This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.cer
File:                     06F66D58259F2CB3C0146BED5F4B1E79A86988F2.cer (raw, json)
Hash identifier:          FNQmF5MMkTybDVq/Yznb6qD+xDbAMeRvBTE/N3BA8lc=
Subject key identifier:   06:F6:6D:58:25:9F:2C:B3:C0:14:6B:ED:5F:4B:1E:79:A8:69:88:F2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       69B42ED1D1C20E4753018BD6FB445481F1131D2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Jan 2026 13:01:16 +0000
Certificate not after:    Fri 15 Jan 2027 13:06:16 +0000
Subordinate resources:    AS: 268307
                          IP: 45.237.240.0/22
                          IP: 2804:4f24::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b4:2e:d1:d1:c2:0e:47:53:01:8b:d6:fb:44:54:81:f1:13:1d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 16 13:01:16 2026 GMT
            Not After : Jan 15 13:06:16 2027 GMT
        Subject: CN=06F66D58259F2CB3C0146BED5F4B1E79A86988F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f3:90:94:66:2e:f4:c4:55:33:3b:7c:41:63:
                    dc:0f:96:1f:d4:6c:24:3e:da:74:2f:d1:91:a5:3e:
                    46:37:31:18:9a:b0:ba:d3:83:25:f8:04:c9:13:1a:
                    2c:36:2c:24:08:e1:3d:af:b7:aa:06:9a:81:1f:37:
                    a7:1e:e5:91:7d:50:92:15:6c:b5:12:fe:53:4e:f7:
                    4e:74:e6:00:d9:25:39:60:c2:d5:cf:08:1d:a0:4b:
                    d6:0b:03:4f:2b:2c:73:47:77:0d:52:a1:42:4e:a6:
                    b6:6a:e9:46:49:86:c0:01:93:e6:6e:cc:0b:93:8f:
                    99:c1:e0:44:69:82:c7:3a:e3:48:df:21:fc:bc:a3:
                    a8:89:1b:3a:b2:0b:32:3a:39:bb:95:b6:7f:00:ac:
                    00:aa:ab:a6:0e:f2:56:5a:44:88:ae:ee:65:a0:16:
                    0a:1d:0a:71:0d:1a:f5:55:15:5d:21:44:74:10:7e:
                    6e:72:e7:f3:9a:06:d4:63:c2:79:0c:6a:6b:29:01:
                    8e:de:7b:04:99:13:ac:31:17:6b:a9:59:e9:01:bf:
                    4b:eb:41:5c:cc:4c:80:7e:9a:ca:e4:a6:e9:1b:2e:
                    11:50:75:f4:aa:dc:c6:68:17:a5:e0:b7:fc:e6:2e:
                    7b:78:9e:60:bb:d4:93:42:49:61:da:61:96:94:8d:
                    f1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:F6:6D:58:25:9F:2C:B3:C0:14:6B:ED:5F:4B:1E:79:A8:69:88:F2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.240.0/22
                IPv6:
                  2804:4f24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268307

    Signature Algorithm: sha256WithRSAEncryption
         da:8a:2b:9a:58:6b:44:1e:10:22:ac:0b:c1:44:4a:d8:e0:cf:
         16:31:80:42:16:d8:18:c7:51:62:f8:70:bb:fc:49:e8:b7:83:
         63:02:1b:ed:e7:4d:00:72:e6:40:de:88:55:25:d3:a3:ce:b9:
         b9:0d:c3:58:db:9f:bb:68:ce:eb:99:97:23:76:6d:da:13:70:
         0c:4c:7a:d9:36:64:cb:00:91:97:65:e8:19:8a:3b:b8:23:1f:
         0b:ba:44:3b:10:a5:b0:f4:c7:9d:ae:06:b6:74:15:c5:fa:c6:
         7b:e6:10:ac:a9:d4:ea:b3:dc:af:a7:fe:b0:25:5f:eb:f0:4e:
         c9:59:72:00:21:85:db:9b:a2:91:84:9b:5c:c0:49:26:d5:2a:
         3a:db:de:0c:43:70:35:c1:38:41:dd:34:ad:6b:ec:d3:bb:97:
         fa:59:b7:15:4f:89:56:0d:5b:a9:f9:e6:78:70:4a:b4:95:73:
         94:1e:d5:8e:c7:1a:c7:df:48:df:7e:ef:9d:5e:f7:30:0b:ef:
         c5:2e:9f:30:90:ab:76:03:30:77:3a:43:62:71:a5:07:40:2b:
         75:9e:2c:91:41:fc:41:ac:73:86:86:fd:3d:67:2a:88:a7:18:
         c8:84:7e:7a:d0:07:56:5a:25:30:0d:fb:6f:78:d0:0c:ed:54:
         a9:fc:91:3b
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIUabQu0dHCDkdTAYvW+0RUgfETHSowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAxMTYxMzAxMTZaFw0yNzAxMTUxMzA2MTZaMDMxMTAvBgNV
BAMTKDA2RjY2RDU4MjU5RjJDQjNDMDE0NkJFRDVGNEIxRTc5QTg2OTg4RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC385CUZi70xFUzO3xBY9wPlh/U
bCQ+2nQv0ZGlPkY3MRiasLrTgyX4BMkTGiw2LCQI4T2vt6oGmoEfN6ce5ZF9UJIV
bLUS/lNO90505gDZJTlgwtXPCB2gS9YLA08rLHNHdw1SoUJOprZq6UZJhsABk+Zu
zAuTj5nB4ERpgsc640jfIfy8o6iJGzqyCzI6ObuVtn8ArACqq6YO8lZaRIiu7mWg
FgodCnENGvVVFV0hRHQQfm5y5/OaBtRjwnkMamspAY7eewSZE6wxF2upWekBv0vr
QVzMTIB+msrkpukbLhFQdfSq3MZoF6Xgt/zmLnt4nmC71JNCSWHaYZaUjfGXAgMB
AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQG9m1YJZ8ss8AU
a+1fSx55qGmI8jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXBX
VGVENzRLM2o2NzFMVTZ0dXJDeFlGWmhIaTZxUHpLTEhLOWcyRTF6YS8wLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXBX
VGVENzRLM2o2NzFMVTZ0dXJDeFlGWmhIaTZxUHpLTEhLOWcyRTF6YS8wLzA2RjY2
RDU4MjU5RjJDQjNDMDE0NkJFRDVGNEIxRTc5QTg2OTg4RjIubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB
/wQfMB0wDAQCAAEwBgMEAi3t8DANBAIAAjAHAwUAKARPJDAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMEGBMwDQYJKoZIhvcNAQELBQADggEBANqKK5pYa0QeECKsC8FE
StjgzxYxgEIW2BjHUWL4cLv8Sei3g2MCG+3nTQBy5kDeiFUl06POubkNw1jbn7to
zuuZlyN2bdoTcAxMetk2ZMsAkZdl6BmKO7gjHwu6RDsQpbD0x52uBrZ0FcX6xnvm
EKyp1Oqz3K+n/rAlX+vwTslZcgAhhdubopGEm1zASSbVKjrb3gxDcDXBOEHdNK1r
7NO7l/pZtxVPiVYNW6n55nhwSrSVc5Qe1Y7HGsffSN9+751e9zAL78UunzCQq3YD
MHc6Q2JxpQdAK3WeLJFB/EGsc4aG/T1nKoinGMiEfnrQB1ZaJTAN+2940AztVKn8
kTs=
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:24:45 2026 by rpki-client