:45e4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 Jan 2026 08:03:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1b:42:be:54:1c:bf:b1:e8:c4:82:52:f9:95:6f:fc:64:cd:00:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 29 13:05:32 2025 GMT
            Not After : Dec 28 13:10:32 2026 GMT
        Subject: CN=7D8B7C1B022D90A4E26EB00EEE79A68375511430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c0:e1:27:3b:4f:9f:3e:0f:e7:b1:2a:2d:6c:
                    80:a0:76:ac:d2:aa:db:e3:02:6a:96:17:fe:d7:48:
                    68:f9:10:bc:11:e6:cc:70:dc:5c:c6:c8:5a:7f:77:
                    9f:97:e6:80:a7:70:04:cd:cc:93:b0:a9:06:7f:05:
                    96:7d:d6:52:30:77:cf:de:6f:bc:08:55:f4:74:3f:
                    a7:a7:21:76:1a:47:b5:ff:52:c1:8f:dc:40:cc:89:
                    89:a9:d3:f0:2d:db:15:a0:bd:f6:ed:23:38:b8:6d:
                    e4:31:35:02:3c:27:21:af:22:ee:b3:1d:1b:a0:51:
                    c8:64:11:41:27:79:01:d6:c9:56:99:a9:b2:38:ce:
                    c9:89:4a:21:22:68:29:6f:9e:0a:66:64:5f:8b:ec:
                    91:ae:67:e6:7c:c0:c9:6a:59:f1:30:ec:a1:1e:4f:
                    79:ed:5f:49:3b:1c:62:f4:6e:d7:81:2e:93:ba:22:
                    e6:0e:0c:1b:b9:33:72:d7:d2:5f:ee:65:80:d1:0a:
                    64:a9:5e:99:67:fb:e9:df:c7:6c:14:b5:98:dc:79:
                    da:ad:a6:42:ff:b1:a6:98:87:e1:96:6c:1e:66:c2:
                    2f:d5:a4:6d:33:58:99:8a:1d:f4:86:fa:4b:94:79:
                    d5:5a:26:d0:07:bc:9c:1d:dc:02:ad:eb:0d:bd:04:
                    dc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:8B:7C:1B:02:2D:90:A4:E2:6E:B0:0E:EE:79:A6:83:75:51:14:30
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/7D8B7C1B022D90A4E26EB00EEE79A68375511430.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.96.0/21
                  191.37.196.0/22
                IPv6:
                  2804:15b0::/32
                  2804:45e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262567
                  263404

    Signature Algorithm: sha256WithRSAEncryption
         ab:24:11:5f:5e:95:54:b8:ca:94:c5:00:1c:a5:7c:a1:bb:8b:
         21:f3:06:c1:18:06:20:3d:95:04:28:5d:7b:05:a4:41:7f:c7:
         ef:8f:7c:1d:69:61:66:a7:24:b9:45:f0:1c:b0:95:06:f7:9c:
         5f:98:cf:61:ce:31:8e:84:d8:96:af:c1:bd:34:14:96:be:ed:
         d6:fc:50:fb:a7:96:71:21:58:c8:44:32:66:0c:57:66:7f:71:
         01:82:7d:f4:f5:75:ec:a6:b3:06:83:42:4a:1a:15:4f:00:f5:
         e8:7b:3f:6d:af:71:59:21:c2:f7:e9:c2:9a:cb:92:88:68:28:
         f9:2c:00:8f:60:8f:00:77:e3:8a:a3:8a:eb:ed:df:73:96:8e:
         1e:35:e5:53:76:96:98:a0:3e:f2:11:8c:78:c3:84:a0:ae:8b:
         d1:ea:ae:70:33:29:33:b8:38:55:05:34:23:40:23:30:17:ee:
         58:fa:65:a4:a7:8c:77:95:71:9d:f4:d3:cc:c0:5a:58:3d:d3:
         fb:6d:91:ad:7f:81:31:27:97:08:78:a9:f7:85:4d:75:0f:79:
         77:84:0c:c6:07:e6:f7:de:1b:5d:cc:36:03:a9:6e:7f:4c:47:
         48:81:fe:1b:0e:c6:0c:a1:67:29:db:4a:c9:00:dd:e3:00:c5:
         42:a8:b6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 07:45:20 2025 by rpki-client