This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D7347A579D717176ED60950710B08583D0EE5541.cer
File:                     D7347A579D717176ED60950710B08583D0EE5541.cer (raw, json)
Hash identifier:          AD9BaaXwl6YC70dm6R4o6C5GTtq9W4Z/OAlvJms+Ju0=
Subject key identifier:   D7:34:7A:57:9D:71:71:76:ED:60:95:07:10:B0:85:83:D0:EE:55:41
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       023C2FB04E946B29A2583E1AD6EAD346BB93CCCE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/D7347A579D717176ED60950710B08583D0EE5541.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Dec 2025 13:50:29 +0000
Certificate not after:    Thu 17 Dec 2026 13:55:29 +0000
Subordinate resources:    AS: 273339
                          IP: 2804:8d28::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 13:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:3c:2f:b0:4e:94:6b:29:a2:58:3e:1a:d6:ea:d3:46:bb:93:cc:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 18 13:50:29 2025 GMT
            Not After : Dec 17 13:55:29 2026 GMT
        Subject: CN=D7347A579D717176ED60950710B08583D0EE5541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0a:0d:ae:2b:13:58:82:73:0c:41:f9:4c:89:
                    61:a9:e3:6e:64:42:7c:9e:0a:00:5d:ef:9e:4f:7b:
                    84:c7:d4:87:c0:26:d7:61:8a:f7:29:35:68:05:0d:
                    7d:a5:04:83:ef:76:02:2a:f6:be:88:f6:62:3d:60:
                    ea:18:16:eb:5f:f7:57:e4:98:4b:52:7b:91:ab:13:
                    4c:73:25:ae:c6:69:42:03:4c:b4:9d:f0:09:14:6a:
                    72:96:84:f7:e3:e5:df:f4:2f:ee:3a:2f:51:d2:ce:
                    57:3e:76:67:d7:fc:bc:9e:f6:c1:b0:a6:eb:34:12:
                    ba:1d:04:c6:9c:67:0a:2a:4f:5f:fe:cd:a9:49:79:
                    bc:e6:99:88:54:80:1b:7b:b1:4a:3e:1d:ca:95:a5:
                    52:0f:a3:57:6b:ea:af:8e:75:3b:ea:9f:b6:de:50:
                    09:54:e6:cb:92:e6:b1:5d:1f:5e:78:06:6e:68:97:
                    62:3a:eb:27:e6:ec:67:b9:33:e4:ef:74:cf:f0:22:
                    6c:65:e4:31:e2:23:b3:c8:c9:e6:94:01:52:a8:ae:
                    a9:06:ce:1c:d9:2c:c4:fd:6d:cb:14:98:65:f9:44:
                    83:89:b3:53:30:be:a1:89:7d:39:92:a1:d8:fa:7a:
                    65:e5:46:97:fa:de:f2:f6:a7:88:6c:95:a9:74:f7:
                    c2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D7:34:7A:57:9D:71:71:76:ED:60:95:07:10:B0:85:83:D0:EE:55:41
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/D7347A579D717176ED60950710B08583D0EE5541.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273339

    Signature Algorithm: sha256WithRSAEncryption
         60:d6:c8:5f:45:82:1a:df:dd:b8:90:b1:c8:72:63:a9:60:44:
         87:8a:9d:1d:23:0c:36:81:4e:58:d5:5c:0d:05:27:13:fb:d3:
         12:29:c9:6e:a0:51:62:49:a7:95:9b:13:4e:31:11:94:b3:06:
         f1:89:5b:29:09:ab:a1:6d:d2:2f:78:fb:63:6e:74:61:63:6b:
         ca:a5:b0:8c:94:2a:65:21:d3:7e:c3:41:ff:9f:1a:59:5b:f9:
         51:31:52:6f:3c:88:66:29:d4:a3:98:fd:e8:b2:f9:be:5a:5a:
         88:ca:85:c6:cf:dc:9c:bc:6c:79:5d:11:32:4a:e6:e0:14:a8:
         5c:f5:d5:ed:fb:98:cb:17:43:f5:78:fa:ad:04:6a:85:d9:7e:
         92:0d:fc:0d:bd:1b:a4:81:01:5b:4f:54:90:eb:9b:92:48:4b:
         1e:56:35:d9:80:10:b8:4d:95:36:21:88:af:6c:ec:f7:14:54:
         20:78:97:e2:34:55:dd:80:66:0b:06:c4:33:e7:68:3a:a5:54:
         94:d4:90:8e:40:29:fb:df:7c:29:67:81:04:b1:8d:28:1d:57:
         4c:67:6a:77:12:36:d7:41:5b:0d:4e:82:15:43:e1:11:8d:c5:
         0e:2c:47:8c:5e:36:d6:37:96:1f:fc:49:fa:51:a3:59:42:3b:
         dc:ff:6d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----