This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1D9B75642BD157A7548EFEDEC8826EA245088ED6.cer
File:                     1D9B75642BD157A7548EFEDEC8826EA245088ED6.cer (raw, json)
Hash identifier:          C6/N21u3PXndHJ86Cax6XIEpfpJrAyrda2NfvbkpkYc=
Subject key identifier:   1D:9B:75:64:2B:D1:57:A7:54:8E:FE:DE:C8:82:6E:A2:45:08:8E:D6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5573B3C74AD3F189DA18D6D987072A314B496712
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/1D9B75642BD157A7548EFEDEC8826EA245088ED6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 18 Jan 2026 17:09:58 +0000
Certificate not after:    Sun 17 Jan 2027 17:14:58 +0000
Subordinate resources:    AS: 267573
                          IP: 45.70.20.0/22
                          IP: 2804:437c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:73:b3:c7:4a:d3:f1:89:da:18:d6:d9:87:07:2a:31:4b:49:67:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 18 17:09:58 2026 GMT
            Not After : Jan 17 17:14:58 2027 GMT
        Subject: CN=1D9B75642BD157A7548EFEDEC8826EA245088ED6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:a2:a5:c9:e7:49:87:0d:c8:35:14:04:b5:
                    ea:14:a3:98:32:17:75:36:13:d3:98:3a:d2:ed:a2:
                    c6:6e:fe:ad:f5:c5:d8:66:b1:6a:f7:44:35:37:b6:
                    93:56:c2:d4:66:9a:59:da:f5:60:7b:82:fa:0a:71:
                    9a:c1:90:d2:89:77:f7:81:06:d9:6f:d6:c5:30:70:
                    e6:21:b4:35:c5:a9:62:29:c4:0e:88:26:44:cf:bc:
                    1d:4d:ba:38:ed:f2:1b:8a:91:49:5d:db:27:a7:52:
                    dd:b6:9a:c9:7f:03:3a:24:66:e2:4d:99:29:7f:25:
                    3b:a3:66:52:c1:a4:89:cb:f5:80:bd:84:4f:d5:58:
                    e6:b9:b1:bf:ee:fa:91:66:d9:d6:ab:bb:81:e9:a6:
                    ab:b7:78:c6:05:95:a7:d2:97:68:80:d1:25:be:ef:
                    00:bf:be:58:21:54:d8:ec:4f:48:7f:ba:bd:4a:98:
                    78:6f:b2:77:23:21:1f:b9:00:a3:b1:7d:b9:86:55:
                    cc:5e:42:5e:7a:60:0f:f2:76:6a:6b:d6:51:2e:e0:
                    eb:9f:78:46:38:30:98:b4:5e:38:f3:7b:d4:10:37:
                    8f:98:03:57:3b:40:6f:4b:73:b1:76:59:d4:07:0f:
                    18:7b:67:1b:1b:b0:fe:a2:1c:01:26:f4:2e:ac:2e:
                    16:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1D:9B:75:64:2B:D1:57:A7:54:8E:FE:DE:C8:82:6E:A2:45:08:8E:D6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/1D9B75642BD157A7548EFEDEC8826EA245088ED6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.20.0/22
                IPv6:
                  2804:437c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267573

    Signature Algorithm: sha256WithRSAEncryption
         19:b7:2b:7d:4b:86:b2:6e:ef:be:03:8f:c7:a0:4f:b6:63:e2:
         63:1a:41:0a:33:e0:a2:d1:f0:d4:9a:37:55:0b:22:8e:31:3f:
         d5:b7:d3:e3:bb:3f:19:d7:1a:47:e4:5a:18:4d:86:1f:9c:5e:
         52:cc:38:79:58:65:3a:f7:8a:83:39:30:8b:f9:f3:99:85:71:
         14:1e:fc:54:d4:45:b9:99:ef:73:ef:70:45:f2:dc:55:96:05:
         07:98:b5:43:13:53:be:92:25:d8:ef:21:05:89:83:13:0c:8d:
         b8:ed:ba:2f:71:db:15:6b:90:bc:2f:ec:c6:9c:c7:f6:86:39:
         35:f7:76:d9:56:42:c0:06:98:6c:14:de:7e:41:40:1c:4d:68:
         49:02:3c:18:28:75:71:d6:02:8b:eb:c3:12:a6:74:b4:79:fd:
         c3:31:54:28:95:7c:36:88:c9:a8:b0:8e:c0:88:72:d7:2c:85:
         d5:98:e5:18:5d:f3:8e:68:87:cf:e9:74:ba:1f:d1:75:22:6a:
         5e:07:f2:7a:55:d9:d5:76:6a:24:3f:cf:c8:e6:5f:03:85:79:
         5a:d9:54:38:4d:30:48:ff:41:25:4a:fb:28:44:0e:81:7e:55:
         7a:06:00:12:27:c3:2c:80:0d:ed:ba:3a:43:b6:e0:f2:cd:05:
         05:01:83:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----