This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer
File:                     70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer (raw, json)
Hash identifier:          DMVVs0IyRQWC6TgyKfQ3RJM4EafMQ4pEg4UyTzqODCY=
Subject key identifier:   70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6A1DF874BE04A16CE57AE87C2A58705C449C3DE5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Dec 2025 23:41:33 +0000
Certificate not after:    Tue 08 Dec 2026 23:46:33 +0000
Subordinate resources:    AS: 267991
                          IP: 45.167.52.0/22
                          IP: 192.100.223.0/24
                          IP: 2804:5654::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 13:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:1d:f8:74:be:04:a1:6c:e5:7a:e8:7c:2a:58:70:5c:44:9c:3d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  9 23:41:33 2025 GMT
            Not After : Dec  8 23:46:33 2026 GMT
        Subject: CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1e:c9:91:a9:3f:ba:20:1a:7d:64:7b:b0:54:
                    c6:78:8f:79:28:57:13:11:03:b6:9b:07:4f:a6:07:
                    c6:b0:30:80:80:0d:15:ed:6c:1b:d2:d5:dd:71:d9:
                    0e:d8:84:1a:0e:37:0e:c3:bb:f3:ce:c3:db:e8:2a:
                    05:2b:81:65:a7:45:19:24:c9:20:9b:37:52:f9:3e:
                    bc:03:4a:ce:86:bd:8f:9f:76:f6:ea:6d:e4:05:cc:
                    25:1b:b4:04:2a:a6:79:6b:d1:f8:87:aa:32:3a:f2:
                    96:d4:dd:80:13:c3:95:78:fd:ac:46:17:f9:69:e2:
                    ed:06:4d:f9:01:b7:b7:f9:5f:81:99:cc:78:5a:ce:
                    ef:ef:4c:d0:03:cb:09:5d:5d:5a:6b:c6:ef:0f:bc:
                    c5:eb:3b:f7:0f:c8:78:f0:95:6b:d3:64:ec:84:7d:
                    5b:af:00:a5:23:cf:bb:b8:e8:35:0c:45:e2:47:d8:
                    ef:01:70:e8:ee:82:91:86:5a:17:ae:95:00:ab:80:
                    6d:eb:a7:65:00:07:49:06:15:b3:74:d9:e0:e6:50:
                    9d:83:0d:ed:ed:90:f8:50:ea:a0:42:58:51:3e:a6:
                    31:a4:a4:aa:77:86:bf:43:a9:fd:af:94:ec:df:aa:
                    1a:f2:70:2f:6c:64:d3:a0:03:cc:03:f9:c6:34:2c:
                    42:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.52.0/22
                  192.100.223.0/24
                IPv6:
                  2804:5654::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267991

    Signature Algorithm: sha256WithRSAEncryption
         bb:23:5d:cb:98:d8:c8:bd:92:ed:03:fe:d6:55:87:e8:92:9d:
         fe:9a:d0:cc:d8:04:f4:22:62:a6:10:6a:c4:b6:3a:7f:bf:10:
         ed:bc:fb:9d:0b:67:f3:ef:33:b0:af:1b:61:8d:95:6e:18:93:
         30:e9:c3:dc:87:40:d5:35:7d:d9:4a:03:24:9e:8f:9c:81:5b:
         fc:ed:f5:38:db:9c:ec:fc:62:a1:aa:17:b2:34:0f:32:2a:90:
         a4:42:98:29:43:5a:e1:ad:50:9d:ca:0d:c4:15:f6:31:66:c4:
         27:be:65:15:54:23:68:88:c5:fa:85:47:7b:fb:d1:d6:e7:93:
         11:0f:9f:c5:97:c4:77:0c:1a:df:78:62:55:8c:fb:8d:de:4d:
         a8:1d:37:f1:5a:51:12:ff:04:07:e4:39:58:24:4b:12:b4:d4:
         2b:02:9b:d7:33:6c:73:0b:78:0e:e8:4b:68:ab:bf:b2:8d:c6:
         99:b9:c7:5b:0f:97:d5:f5:f7:fa:40:05:a0:8c:8f:2a:57:c9:
         28:b4:38:70:2b:2c:c8:7f:10:44:84:6c:49:30:ff:10:71:5f:
         4c:7b:0f:50:61:a4:07:21:bf:a2:a0:0d:b5:b1:4b:88:5e:58:
         5c:ab:44:f2:a8:53:4b:24:34:d3:41:3f:0b:92:1d:53:2e:2f:
         49:3e:ff:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:18:38 2025 by rpki-client