This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer
File:                     203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer (raw, json)
Hash identifier:          29OdsNRVfDFQvaiu8XkSqb1TZphhjVsTLgr5q0OIwWs=
Subject key identifier:   20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2D23EE183C34E9EFCC1C77DB3985361B48B3E494
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 24 Jan 2026 22:12:55 +0000
Certificate not after:    Sat 23 Jan 2027 22:17:55 +0000
Subordinate resources:    AS: 262299
                          IP: 177.54.240.0/20
                          IP: 200.108.160.0/22
                          IP: 2804:a8c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:23:ee:18:3c:34:e9:ef:cc:1c:77:db:39:85:36:1b:48:b3:e4:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 24 22:12:55 2026 GMT
            Not After : Jan 23 22:17:55 2027 GMT
        Subject: CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4d:2c:cd:c3:86:e3:ad:17:e5:ea:52:78:51:
                    5a:2d:f6:58:63:91:49:3b:90:54:7d:33:a4:3f:ed:
                    e8:72:31:75:79:60:4e:0f:38:cc:06:6f:53:79:f6:
                    bb:c6:76:62:02:58:2c:c2:5d:99:fc:96:d8:9e:1f:
                    1e:25:55:4c:67:3f:11:54:e4:b8:c6:da:fb:62:8d:
                    64:1f:6a:55:b6:bd:d9:c3:b0:13:3b:30:64:da:e9:
                    e8:53:70:e0:ca:e8:6c:99:9d:4e:83:83:f0:ad:aa:
                    00:39:dc:91:fe:23:d9:0e:e0:68:8c:6c:e0:c8:96:
                    38:32:59:d2:b6:45:15:4c:a6:79:c2:6c:7d:ae:a7:
                    a5:75:c8:2f:99:69:69:92:9f:86:e8:f5:d4:05:8b:
                    64:ca:04:cb:a8:f1:d7:a5:a0:08:12:62:0f:bf:2a:
                    d0:6d:0f:36:f5:c9:80:9f:ed:69:3a:59:3a:33:68:
                    fe:01:9d:3b:6b:9d:6d:d7:03:e1:d4:33:3f:2a:b2:
                    e1:49:f3:e8:60:0f:fa:a6:bf:5f:ec:0f:16:9e:80:
                    45:d1:6c:ab:23:a3:d0:b5:93:20:84:23:d7:a1:75:
                    03:65:9b:1d:bd:60:a2:b9:92:b4:ce:12:89:ab:63:
                    7e:60:52:e9:f4:ce:41:17:18:a6:1b:43:ab:63:15:
                    e8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.240.0/20
                  200.108.160.0/22
                IPv6:
                  2804:a8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262299

    Signature Algorithm: sha256WithRSAEncryption
         28:f7:2f:ed:c3:c5:8a:a9:49:03:8b:92:2d:31:29:4e:44:89:
         56:e8:1e:6e:87:55:e7:d3:c7:11:46:ed:65:a6:98:f7:d7:d6:
         32:02:1b:59:46:e4:1d:0d:e6:25:ca:2d:43:07:2b:34:03:1b:
         ad:fc:38:d8:38:c6:64:ea:a4:cb:b5:07:14:6c:e5:04:96:b8:
         9f:39:2c:c8:80:4a:8a:08:dd:66:95:1e:4f:93:ce:96:a2:ef:
         e1:6a:9a:ad:c6:2b:49:6f:4a:34:10:ea:88:4e:19:94:5d:72:
         f3:b9:59:f3:fb:3d:57:43:72:be:a2:a4:72:0e:5c:78:e5:6a:
         b6:f8:93:72:87:8d:1c:e3:67:69:85:95:fa:aa:1e:42:ad:5a:
         53:f2:cb:5e:bf:d8:d1:cc:8d:98:36:3d:fe:f5:cd:fe:b4:4c:
         0e:01:28:c8:7b:3a:b3:34:e3:7b:4e:8b:5a:91:d7:69:07:9a:
         8c:08:a8:39:db:0c:65:24:32:c2:4a:c1:ad:80:f3:45:51:cd:
         42:81:c7:47:f0:d5:f6:d7:ea:ec:2c:41:75:13:96:75:00:2d:
         4b:4d:14:10:f2:ba:38:cb:82:ec:c2:d7:89:2b:67:2b:84:d4:
         eb:dc:8b:30:e8:44:5b:de:24:03:64:57:81:87:b6:8b:2a:23:
         b9:12:e3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:12:13 2026 by rpki-client