This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0DC62F2B097B3A61B85422B3DA085A4E9904CED9.cer
File:                     0DC62F2B097B3A61B85422B3DA085A4E9904CED9.cer (raw, json)
Hash identifier:          uj4zHzb+XAHdgq4vsQgqS9qacftk/ieTayTC2cHfsHA=
Subject key identifier:   0D:C6:2F:2B:09:7B:3A:61:B8:54:22:B3:DA:08:5A:4E:99:04:CE:D9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       55C5CC047B78056C2525246C1B620F3142E520E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/yXgZhVMENQBq7w5iQHDdBGLjuEhc9sruxD4BzQGg2Z1/0/0DC62F2B097B3A61B85422B3DA085A4E9904CED9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/yXgZhVMENQBq7w5iQHDdBGLjuEhc9sruxD4BzQGg2Z1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 08 Jan 2026 00:19:09 +0000
Certificate not after:    Thu 07 Jan 2027 00:24:09 +0000
Subordinate resources:    AS: 267503
                          IP: 192.141.252.0/22
                          IP: 2804:427c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c5:cc:04:7b:78:05:6c:25:25:24:6c:1b:62:0f:31:42:e5:20:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  8 00:19:09 2026 GMT
            Not After : Jan  7 00:24:09 2027 GMT
        Subject: CN=0DC62F2B097B3A61B85422B3DA085A4E9904CED9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:78:7b:1a:65:fe:62:f7:63:32:ec:b4:10:eb:
                    18:74:31:4e:35:bd:90:49:15:78:91:14:f9:fc:d6:
                    73:dd:6c:75:68:67:6a:a1:d9:ef:95:57:5c:25:a6:
                    f5:51:0b:ac:d8:06:fe:25:0a:91:4f:12:6e:e4:ef:
                    25:15:80:7d:70:31:a6:e0:6d:5b:11:b9:69:7c:43:
                    cc:a1:9f:e3:90:2e:ac:e3:3b:d0:79:c6:ac:ad:e8:
                    83:b9:63:ec:a2:9d:2d:c0:af:1b:b6:94:78:c6:42:
                    d8:82:8e:2b:e0:97:ac:46:76:57:71:f2:33:b2:f3:
                    f1:df:7d:bb:7b:ce:ff:92:4f:19:ef:27:1e:13:a1:
                    e3:64:21:bc:44:5e:24:9f:da:c9:bb:62:b2:61:9f:
                    e2:50:8d:dd:5a:26:83:11:f5:d3:9c:19:d7:af:13:
                    3d:13:ce:41:f9:4b:f2:d0:67:b3:aa:c3:3f:b4:8f:
                    26:4d:3f:44:c9:1f:7c:96:19:8b:ee:05:fa:e1:11:
                    de:fe:ea:da:c9:ac:5d:4d:9e:0b:d1:f2:30:dc:ce:
                    33:7c:26:cd:31:ed:49:08:63:30:e8:b5:8f:30:03:
                    8d:23:83:2a:15:bf:a2:2c:f1:9f:47:fb:19:a7:7a:
                    db:76:bd:5e:88:8e:66:52:68:48:0b:e6:95:63:d3:
                    fa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:C6:2F:2B:09:7B:3A:61:B8:54:22:B3:DA:08:5A:4E:99:04:CE:D9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/yXgZhVMENQBq7w5iQHDdBGLjuEhc9sruxD4BzQGg2Z1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/yXgZhVMENQBq7w5iQHDdBGLjuEhc9sruxD4BzQGg2Z1/0/0DC62F2B097B3A61B85422B3DA085A4E9904CED9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.252.0/22
                IPv6:
                  2804:427c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267503

    Signature Algorithm: sha256WithRSAEncryption
         42:5f:b4:80:74:e8:a1:0b:85:aa:3b:20:b1:19:75:57:86:5e:
         30:4b:96:70:98:4f:59:43:3c:57:fd:69:3e:f2:8d:64:97:9b:
         73:70:5b:f9:02:d0:2e:4f:82:88:1b:ea:ed:b3:3b:2d:e6:7e:
         2a:26:40:3c:bd:94:c0:a1:c6:7c:43:3c:42:1c:c9:1a:e6:7f:
         33:30:5e:22:5e:38:f2:6e:39:e9:2f:96:1e:f9:4e:db:86:2e:
         f8:9a:88:2c:9c:68:3a:af:22:cb:e9:c5:4a:51:a3:d8:16:e3:
         1f:8a:57:05:77:93:8e:7f:32:7b:05:82:cb:10:c7:25:96:4f:
         66:64:3f:9b:82:87:8a:f7:93:97:b8:01:3f:85:86:4f:9e:d4:
         63:92:8b:06:9b:49:a5:bb:dd:e8:32:01:14:e0:b1:46:30:d1:
         53:c4:03:eb:f6:4a:1e:96:ac:15:b5:c8:83:08:ca:f0:86:5a:
         0e:32:66:d5:2a:f6:47:c9:1b:df:bd:81:a7:b3:04:78:d0:16:
         64:83:27:c7:e8:d9:43:25:26:3c:14:f4:7b:e0:3a:ce:0b:3d:
         fe:e9:75:c8:45:e5:82:35:63:51:27:c8:10:c6:94:f8:49:f7:
         7d:e1:c7:29:82:ab:fb:7f:4f:54:01:e7:7b:e8:4e:3a:3f:fa:
         d5:99:44:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----