This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/16060258A7AB877DDF0F74E8E5882F3BA94305CA.cer
File:                     16060258A7AB877DDF0F74E8E5882F3BA94305CA.cer (raw, json)
Hash identifier:          YumYKchTOF4TntqRPyuKukRnCnUN2q6UH12W3ju2nXg=
Subject key identifier:   16:06:02:58:A7:AB:87:7D:DF:0F:74:E8:E5:88:2F:3B:A9:43:05:CA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6BEBF97C1012C34927CFFDF703F2D65D8763DE3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8eLNTegL9WXzmWhqiPU9vNNVypr4mEatFiGGAzwcaoqx/0/16060258A7AB877DDF0F74E8E5882F3BA94305CA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8eLNTegL9WXzmWhqiPU9vNNVypr4mEatFiGGAzwcaoqx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 03 Jan 2026 17:49:36 +0000
Certificate not after:    Sat 02 Jan 2027 17:54:36 +0000
Subordinate resources:    AS: 269488
                          IP: 45.187.228.0/22
                          IP: 2804:6568::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:eb:f9:7c:10:12:c3:49:27:cf:fd:f7:03:f2:d6:5d:87:63:de:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  3 17:49:36 2026 GMT
            Not After : Jan  2 17:54:36 2027 GMT
        Subject: CN=16060258A7AB877DDF0F74E8E5882F3BA94305CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:68:d5:a8:e0:98:48:73:1f:91:da:bd:07:19:
                    40:54:b9:75:f8:84:e3:c8:9a:69:08:62:dc:ff:ef:
                    76:d3:f6:cf:88:97:ed:eb:fc:45:76:01:88:ea:51:
                    24:60:70:94:33:29:01:b9:27:f4:1d:d8:ad:cf:b6:
                    88:5e:ef:56:80:86:55:0e:3f:92:83:de:54:c2:c7:
                    b3:ed:cc:6d:86:19:04:a6:a6:0c:eb:45:99:a6:78:
                    e8:1f:01:5f:6c:cc:35:9d:e0:fd:21:59:40:9f:27:
                    4a:d4:c2:5a:d1:b2:54:0d:e7:f8:a2:e7:6b:41:09:
                    1b:5f:97:4c:87:56:4a:2d:29:37:e9:73:ad:02:be:
                    4a:d8:1b:5c:5c:10:b7:c9:8c:b8:4e:e5:0e:da:29:
                    af:72:5f:54:d5:32:8a:f7:8f:7a:eb:b6:75:71:61:
                    13:c7:5a:ff:f0:65:e1:f5:f6:31:28:f7:25:f2:d3:
                    e5:a9:04:b6:30:75:a8:27:3b:df:17:a4:97:82:2f:
                    fe:20:df:61:c3:c3:8e:63:d7:84:22:f5:ab:1c:f3:
                    fc:a0:27:9f:fa:74:9b:5e:3d:6c:38:86:b6:76:c1:
                    ad:c3:91:aa:e2:61:13:f5:e3:02:ce:1b:c1:ff:80:
                    43:eb:fb:f9:3b:c3:72:aa:c0:5d:ba:e8:b7:be:cb:
                    5c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:06:02:58:A7:AB:87:7D:DF:0F:74:E8:E5:88:2F:3B:A9:43:05:CA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8eLNTegL9WXzmWhqiPU9vNNVypr4mEatFiGGAzwcaoqx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8eLNTegL9WXzmWhqiPU9vNNVypr4mEatFiGGAzwcaoqx/0/16060258A7AB877DDF0F74E8E5882F3BA94305CA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.228.0/22
                IPv6:
                  2804:6568::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269488

    Signature Algorithm: sha256WithRSAEncryption
         3e:21:b8:ba:b5:71:39:d1:45:a0:14:3f:10:e9:00:77:09:18:
         be:4c:d0:3e:5b:5d:35:44:d7:ec:c5:52:94:9b:41:8e:4f:44:
         8f:8c:27:11:70:cc:ad:e6:49:7f:64:71:83:d2:ff:76:6d:9e:
         89:c0:f8:29:36:a9:fc:ff:67:50:8c:25:32:8b:5e:ab:5f:5e:
         5d:3c:53:12:01:bc:1d:24:0c:aa:58:e3:ab:0f:ca:40:9f:f9:
         a1:bd:f2:7d:9f:a0:bd:b1:8d:6d:28:9e:fd:8c:63:d1:8f:82:
         dd:c0:de:01:2c:b3:51:d0:a4:5f:42:2a:eb:11:2d:6d:6a:32:
         b9:2d:b9:33:d7:64:4f:52:e8:6c:03:b3:c2:aa:54:04:43:6f:
         a4:a5:24:ce:9e:fc:44:f9:d6:dd:fa:75:35:0a:4a:18:62:36:
         69:27:73:1d:37:51:47:51:e4:71:10:f0:0c:15:87:c1:34:36:
         25:4c:87:08:18:22:7c:87:4f:cf:82:32:01:22:ef:b5:84:e9:
         93:20:73:e3:6c:63:21:94:7f:5b:21:9a:7b:d3:38:c2:09:33:
         90:26:bf:33:14:6e:09:a9:79:2b:f3:3b:d5:3b:13:91:54:05:
         46:f6:f3:8d:a6:aa:14:db:d9:2a:b7:ff:96:d9:d1:7c:ba:40:
         a5:94:0b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----