This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer
File:                     117560A27F42885C52E66148007C2989B0339DAD.cer (raw, json)
Hash identifier:          dlXu0t5v8/ezL7BDVbxheUKZ5IcTNBA14IjA/7Y+MUM=
Subject key identifier:   11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       126F1B75978FB9567347C14CE7EB9181278F628D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 27 Dec 2025 23:39:47 +0000
Certificate not after:    Sat 26 Dec 2026 23:44:47 +0000
Subordinate resources:    AS: 61675
                          IP: 131.108.160.0/22
                          IP: 2804:1cc8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:6f:1b:75:97:8f:b9:56:73:47:c1:4c:e7:eb:91:81:27:8f:62:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 27 23:39:47 2025 GMT
            Not After : Dec 26 23:44:47 2026 GMT
        Subject: CN=117560A27F42885C52E66148007C2989B0339DAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a5:2a:af:4e:fd:4a:07:31:ec:1d:8b:c2:b2:
                    ca:85:00:0c:73:3d:8a:ed:44:fc:98:b8:f2:31:4c:
                    62:42:6b:89:bb:94:84:b0:4b:91:e4:f7:cc:d2:9a:
                    a9:51:65:8d:f0:66:d0:41:c3:ac:ea:78:e5:e4:5d:
                    a7:4d:68:e6:e2:7a:f6:36:04:86:72:13:79:f4:da:
                    b4:65:cd:a3:e7:a5:47:9f:bf:d5:b6:91:61:cb:4a:
                    41:b7:97:f7:1b:f4:f8:8e:65:92:26:bf:7b:61:e3:
                    22:fa:ec:e9:54:bd:5d:4c:2b:56:25:bc:86:02:f1:
                    28:c0:ae:59:d5:d4:dd:b3:c2:1b:c5:12:74:ed:a1:
                    4b:49:6d:71:dc:29:ec:c0:0a:0d:0b:b5:74:61:0b:
                    79:95:63:a2:59:b3:38:09:83:e7:34:55:6e:8f:c6:
                    2a:a5:3b:35:eb:c8:d7:7b:d5:e5:14:31:60:9d:b0:
                    cb:a6:4b:42:9b:f8:55:fd:03:d4:62:da:d5:d6:86:
                    f4:63:21:3b:a8:18:ce:f9:bb:1f:67:14:4f:60:a2:
                    14:c5:bc:9b:e1:13:b8:76:8f:a6:19:e7:e2:6d:0a:
                    07:4b:de:5e:34:71:f5:05:3e:67:75:c5:24:3f:5f:
                    38:96:2f:30:9f:2b:5a:ba:1c:61:42:51:f3:aa:91:
                    db:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.160.0/22
                IPv6:
                  2804:1cc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61675

    Signature Algorithm: sha256WithRSAEncryption
         13:36:40:00:94:21:35:c0:f1:7d:f9:20:89:d8:0c:b0:42:fd:
         37:49:69:ab:72:5e:43:57:88:10:ee:59:ac:97:af:b6:30:3f:
         2e:1e:5d:e5:28:38:fe:ba:82:07:4e:6f:16:22:2f:27:0a:e6:
         60:82:2f:1c:7b:f2:79:42:71:cf:ca:2f:16:13:7e:41:7f:34:
         ee:f5:0f:ff:e3:7e:4d:0f:ab:02:9f:33:e9:ea:b3:c6:a9:32:
         ac:32:3f:62:a7:b9:2a:16:44:4a:e3:f2:15:47:9d:1d:81:7d:
         d0:c3:7c:b3:26:4d:93:bd:0b:31:5f:86:c0:b8:1a:0a:2c:b3:
         9d:b9:1c:c6:60:3e:19:12:03:64:cd:79:2f:51:66:7c:67:c8:
         46:a6:6f:63:d9:b2:0f:b7:f6:d9:c6:46:0c:4a:7d:86:80:3a:
         e2:76:00:bc:cd:73:7f:28:bb:61:11:ed:34:89:68:a4:cb:d1:
         82:ca:7b:dc:bd:59:21:29:49:3b:ab:db:43:ac:b5:1e:65:c4:
         62:91:96:45:51:ed:a0:01:0a:56:5c:f4:f4:66:26:ae:d1:2d:
         b4:fb:49:ba:b9:45:f1:24:09:51:a8:16:83:65:6e:44:ef:84:
         e4:bd:c4:1a:e6:07:11:0d:91:01:5e:63:bc:63:30:14:53:cd:
         80:7a:22:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:04:40 2026 by rpki-client