This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0238C29F1A3933E591F60C42B129ECFD8D0EF4D4.cer
File:                     0238C29F1A3933E591F60C42B129ECFD8D0EF4D4.cer (raw, json)
Hash identifier:          MjLoglzDOhE6a8ldhMsJRwO+K1VItcO8cz9rfTojBo0=
Subject key identifier:   02:38:C2:9F:1A:39:33:E5:91:F6:0C:42:B1:29:EC:FD:8D:0E:F4:D4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       46086682AA604274635A63650E2A4FBA46574201
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/0238C29F1A3933E591F60C42B129ECFD8D0EF4D4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 10 Jan 2026 03:52:26 +0000
Certificate not after:    Sat 09 Jan 2027 03:57:26 +0000
Subordinate resources:    AS: 267961
                          IP: 45.165.160.0/22
                          IP: 2804:55dc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:08:66:82:aa:60:42:74:63:5a:63:65:0e:2a:4f:ba:46:57:42:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 10 03:52:26 2026 GMT
            Not After : Jan  9 03:57:26 2027 GMT
        Subject: CN=0238C29F1A3933E591F60C42B129ECFD8D0EF4D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2d:f9:6d:4e:a0:17:71:c0:33:6e:36:e8:b1:
                    4e:52:c1:96:65:36:dc:3b:4a:13:5b:0d:34:dc:47:
                    e3:e1:b4:f7:c3:b6:ff:26:80:39:3a:cc:8f:f1:26:
                    35:0c:4d:08:16:fc:85:aa:dd:68:f1:f9:72:a7:ab:
                    9d:e6:4b:5a:d7:ff:4a:17:94:c8:d9:54:ff:f5:31:
                    df:c0:61:3e:82:7f:e9:bf:45:1c:62:f9:fa:a9:f8:
                    d3:2b:af:36:54:53:6e:b9:f6:d6:7d:e7:d6:4f:c0:
                    d6:55:b4:c5:b0:09:11:b9:0f:3a:16:66:4b:ea:94:
                    c7:a9:c6:65:c5:eb:69:7e:26:f1:9d:53:db:4c:39:
                    69:29:4d:28:a6:99:88:60:70:18:8e:ea:d6:85:25:
                    4e:91:eb:dd:96:e5:b1:3a:30:5d:25:71:1c:9f:82:
                    6f:6d:01:50:87:5d:9e:9a:79:0f:2e:4a:5f:b3:69:
                    c6:39:1a:fb:22:ad:22:67:41:2b:47:66:ad:79:b8:
                    f2:1c:8c:ff:94:9e:41:e3:21:87:5d:97:12:66:b8:
                    74:c9:18:69:f5:13:32:f6:f4:b7:e6:3f:72:da:df:
                    26:3d:86:8d:53:d3:b9:2d:86:34:b1:81:f4:51:76:
                    a6:11:bf:ba:5f:56:6f:07:e6:73:5d:43:bf:c9:c5:
                    19:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:38:C2:9F:1A:39:33:E5:91:F6:0C:42:B1:29:EC:FD:8D:0E:F4:D4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/0238C29F1A3933E591F60C42B129ECFD8D0EF4D4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.160.0/22
                IPv6:
                  2804:55dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267961

    Signature Algorithm: sha256WithRSAEncryption
         66:cf:f5:6e:7b:1e:8c:f6:4d:e3:bc:6d:84:43:1e:62:a9:29:
         ab:c4:f7:03:1a:ae:43:6c:14:69:ba:ff:ac:5b:6b:5a:4d:5c:
         92:3f:57:95:38:15:a6:44:da:d4:82:e7:ee:e1:bd:d6:8c:11:
         4b:55:f0:04:fa:f7:c6:a7:c0:7f:58:99:2b:ca:0e:61:41:26:
         40:dc:b4:18:c1:df:0d:b9:0c:74:da:95:18:eb:79:1c:50:de:
         86:a1:a1:77:cf:82:3e:1c:ef:10:0f:6d:2e:a9:f4:3e:95:ba:
         15:1d:e7:be:63:84:78:c4:dd:2f:af:fa:a3:a0:a1:44:77:53:
         f7:6e:8a:44:92:89:5d:c8:9b:f3:d7:8a:f0:a6:7d:60:2c:7b:
         c6:d5:bb:d3:fe:ee:8b:5e:34:02:9e:83:99:b8:ec:58:8e:7a:
         94:7e:50:71:e2:bd:e1:32:88:75:67:24:35:ee:b0:cd:20:6a:
         d7:2e:76:6c:fd:18:92:9f:ed:b4:a7:12:57:3d:46:c1:7a:c2:
         57:f0:1c:82:1e:3f:74:36:95:2a:06:f3:ca:2e:ce:5e:5d:f7:
         d3:fe:22:50:82:a8:aa:f4:db:6a:8a:b6:1f:5c:d6:48:c0:8a:
         9e:6d:f5:61:a0:37:10:ee:48:86:b8:2c:d6:fe:e8:0a:15:09:
         a1:91:49:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----