This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/115E40F49FEFB97D6F6ACAAC06615378C9B54EA7.cer
File:                     115E40F49FEFB97D6F6ACAAC06615378C9B54EA7.cer (raw, json)
Hash identifier:          1UX2Qcxxk9pn2AMBHB4gIDeUefCuqIpcOfebt0vQsDA=
Subject key identifier:   11:5E:40:F4:9F:EF:B9:7D:6F:6A:CA:AC:06:61:53:78:C9:B5:4E:A7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       23435AE706408A3C572088DA621C042F6D9E201F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/115E40F49FEFB97D6F6ACAAC06615378C9B54EA7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Jan 2026 19:33:29 +0000
Certificate not after:    Tue 12 Jan 2027 19:38:29 +0000
Subordinate resources:    AS: 265890
                          IP: 131.196.4.0/22
                          IP: 2804:3f64::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 15:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:43:5a:e7:06:40:8a:3c:57:20:88:da:62:1c:04:2f:6d:9e:20:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 13 19:33:29 2026 GMT
            Not After : Jan 12 19:38:29 2027 GMT
        Subject: CN=115E40F49FEFB97D6F6ACAAC06615378C9B54EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9c:dc:ec:cf:69:f2:5e:64:8a:80:6a:c2:cd:
                    1f:a0:67:2a:4a:29:2b:e6:08:e6:57:f6:da:c5:17:
                    af:1b:47:e7:26:5b:b7:a9:ee:fb:d8:c4:5b:ab:3d:
                    e0:e3:81:a6:61:47:b5:67:ce:5e:22:25:bf:d3:24:
                    ea:e9:76:1e:39:3d:aa:30:28:66:ac:f7:3e:ae:33:
                    21:ad:8f:47:ea:10:ed:bd:f9:0a:1b:5c:ae:22:dd:
                    2f:4c:50:0b:f5:a1:9a:92:ee:4b:83:8d:d6:14:99:
                    15:15:74:61:6c:d1:f0:1d:c0:d5:b0:46:f8:79:9f:
                    d7:1d:43:ff:3a:aa:aa:55:10:8e:b8:43:71:db:14:
                    3e:c9:2b:10:fc:8a:ea:bd:f4:0a:e2:45:13:d9:d6:
                    32:5d:17:d7:c5:3f:ea:cc:a7:03:43:79:32:c4:9f:
                    fe:f8:d4:b1:5c:01:32:69:1d:f3:25:ef:85:13:26:
                    df:34:3a:96:ef:23:89:50:8c:c4:18:24:04:bb:50:
                    b4:10:69:8b:00:2e:64:f4:e7:5e:18:d8:30:54:f1:
                    da:7d:46:d8:9e:05:06:39:27:16:2b:06:af:ef:d0:
                    49:78:83:55:a7:2d:57:38:bc:7c:52:e9:36:29:bc:
                    65:16:14:27:3d:60:44:56:c9:4c:b3:bc:7c:7b:d0:
                    bb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:5E:40:F4:9F:EF:B9:7D:6F:6A:CA:AC:06:61:53:78:C9:B5:4E:A7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/115E40F49FEFB97D6F6ACAAC06615378C9B54EA7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.4.0/22
                IPv6:
                  2804:3f64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265890

    Signature Algorithm: sha256WithRSAEncryption
         76:93:41:11:2b:95:6c:0e:df:90:31:66:39:24:a9:e0:b6:16:
         7e:46:15:49:0b:44:6d:22:03:25:1c:e8:05:48:a9:a6:60:00:
         d0:41:24:33:a3:3d:29:20:f5:9f:79:5c:71:bb:3e:7f:c7:fb:
         fa:2b:6e:73:a3:b2:7b:e5:5c:91:84:e3:7d:3b:0a:15:72:01:
         99:11:c0:c0:7e:05:66:35:a2:d1:14:e0:73:b0:04:79:d4:ca:
         a5:85:29:97:88:c4:ea:0f:99:d9:19:a6:09:7d:bd:70:76:03:
         09:26:59:5d:d5:14:a0:d8:d1:f4:da:18:69:80:d3:b1:7c:da:
         a3:b7:36:8e:5a:21:b6:c4:42:e3:13:d3:67:a6:ef:cb:2f:86:
         97:d6:25:6d:66:b3:b5:a6:89:91:00:6f:97:db:37:7b:de:f2:
         07:7d:1e:89:33:41:a4:c3:54:25:c1:b1:a9:5d:a7:a4:e9:84:
         40:e4:ce:2b:6b:55:54:82:2c:d3:3c:b6:e8:67:e8:c9:83:e2:
         9a:1c:e9:61:c5:da:52:7a:aa:83:c9:b9:cc:fb:ec:e5:f1:2b:
         95:3e:34:c9:8f:1f:1d:56:d4:16:93:ba:99:b4:9b:1d:20:6d:
         2c:d6:87:46:28:5b:43:1a:3b:52:a9:d9:d4:c9:ad:5a:d3:bd:
         c9:44:19:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----