This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/07ED916E260CEE4493474E6E1B368CCEF212F6F0.cer
File:                     07ED916E260CEE4493474E6E1B368CCEF212F6F0.cer (raw, json)
Hash identifier:          lT35ryYYh9bIp8ErlS+2CeKMVbrXKmqQpys8GanLNyo=
Subject key identifier:   07:ED:91:6E:26:0C:EE:44:93:47:4E:6E:1B:36:8C:CE:F2:12:F6:F0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       41DC9D2A40B1A8B01B47627E3C14DF24B4C02625
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F3Dj3W3VPsMpxeRhHfXw864o4mQQxg9KoA3MSpMuDBmG/0/07ED916E260CEE4493474E6E1B368CCEF212F6F0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F3Dj3W3VPsMpxeRhHfXw864o4mQQxg9KoA3MSpMuDBmG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Jan 2026 20:10:18 +0000
Certificate not after:    Mon 04 Jan 2027 20:15:18 +0000
Subordinate resources:    AS: 265107
                          IP: 170.254.140.0/22
                          IP: 2804:32f4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jan 2026 08:26:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:dc:9d:2a:40:b1:a8:b0:1b:47:62:7e:3c:14:df:24:b4:c0:26:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  5 20:10:18 2026 GMT
            Not After : Jan  4 20:15:18 2027 GMT
        Subject: CN=07ED916E260CEE4493474E6E1B368CCEF212F6F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:85:4c:d3:9d:b8:e7:6a:12:ab:db:1b:17:c1:
                    be:c0:e9:ec:a4:1e:39:3b:7a:fb:3f:00:1f:b9:4f:
                    70:c4:39:95:34:3c:08:c4:6e:f7:45:d7:f1:a0:81:
                    c4:97:a3:48:da:42:67:53:b4:a3:22:93:19:26:70:
                    35:fe:87:15:f7:37:56:9e:74:21:6d:19:40:29:88:
                    40:8a:31:45:0b:a7:7f:17:5e:8a:42:60:4f:f4:64:
                    d2:79:f4:db:86:3d:9f:07:6d:45:b8:46:80:05:a6:
                    a7:7f:62:c9:8e:ba:f4:0b:9a:c1:bb:52:81:67:1b:
                    4c:d8:7f:1e:b4:d8:67:07:ee:ca:bc:69:d8:1f:ef:
                    7c:95:b2:89:9c:d9:67:9d:38:71:11:c9:7a:7a:05:
                    fa:3e:92:72:45:fb:07:ad:8f:bc:c9:b8:27:36:ad:
                    af:b3:ed:91:63:25:04:79:0e:a3:86:e3:70:87:31:
                    60:c5:68:9c:c3:f2:3c:2a:ff:1a:84:87:7d:07:6d:
                    fe:fb:ff:fa:09:55:20:89:9c:1f:e0:a8:07:e3:3a:
                    18:c5:cc:24:c4:ea:43:6c:b0:fc:e9:20:b8:bc:69:
                    0e:51:63:3b:fb:d7:59:c2:6f:a6:f6:80:99:1c:a6:
                    b7:e7:2e:89:ec:37:8e:d9:0c:f4:d2:24:88:6a:16:
                    f4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                07:ED:91:6E:26:0C:EE:44:93:47:4E:6E:1B:36:8C:CE:F2:12:F6:F0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F3Dj3W3VPsMpxeRhHfXw864o4mQQxg9KoA3MSpMuDBmG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F3Dj3W3VPsMpxeRhHfXw864o4mQQxg9KoA3MSpMuDBmG/0/07ED916E260CEE4493474E6E1B368CCEF212F6F0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.140.0/22
                IPv6:
                  2804:32f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265107

    Signature Algorithm: sha256WithRSAEncryption
         bb:e4:ed:e9:69:22:42:c6:ab:1d:cb:9c:78:55:76:4c:d5:38:
         2e:5d:15:b4:dc:32:b3:f6:e0:64:11:03:bc:c2:5b:ca:5c:cd:
         3b:27:df:d0:1c:3a:87:3c:62:67:fd:28:06:e0:75:19:33:75:
         85:c5:08:ba:91:65:1c:74:24:59:fe:90:f4:ce:b1:d7:3b:64:
         0a:af:45:5f:67:35:2d:ae:17:1b:7a:70:70:0a:92:3e:e1:8c:
         44:49:f3:ed:9a:6b:8b:4f:7d:bf:b9:f2:4c:54:a6:9e:8b:63:
         23:22:f6:d2:7e:1c:20:eb:63:49:4c:23:a9:49:94:d2:df:73:
         59:cd:ec:d8:ee:b5:66:c8:02:8b:94:75:6d:d1:0e:0e:13:40:
         f2:ec:9f:01:7f:08:bf:4f:84:a9:1f:60:ec:f9:02:a0:a1:eb:
         e1:e3:0a:69:7b:81:61:4c:9b:7b:d3:8d:7c:ee:79:70:08:d8:
         38:78:79:e4:ec:c0:5e:e1:36:81:cd:fa:11:14:3f:53:98:9d:
         a9:fe:19:be:da:89:07:f5:04:f9:23:04:65:39:48:37:d7:36:
         e0:f0:f3:27:e8:1e:46:82:b1:10:b4:f2:96:b3:72:6d:2b:9e:
         f1:34:55:12:3a:9f:ee:aa:6f:9a:e4:79:92:f5:91:80:47:7e:
         79:b2:f5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 08:56:34 2026 by rpki-client