This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.cer
File:                     114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.cer (raw, json)
Hash identifier:          sxaQiESwPQG28/KWFlBxjG+tnjG/ldKbGDXj7+UwrEM=
Subject key identifier:   11:4C:34:E7:02:D6:B3:C7:8D:B6:AD:0C:8B:6A:12:A4:F6:C9:62:F2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1435734CC28BD0A6DA364CC11C1E86B1F8C9818C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 24 Jan 2026 14:33:56 +0000
Certificate not after:    Sat 23 Jan 2027 14:38:56 +0000
Subordinate resources:    AS: 272570
                          IP: 2804:854c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 14:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:35:73:4c:c2:8b:d0:a6:da:36:4c:c1:1c:1e:86:b1:f8:c9:81:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 24 14:33:56 2026 GMT
            Not After : Jan 23 14:38:56 2027 GMT
        Subject: CN=114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f8:c7:34:3b:c2:15:66:78:39:5a:ba:20:f9:
                    c1:59:70:73:18:d7:71:51:e5:cc:5d:6c:ba:de:dc:
                    78:fb:50:76:d2:dd:0e:13:1f:26:ff:ed:ee:12:65:
                    7b:9a:6e:52:72:f5:f3:d5:48:e6:5d:54:1c:e1:f9:
                    41:7f:49:5d:cf:c0:1b:e8:4c:4e:2e:3a:15:02:c2:
                    3c:93:79:7a:03:be:73:ce:91:53:10:1f:93:ce:f4:
                    f5:d8:cf:1c:be:e3:7f:b1:a3:aa:ff:52:52:f7:82:
                    3f:04:ea:c9:2c:c2:3b:4f:a5:3b:1d:3e:47:11:da:
                    f2:23:5d:da:0c:14:9c:af:c1:89:f6:29:fd:12:2f:
                    fc:4c:63:e4:3d:32:bd:74:ac:66:e0:af:af:55:1b:
                    6e:f7:09:1f:d3:57:dc:0c:7f:a7:f6:00:b9:14:8c:
                    f7:3f:c0:e2:13:24:81:72:d4:81:36:88:49:73:71:
                    7d:5b:38:d6:15:2c:be:b4:18:12:5f:cb:25:82:dc:
                    5c:73:15:80:cc:99:e1:35:b9:e2:14:f2:6d:2d:47:
                    9e:2a:03:75:0a:1d:eb:5b:48:7b:e1:6d:a5:a2:d5:
                    44:96:a9:9f:b1:c7:ff:3b:97:4d:7e:cf:b1:b8:dc:
                    fa:79:7e:95:41:c8:f0:90:58:d6:81:d0:c7:41:2c:
                    46:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:4C:34:E7:02:D6:B3:C7:8D:B6:AD:0C:8B:6A:12:A4:F6:C9:62:F2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:854c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272570

    Signature Algorithm: sha256WithRSAEncryption
         4a:21:c2:0d:f1:7e:aa:f5:9d:47:36:84:5f:8f:1a:c5:82:4c:
         f9:7b:8c:fe:be:08:51:75:da:92:5e:6e:81:8c:b9:0a:1b:19:
         3c:99:07:63:62:8b:bd:38:ef:66:d7:35:4f:88:a6:f0:14:3f:
         16:84:fc:4a:43:e9:6c:fa:e3:77:2f:3a:57:b8:e6:9a:2f:3a:
         e9:68:63:60:8a:c1:ae:5e:6f:d3:29:ec:fa:d3:4f:0a:30:9c:
         ac:c8:85:45:bb:d0:b9:9d:39:a6:8b:47:19:85:2b:39:9b:34:
         ab:6e:b1:5f:0f:e1:62:2b:bb:70:ba:8e:03:b0:5f:db:ba:34:
         22:11:5c:34:ca:eb:42:d6:c6:db:e1:01:19:9b:b9:61:ba:c7:
         21:9d:8b:f0:82:62:8e:7a:13:f5:95:9a:f7:7f:22:4c:f4:87:
         69:60:a9:d4:8a:4c:21:85:19:5c:08:6e:c8:26:aa:85:2a:77:
         82:73:2d:0e:dd:47:9f:e0:3b:c6:0e:4b:ab:42:fe:ef:2d:c5:
         87:ea:f8:67:c4:43:84:1a:71:af:68:4f:63:5b:0d:21:bb:05:
         91:de:f4:73:da:5c:3d:d5:59:ad:bd:95:3e:8e:31:66:71:aa:
         4c:9d:43:27:82:c3:0a:26:77:00:cf:27:e2:95:33:93:63:b2:
         98:57:1f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----